This policy explains how Bastille (“we/us/our”) handles personal data in Singapore, including orders placed through third-party ordering/POS platforms. We comply with the Personal Data Protection Act 2012 (PDPA).
When you place an order, you are interacting with a third-party platform (e.g., an ordering/POS app or payment gateway).
- Those platforms are independent data controllers of the data you provide on their sites/apps and process your payments under their own privacy policies and terms.
- Bastille receives only the information necessary to prepare and fulfil your order (e.g., items ordered, name, contact, delivery/pick-up details). We do not receive or store your full card information.
- Order & fulfilment data: items, quantities, timing, notes/allergens you share, pick-up/delivery preferences.
- Contact details: name, phone, email, delivery address (where applicable).
- Transaction metadata: order IDs, amounts, and status (no full card PAN).
- Communications: messages related to your order and after-sales support.
- Prepare and fulfil orders; provide customer support.
- Handle issues (wrong/missing/damaged items) and refunds via the platform.
- Internal analytics (e.g., menu planning, demand forecasting).
- With consent, send our own marketing updates or promotions (you may opt out anytime).
We may share your data with:
- The third-party ordering/POS platform (two-way, as needed for fulfilment and support).
- Delivery partners engaged by us or the platform.
- IT/hosting service providers supporting our systems.
- Regulators or law enforcement where required by law. All vendors we engage are bound by confidentiality and appropriate data-protection safeguards.
Payments are processed by the platform or its payment gateway. Bastille does not store your full payment card details. For payment-card rights or charge-backs, please refer to the platform/gateway’s terms.
If a platform or our service providers store/process data overseas, we take reasonable steps to ensure recipients provide a standard of protection comparable to the PDPA.
We retain the order and contact data we receive only as long as necessary for fulfilment, support, legal, and audit purposes, after which we securely delete or anonymise it.
You may request access/correction of the data we hold. For marketing sent by us, you can withdraw consent at any time. For data held by the platform, please contact the platform directly.
Our website may use cookies for basic functionality and analytics. The third-party platform will have its own cookie/tracking practices—please review their cookie notice.
For PDPA/data enquiries to Bastille:
Email: hello@bastille.com.sg
Address: 261 Joo Chiat Road, Singapore 427515
Note: Online orders and payments are processed on a third-party ordering/POS platform. You’ll be redirected to complete checkout under the platform’s terms and privacy policy.
.webp)
