Privacy Policy

Last updated: 3 August 2026

Roast Swift Pro Pte. Ltd. ("we", "us", "our") operates the specialty coffeehouse at 22 Yong Siak Street, #01-01, Singapore 168654, and the website roastswiftpro.life. This Privacy Policy explains how we collect, use, disclose and protect personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore and guidance issued by the Personal Data Protection Commission (PDPC).

1. Organisation identity

Data controller: Roast Swift Pro Pte. Ltd., 22 Yong Siak Street, #01-01, Singapore 168654. General enquiries: [email protected]. Data protection enquiries: [email protected]. Phone: +65 6972 8451.

2. Personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

• Contact form data: name, email address, message content and enquiry type submitted via contact.php.
• Communication data: correspondence you send to [email protected] or [email protected].
• Technical data: IP address, browser type, device information and server logs generated when you visit our website.
• Cookie data: preferences stored when you interact with our cookie banner, as described in our Cookie Policy.
• In-venue data: if you visit our Singapore coffeehouse, we may receive your name and contact details when you book a group cupping table or leave a message at the bar.

We do not collect sensitive personal data through this website unless you voluntarily include it in a free-text message. We ask that you avoid sending health, financial or other sensitive information via the contact form.

3. Purposes of collection, use and disclosure

We collect and use personal data for the following purposes:

• Responding to visit enquiries, group cupping requests, brew programme questions and general messages submitted through our contact form.
• Operating and maintaining roastswiftpro.life, including security monitoring and troubleshooting.
• Complying with applicable laws, regulations and lawful requests from authorities in Singapore.
• Improving our specialty coffeehouse services and website content based on aggregated, non-identifying usage patterns where analytics cookies are consented to.
• Managing cookie preferences and honouring your choices under our Cookie Policy.

We do not sell personal data to third parties. We do not use your contact details for unrelated marketing unless you have given separate, explicit consent.

4. Legal bases and consent

Under the PDPA, we rely on consent, contractual necessity and legitimate interests as appropriate. When you submit our contact form, you must tick the PDPA consent checkbox confirming that you agree to our processing of your data to respond to your enquiry. This consent is not pre-selected. You may withdraw consent by emailing [email protected]; withdrawal does not affect processing that occurred before withdrawal, and we may retain certain records where required by law.

5. Disclosure to third parties

We may disclose personal data to:

• Email and hosting service providers that process data on our behalf under contractual confidentiality obligations.
• Professional advisers (legal, accounting) where necessary and subject to duty of confidence.
• Regulatory or law enforcement bodies when required by Singapore law or court order.

Third-party embeds on this site — specifically the Google Maps iframe on contact.php — may collect technical data independently. Google operates under its own privacy terms. See Section 9 below.

6. Retention

Contact form submissions are retained for up to twenty-four months after the enquiry is resolved, unless a longer period is required for legal, accounting or dispute-resolution purposes. Server logs are retained for up to twelve months. Cookie preference records are stored for up to six months, consistent with our cookie banner notice. When data is no longer needed, we delete or anonymise it using reasonable technical measures.

7. Individual access and correction rights

Under the PDPA, you have the right to request access to personal data we hold about you and to request correction of inaccurate or incomplete data. Submit requests to [email protected] with sufficient detail for us to identify your record. We respond within thirty days where practicable. A reasonable administrative fee may apply for manifestly unfounded or excessive requests, as permitted under PDPA guidance from the PDPC.

8. Security

We implement appropriate administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification or disposal. Measures include HTTPS transport encryption, access controls on operational systems, server-side validation on contact form processing and error logging without exposing personal data in public responses. No method of transmission over the internet is completely secure; we encourage you to use accurate contact details and avoid sending confidential information through free-text fields.

9. Third-party embeds — Google Maps

Our contact page embeds an interactive map served by Google Maps. When you load contact.php, your browser requests resources from Google servers. Google may collect IP address, device information, interaction data and cookies according to its own policies. We do not control Google's processing. You can limit exposure by avoiding the map section, using browser privacy settings or blocking third-party cookies — note that blocking may prevent the map from rendering. For Google's privacy practices, refer to policies.google.com/privacy.

10. Cross-border transfers

Our hosting and email providers may process data in Singapore and other jurisdictions. Where personal data is transferred outside Singapore, we take steps reasonably required under the PDPA to ensure recipients provide a standard of protection comparable to the PDPA, including contractual clauses where applicable.

11. Children

Our website and specialty coffeehouse services are directed at a general audience. We do not knowingly collect personal data from individuals under thirteen without parental consent. If you believe a child has submitted data to us, contact [email protected] and we will take appropriate steps to delete it.

12. Data breach notification

In the event of a data breach likely to result in significant harm or affect a significant number of individuals, we will assess notification obligations under the PDPA and PDPC guidance and notify affected individuals and the Commission where required.

13. Contact for data matters

Data Protection Contact: [email protected]
Roast Swift Pro Pte. Ltd., 22 Yong Siak Street, #01-01, Singapore 168654
Phone: +65 6972 8451

If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC) in Singapore through pdpc.gov.sg.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top will change accordingly. Material changes will be posted on this page. Continued use of the website after changes constitutes acknowledgement of the updated policy.

15. Related documents

See also our Cookie Policy, Terms of Use and Legal information.