Privacy policy
This Privacy Policy explains how MANOA Co.,Ltd. ("we", "us", "our") collects, uses, discloses and protects personal data when you use our online store located at https://shop.manoa-group.com (the "Site") and when we provide our products and services, including the sale and delivery of Wagyu and other food products to customers in Singapore and other countries.
We are committed to complying with the Personal Data Protection Act 2012 of Singapore ("PDPA") and other applicable data protection laws.
Data Controller / Contact Details
The data controller is:
MANOA Co.,Ltd.
14F, Tokyo Square Garden, 3-1-1 Kyobashi, Chuo-ku,
Tokyo 104-0031, Japan
Email: Contact Us
Data Protection Officer (DPO): DPO Email
Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data: name, salutation, date of birth (if required for verification), nationality.
- Contact data: email address, phone number, billing and shipping address.
- Order and transaction data: products ordered, purchase history, payment status, delivery details.
- Payment-related data: limited payment information provided by payment processors (we do not store full credit card numbers).
- Technical data: IP address, browser type, device information, cookies and similar technologies on our Site.
- Marketing preference data: your preferences for receiving marketing communications.
Purposes and Legal Basis for Processing
We collect, use and disclose personal data for the following purposes:
- To register and manage your customer account.
- To process and fulfil your orders, including payment processing, packing, export procedures and delivery to your address.
- To communicate with you about your orders, deliveries, returns, refunds and customer support requests.
- To manage our relationship with you, including responding to enquiries and handling complaints.
- To send you marketing communications about our products and promotions, where you have given consent or where permitted by law.
- To comply with legal and regulatory requirements, including tax, customs and food safety obligations.
- To maintain the security and proper functioning of our Site, prevent fraud and manage risk.
Under the PDPA, we only collect, use and disclose personal data with your consent, or where such collection, use or disclosure is required or authorised by law, or is otherwise permitted under the PDPA.
Obtaining and Withdrawing Consent
By providing your personal data to us and using our Site or services, you consent to our collection, use and disclosure of your personal data for the purposes set out in this Privacy Policy.
You may withdraw your consent at any time by contacting our DPO at DPO Email. Please note that if you withdraw consent for essential purposes (for example, processing and delivering your order), we may not be able to provide or continue to provide certain products or services to you. We will inform you of the likely consequences before we process your request for withdrawal of consent.
Notification of Purposes
Where required by the PDPA, we will notify you of the purposes for which your personal data is being collected, used or disclosed at or before the time we collect it, or as soon as reasonably practicable thereafter.
Access and Correction Rights
Subject to the exceptions under the PDPA, you have the right to:
- Request access to personal data that we hold about you and information about how we have used or disclosed that data during the past 12 months.
- Request correction of any inaccurate or incomplete personal data.
You may submit your request by contacting our DPO at DPO Email. We may charge a reasonable fee for processing access requests as permitted by law and will inform you of the fee before proceeding. We will respond to your request within a reasonable time in accordance with the PDPA.
Accuracy and Updating of Personal Data
We will make reasonable efforts to ensure that personal data we collect, use or disclose is accurate and complete, especially where it is used to make decisions that affect you or is disclosed to another organisation. Please keep your information up to date by logging into your account or by contacting us when changes occur.
Retention of Personal Data
We will retain your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable laws (for example, tax and accounting obligations). When personal data is no longer needed, we will delete, anonymise or otherwise cease to retain it in a secure manner.
Protection and Security
We take reasonable security measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. Such measures may include access controls, encryption, secure servers and staff training. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Disclosure and International Transfers
We may disclose your personal data to the following categories of recipients, on a need-to-know basis:
- Our group companies and affiliates involved in order processing, packing and shipment.
- Logistics partners, carriers and customs brokers for export and delivery of your orders.
- Payment service providers, banks and financial institutions for payment processing and fraud prevention.
- IT service providers, hosting providers and other vendors who support our Site and systems.
- Professional advisers such as auditors, lawyers and tax consultants.
- Regulators, authorities and law enforcement agencies where required by law.
Because our company and many of our systems are located in Japan, your personal data may be transferred and processed overseas. Where we transfer personal data out of Singapore, we will take appropriate steps to ensure that the recipient provides a standard of protection for personal data comparable to that required under the PDPA.
Direct Marketing and Do Not Call
We may send you marketing communications about our products, promotions and events via email, SMS or other channels where you have given consent or where permitted by law. You may opt out at any time by using the unsubscribe link in our messages or by contacting us.
If we send marketing messages to a Singapore telephone number, we will comply with the requirements of the Do Not Call provisions under the PDPA, including checking the relevant registers where applicable.
Cookies and Similar Technologies
We use cookies and similar technologies to improve the functionality of our Site, understand how visitors use it, and personalise content and offers. You can modify your browser settings to block or delete cookies, but some features of the Site may not function properly if cookies are disabled. More details about our use of cookies may be provided in a separate Cookie Policy.
Data Breach Notification
In the event of a data breach involving personal data under our control, we will assess the impact in accordance with applicable laws. Where required by the PDPA, we will notify the Personal Data Protection Commission of Singapore and the affected individuals as soon as reasonably practicable.
Children’s Personal Data
Our Site and services are not primarily directed at children under the age of [e.g. 16]. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us so that we can take appropriate steps.
Third-Party Websites
Our Site may contain links to third-party websites. We are not responsible for the privacy practices of such websites. We encourage you to review the privacy policies of those sites before providing any personal data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our Site with the "Last updated" date. We encourage you to review this Policy periodically.
Contact and Complaints
If you have any questions, requests or complaints regarding this Privacy Policy or our handling of your personal data, please contact our DPO at:
MANOA Co.,Ltd.
14F, Tokyo Square Garden, 3-1-1 Kyobashi, Chuo-ku,
Tokyo 104-0031, Japan
Email: DPO Email
If you are not satisfied with our response, you may also lodge a complaint with the Personal Data Protection Commission of Singapore.