Privacy policy

Last updated: 19 March 2026

O&B Skin Pte. Ltd. (trading as “Ocean & berries”) (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data in accordance with applicable data protection laws, including Singapore’s Personal Data Protection Act 2012 (“PDPA”), and, where applicable, other relevant data protection laws in the jurisdictions where we offer our products or services.

This Privacy Policy explains how we collect, use, disclose, store, transfer, and otherwise process your personal data when you visit our website, place an order, shop with us in person, attend our retail pop-ups or events, sign up for our marketing communications, contact us, or otherwise interact with us online or offline (collectively, the “Services”). 

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy, including how we collect, use, disclose, and otherwise process your personal data as described in this Privacy Policy.

 

1. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data, as permitted or required by applicable law:

Contact information
Such as your name, email address, phone number, billing address, and shipping address.

Transaction and order information
Such as details of orders, purchases, returns, exchanges, deliveries, and related transaction history.

Payment-related information
Such as payment method, payment status, billing details, and transaction confirmation details. Payment card information is generally processed by third-party payment service providers and is not stored by us in full.

Account information
Such as login details, account preferences, and settings, where customer accounts are offered.

Communications and interaction information
Such as records of your communications with us and information you submit through forms, surveys, reviews, waitlists, event registrations, giveaways, or customer support requests.

Event and retail interaction information
Such as information relating to your participation in pop-ups, retail events, sampling activities, consultations, or similar brand experiences.

Technical and device information
Such as IP address, browser type, device information, cookies, identifiers, and website or app usage data.

Website and marketing interaction information
Such as information about how you interact with our website, advertisements, emails, and other digital content, including browsing behaviour, products viewed, items placed in cart, and similar activity.

We do not intentionally collect sensitive personal data unless reasonably necessary, lawful, and appropriate in the circumstances.

 

2. How we collect personal data

We may collect personal data from the following sources, as permitted or required by applicable law:

• Directly from you Including where you place an order, create an account, subscribe to marketing communications, complete forms, submit reviews, contact us, participate in events, visit our retail pop-ups, or otherwise provide personal data to us in connection with the Services.

• Automatically through your use of the Services Including through your device and browser when you access or interact with our website, digital content, or communications, and through the use of cookies, pixels, analytics tools, logs, and similar technologies when you use our website.

• From service providers and platforms Including service providers and platforms we use to operate our business, such as Shopify, Klaviyo, payment processors, logistics providers, analytics providers, marketing and customer relationship management platforms, technology vendors, and other third parties who collect or process personal data on our behalf or in connection with the Services.

• From business partners and third parties Including retail partners, event organisers, marketing and technology partners, and social media platforms, where you choose to interact with our brand through those channels or where such disclosure is necessary for the operation of the Services and permitted by applicable law.

• From publicly available information Including information that you choose to make publicly available or that is otherwise lawfully available, such as through public social media profiles or public events, where permitted by applicable law.

3. How we use personal data

We may collect, use, disclose, and otherwise process your personal data for the following purposes, as permitted or required by applicable law, including for the following purposes:

• Providing, operating, and improving the Services

Including to provide and administer the Services, process payments, fulfil orders, arrange deliveries, process returns and exchanges, manage customer accounts where offered, remember your preferences, manage waitlists, reservations, pop-ups, consultations, and events, enable reviews or similar features where available, personalise your experience, andimprove our products, Services, business operations, and customer experience

• Marketing and advertising

Including to send you marketing and promotional communications, launch updates, event invitations, and other brand communications where you have consented or where otherwise permitted by applicable law, and to measure, personalise, and improve our advertising and marketing activities, including on third-party platforms.

• Security and fraud prevention

Including to maintain, monitor, secure, troubleshoot, and improve our website, systems, and Services, authenticate accounts where relevant, detect, investigate, prevent, or respond to fraud, misuse, unlawful activity, security incidents, or other harmful conduct, and protect our rights, property, customers, and business operations.

• Communicating with you

Including to communicate with you about your purchases, orders, account, requests, enquiries, complaints, customer service matters, after-sales support, service notices, and operational updates.

• Legal and compliance purposes

Including to comply with legal, regulatory, tax, accounting, audit, and reporting requirements, respond to lawful requests, court orders, or legal process, investigate or participate in dispute resolution, litigation, or regulatory proceedings, enforce our terms and policies, and support corporate transactions such as financing, restructuring, mergers, acquisitions, or sale of business assets.

We will only collect, use, or disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances. Where required by applicable law, we will notify you of such purposes and obtain your consent. 

4. When providing personal data is necessary

Certain personal data is required for us to provide the Services to you, including to process orders, arrange delivery, handle payments, respond to enquiries, or administer promotions, events, or related activities.

Where you choose not to provide required personal data, we may not be able to fulfil your order, provide the requested Services, respond effectively to your request, or otherwise complete the relevant transaction or interaction.

5. Marketing communications

Where you have subscribed, consented, requested communications from us, or where otherwise permitted by applicable law, we may send you marketing and promotional communications, including by email and, where introduced in future and permitted by law, by SMS, phone, messaging platforms, or other channels.

These communications may include:

• product launches and restocks
• promotions and exclusive offers
• educational or editorial content
• event or pop-up invitations
• brand news and community updates

You may opt out of receiving marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us using the details set out below.

We may continue to send non-marketing communications where necessary, including communications relating to your orders, transactions, account, customer service matters, or operational updates.

6. Cookies, analytics, and advertising technologies

We and our service providers may use cookies including through third-party cookies, pixels, software development kits, tags, scripts, and similar technologies to:

• operate, maintain, and secure our website and Services
• remember your preferences and settings
• understand how visitors use our website and digital content
• analyse traffic, usage, trends, and performance
• measure the effectiveness of campaigns and communications
• personalise content and improve user experience
• deliver, optimise, and measure advertising on our website and on third-party platforms

These technologies may be provided by us or by third parties, including Shopify, analytics providers, advertising partners, and customer engagement platforms.

Depending on the laws applicable to you, certain disclosures of data through cookies or advertising technologies may be treated as targeted advertising, sharing, or similar regulated activity. You may manage cookie preferences through your browser settings, device settings, cookie consent tools, or other available controls.

7. Disclosure of personal data

We may disclose your personal data to third parties for legitimate business, operational, legal, or compliance purposes, subject to this Privacy Policy and applicable law. Such disclosures may include the following:

• Service providers and vendors We may disclose personal data to third parties who provide services to us or on our behalf, including ecommerce platform providers, payment processors, logistics and fulfilment partners, customer service providers, CRM and email or messaging platforms, analytics providers, cloud storage providers, hosting providers, IT support, and security providers.

• Shopify and related platform providers Where you interact with our online store, personal data may be disclosed to Shopify and its affiliates, contractors, or service providers as necessary to support store hosting, checkout, payment processing, fraud prevention, analytics, performance monitoring, security, and other platform-related functionality.
• Marketing, advertising, and technology partners We may disclose personal data to marketing, advertising, and technology partners that assist us in measuring campaign effectiveness, understanding customer engagement, personalising content, or delivering and evaluating advertising or communications, subject to applicable law and available consent or opt-out mechanisms.

• Business, retail, and event partners We may disclose personal data to retail partners, event organisers, activation partners, distributors, or other commercial partners where necessary to administer relevant promotions, events, retail activities, or related brand experiences.

• At your direction or with your consentWe may disclose personal data where you request or direct us to do so, or where you otherwise consent to the disclosure, including where third-party services, delivery providers, or social media integrations are involved.

• Professional advisers and legal compliance We may disclose personal data to lawyers, auditors, insurers, accountants, consultants, regulators, law enforcement agencies, courts, government authorities, or other third parties where required or permitted by law, including to comply with legal process, regulatory obligations, court orders, or lawful requests, or where necessary to enforce our terms, protect our rights, or protect the security or integrity of our Services and business operations.

• Corporate transactionsWe may disclose personal data in connection with an actual or proposed financing, investment, merger, acquisition, restructuring, business transfer, sale of assets, insolvency event, or other corporate transaction, including to buyers, investors, counterparties, and their advisers.

We do not sell personal data for monetary consideration. Depending on applicable law and the technologies used, certain disclosures relating to cookies, analytics, or advertising may be treated differently under applicable law.

8. Relationship with Shopify

Our online store is hosted and operated using Shopify’s ecommerce platform. When you access or use our online store, personal data you provide may be collected, processed, stored, or transmitted through Shopify and its service providers in order to support store functionality, hosting, checkout, payment processing, fraud prevention, analytics, security, and performance monitoring.

Shopify and its affiliates or service providers may process certain personal data in accordance with their own privacy policies and terms, including where they act as an independent service provider or platform operator.

Because Shopify and its service providers operate globally, your personal data may be transferred to or processed in countries outside your jurisdiction in order to provide and support the Services.

To learn more about how Shopify processes personal data, please refer to Shopify’s Shopify Consumer Privacy Policy. Depending on your jurisdiction and the nature of Shopify’s processing, you may also be able to exercise certain rights directly with Shopify through Shopify’s Privacy Controls portal.

9. Third-party websites, platforms, and services

Our Services may contain links to third-party websites, applications, social media platforms, or other services and platforms that are not operated or controlled by us. We are not responsible for the privacy, security, content, or practices of such third-party services, and the inclusion of such links does not imply our endorsement of them. You should review their applicable privacy notices and terms before providing personal data to them.

10. Overseas transfers

Because we use service providers, platforms, and partners that may operate in multiple countries, your personal data may be transferred to, stored in, or processed in countries outside the country in which you are located, including countries that may have different data protection laws from those in your home jurisdiction.

Where we transfer personal data across borders, we take reasonable steps intended to ensure that your personal data continues to receive a standard of protection comparable to that required under applicable law. These steps may include contractual protections, internal safeguards, organisational measures, security controls, and other lawful transfer mechanisms where appropriate.

11. Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as otherwise required or permitted by law.

This may include retaining personal data for purposes such as:

• completing transactions and fulfilling orders
• customer service and relationship management
• warranty, returns, and dispute handling
• fraud detection and prevention
• internal reporting, accounting, and audit
• tax, regulatory, and legal compliance
• enforcing our agreements and protecting our rights, and resolving claims

When personal data is no longer reasonably required, we will take reasonable steps to delete, destroy, anonymise, or de-identify it.

12. Protection of personal data

We implement reasonable administrative, physical, and technical measures designed to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.

However, no method of transmission over the internet, electronic storage system, or security measure is completely secure. Accordingly, we cannot guarantee absolute security of any information.

13. Children’s data

Our Services are not directed to children or minors under the age at which they may lawfully provide consent under applicable law. We do not knowingly collect personal data from children in a manner that requires parental or guardian consent unless such consent has been obtained in accordance with applicable law.

Where we become aware that personal data of a child has been collected inappropriately, we will take reasonable steps to delete it.

14. Your rights and choices

Subject to applicable law, you may have the right to:

• request access to personal data we hold about you
• request correction of inaccurate or incomplete personal data
• withdraw consent where our processing is based on consent
• request deletion of personal data in certain circumstances
• opt out of receiving marketing communications

These rights are not absolute and may be subject to legal exceptions, limitations, and verification requirements.

Where you submit a request, we may require information to verify your identity and authority before acting on the request. Where permitted by law, we may decline or limit a request.

If you withdraw consent or object to certain processing, we may not be able to continue providing some products, services, benefits, or features to you where the relevant personal data is required for those purposes.

15. Complaints

If you have any questions, concerns, or complaints about how we handle your personal data, please contact us using the details below.

Where applicable, you may also have the right to make a complaint to the relevant data protection or privacy regulator in your jurisdiction.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, Services, legal obligations, or privacy practices. The updated version will be posted on this page with the revised “Last updated” date.

17. Contact us

If you have any questions about this Privacy Policy, our privacy practices, or would like to make a request regarding your personal data, please contact us at:

Ocean & berries
Email: info@oceanandberries.com
Address: 10 Anson Road, #33-03, Singapore 079903