Personal data protection notice

1. Organisation identity

RoastSpark Pte. Ltd. (UEN 202618473K) operates the specialty coffee café at 28 Blair Road, #01-02, Singapore 089928, and the website roastspark.pro. Contact: [email protected] / +65 6225 3841. For data protection matters write to [email protected] and mark the subject “PDPA / DPO”.

We run a roast-forward coffeehouse: espresso, filter coffee, pour-over, batch brew, pastry pairings, retail beans and seating for walk-in guests. This policy covers personal data collected online and, where relevant, offline when you contact us about café services.

2. Purposes of collection

We collect personal data to respond to tasting visit enquiries, private cupping requests, retail bean or catering questions, and general café messages; to manage bookings where offered; to improve website reliability and security; to comply with law; and to send operational updates you request. We do not sell personal data. We do not use café enquiry data to pitch marketing-agency services, fireworks products, cannabis goods, or finance courses — those are outside our business.

When you stand at our Blair Road counter, we may process limited information you volunteer (for example allergen notes you ask us to remember for that visit). Such notes are used only to serve you safely during that interaction unless you ask us to retain a preference for a future booked tasting.

3. Consent bases and notice

For website forms, we rely on consent you give by ticking the consent_pdpa checkbox (never pre-ticked) and submitting the form. You may withdraw consent by emailing [email protected]; withdrawal does not affect processing already completed lawfully. Where PDPA allows, we may also process data where necessary for a contract you request (for example confirming a private tasting time) or where required by law.

If you contact us by phone or email without the web form, we will treat your message as a request for café information and handle your contact details for that purpose, providing notice of this policy via reply where practical.

4. Data we handle

Typical enquiry data includes name, email address, phone number if provided, message content, preferred visit timing, and consent status. Technical data may include IP address, browser type, device category, pages viewed, and cookie identifiers as described in our Cookies Policy. We do not require NRIC for ordinary café visits. Payment card data for in-café purchases, if any, is processed by payment providers at point of sale under their terms; this website does not collect card numbers.

Please avoid sending sensitive medical details beyond what is needed for allergen discussion. We are a coffee café, not a clinic; we do not provide medical advice.

5. Enquiry and contact handling

Messages submitted through send.php are transmitted to our operations mailbox (including [email protected] for form routing) with an Asia/Singapore timestamp and a subject prefix identifying RoastSpark. Access is limited to staff who need to reply. We keep enquiry threads long enough to complete your request and for reasonable follow-up, then archive or delete according to our retention schedule.

6. Data Protection Officer contact

Write to [email protected] with “Data Protection Officer” in the subject line, or post to RoastSpark Pte. Ltd., 28 Blair Road, #01-02, Singapore 089928, Attention: DPO. We aim to acknowledge requests within a reasonable period and respond to access or correction requests in line with PDPA timelines.

7. Retention

Contact form records are generally retained up to twenty-four months after the last meaningful correspondence, unless a longer period is required for legal claims, accounting, or safety incidents. Cookie consent choices are stored locally in your browser for up to six months as described on the cookie banner. Server logs for security may be kept for a shorter rotating window. When retention ends, we delete or irreversibly anonymise data where feasible.

8. Access and correction rights

You may request access to personal data we hold about you, or correction of inaccurate data, subject to PDPA exceptions. Provide enough detail for us to verify your identity and locate the records. We may refuse frivolous or vexatious requests as permitted by law and will explain our reasons.

9. PDPC contact

If you have a complaint about our handling of personal data, contact us first so we can try to resolve it. You may also contact the Personal Data Protection Commission (PDPC) Singapore via the channels published on the PDPC website for guidance or formal complaints.

10. Cookies and similar technologies

We use strictly necessary cookies to operate the site and remember essential preferences such as cookie consent. Optional analytics and preference cookies load only with consent. Details, durations and vendor notes appear in our Cookies Policy. You can Accept all, Reject all, or Customise via the banner; choices are stored for up to six months.

11. Security

We apply administrative and technical measures appropriate to a small café organisation: restricted mailbox access, HTTPS-ready hosting, least-privilege handling of enquiry exports, and staff reminders not to forward guest data into unrelated chats. No method of transmission is perfectly secure; please avoid sending passwords or payment card numbers through the contact form.

12. Cross-border transfer and sub-processors

Our hosting, email and analytics vendors may process data in Singapore or other jurisdictions. Where data leaves Singapore, we take appropriate steps to ensure a comparable standard of protection consistent with PDPA expectations, including contractual clauses where applicable. Sub-processors are limited to infrastructure and communication tools needed to run the website and reply to café enquiries.

13. Children

Our website is aimed at adults organising café visits. If you believe we have collected personal data from a child without appropriate consent, contact [email protected] and we will delete it where required.

14. Third-party links

Links to maps, transport or social pages are outside our control. Their privacy practices are governed by their own policies.

15. Change-log

21 July 2026 — initial publication for roastspark.pro reflecting PDPA-aligned café enquiry handling, cookie banner practices, DPO contact and retention defaults for RoastSpark Pte. Ltd.

We may update this notice as our specialty coffee café operations or systems change. The “Last updated” date at the top will change accordingly. Material changes will be highlighted on this page.

16. Café context reminder

RoastSpark is a specialty coffee café. Personal data is processed to support roast-board enquiries, seating questions, allergen conversations you initiate, and honest craft service — not to market unrelated industries. Photos on the site are illustrative of our space and drinks.

Questions: [email protected] · [email protected] · +65 6225 3841 · 28 Blair Road, #01-02, Singapore 089928.

17. Staff training and internal access

Only café managers and designated bar leads access the enquiry mailbox. Staff are instructed not to paste guest personal data into public channels. Printed tasting sheets from private cupping, if any, are stored securely and shredded after the retention period. When a contractor helps with website maintenance, access is time-limited and logged where the host allows.

18. Marketing communications

We do not operate a bulk promotional email list by default. If we ever launch an optional newsletter about roast board updates, we will ask for separate consent and include an unsubscribe method. Transactional replies to your enquiry are not marketing. We will never frame RoastSpark communications as fireworks offers, cannabis promotions, agency sales funnels or investment tips.

19. CCTV and on-premise notes

If CCTV is installed for safety at 28 Blair Road, signage will indicate recording. Footage is used for security and incident review, retained for a limited period, and not used for unrelated profiling. Verbal allergen notes you give at the counter are for that service moment unless you ask us to record a preference for a booked tasting.

20. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects about you. Form routing is administrative only.

21. Breach notification mindset

If we become aware of a notifiable data breach affecting personal data we hold, we will assess impact and notify affected individuals and/or the PDPC as required under Singapore law, and document remediation steps.

More questions about how a specialty coffee café handles personal data are welcome at [email protected]. We would rather answer plainly than hide behind vague statements.

22. Summary for guests

RoastSpark Pte. Ltd. collects enquiry data to answer questions about our specialty coffee café on Blair Road. We rely on unticked consent checkboxes for web forms, keep a DPO channel at [email protected], retain messages only as long as needed, honour access and correction rights under the PDPA, and point guests to the PDPC if needed. Cookies are optional beyond the strictly necessary set. We do not sell personal data. We roast and brew coffee — we do not use your details to pitch unrelated industries. If anything in this notice is unclear, ask us in plain language and we will clarify how a Singapore coffeehouse handles personal data in practice, including how tasting visit requests, retail bean questions and allergen conversations you initiate are documented.

End of privacy notice for roastspark.pro — last reviewed 21 July 2026 by café management for PDPA alignment with day-to-day specialty café operations, counter service realities, and website form routing through our Asia/Singapore timestamped mail handler.