About this Privacy Policy
This Privacy Policy describes how COLLBINE PTE. LTD. (UEN: 202600319E), located at 254 Ang Mo Kio Avenue 4 #10-143, Kebun Baru View, Singapore 560254 ("Collbine", "we", "us", or "our"), collects, uses, discloses, and protects your personal data when you use the Collbine mobile application ("App") and the website at https://collbine.com ("Website"), collectively the "Platform".
We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
1. Personal Data We Collect
We may collect the following personal data. Account information includes phone number, email address, date of birth, and gender. Technical and device information includes device type, operating system, app version, device identifiers, and IP address. We may collect approximate location data if you enable it on your device. Usage and activity data includes QR scan history, loyalty stamp activity, reward redemption history, in-app interactions, and analytics event data.
2. How We Collect Data
We collect personal data when you register an account, log in via Firebase Authentication, scan merchant QR codes, redeem rewards, enable device permissions, interact with the Platform, or contact customer support. Certain technical and usage data is collected automatically through integrated analytics tools.
3. Purpose of Collection
We use personal data to create and manage user accounts, authenticate login credentials, operate loyalty and Scan-to-Win features, validate reward eligibility, prevent fraud and abuse, send push notifications, improve system performance and user experience, conduct analytics and service optimisation, and comply with legal and regulatory obligations. We will not use personal data for unrelated purposes without your consent unless permitted under the PDPA.
4. Third-Party Service Providers
We engage third-party service providers to operate the Platform. For cloud hosting we use Amazon Web Services (AWS) in the Singapore region to host application infrastructure and databases. For authentication and analytics we use Firebase Authentication and Firebase Analytics (by Google LLC). Firebase services may process authentication and usage data, and Google may process certain data on servers located outside Singapore. Where personal data is transferred outside Singapore, we take reasonable steps to ensure that the receiving organisation provides a standard of protection comparable to the PDPA. We do not sell personal data to third parties.
5. Disclosure to Merchants
When you redeem rewards, limited necessary information may be made visible to the participating merchant for verification purposes (for example, reward confirmation status). Merchants do not have access to your full personal profile unless explicitly required for redemption validation.
6. Cross-Border Transfers
While core infrastructure is hosted in the AWS Singapore region, certain third-party service providers (for example, Firebase) may process data outside Singapore. We implement contractual and technical safeguards to ensure that such data is protected to standards comparable to Singapore's PDPA.
7. Data Retention
We retain personal data while your account remains active, as necessary for fraud prevention, and as required for legal compliance. If you delete your account, loyalty stamps and rewards are permanently deleted. Certain minimal records may be retained for regulatory or security purposes.
8. Security Measures
We implement reasonable administrative, physical, and technical safeguards, including secure cloud hosting (AWS Singapore), access control restrictions, encrypted transmission where applicable, and authentication security mechanisms. However, no online system is completely secure.
9. Your Rights Under PDPA
Under Singapore law you may request access to your personal data, request correction of inaccurate data, and withdraw consent (subject to legal limitations). Requests may be submitted to support@collbine.com. We may require identity verification before processing requests.
10. Withdrawal of Consent
You may withdraw consent for marketing communications via your device notification settings, and for certain optional permissions (for example, location services). Withdrawal may limit certain Platform functionalities.
12. Children's Data
The Platform is intended for users aged 13 and above. If we become aware that personal data of a child under 13 has been collected without valid consent, we will take reasonable steps to delete such data.
13. Updates to This Policy
We may update this Privacy Policy from time to time. Revised versions will take effect upon publication on the Platform. Continued use of the Platform constitutes acceptance of the updated Policy.
14. Contact Information
For questions about this Privacy Policy or your personal data, contact COLLBINE PTE. LTD. at 254 Ang Mo Kio Avenue 4 #10-143, Kebun Baru View, Singapore 560254, or by email at support@collbine.com. Our appointed Data Protection Officer may be contacted at support@collbine.com.