Privacy Policy
Effective date: 8 September 2025
Entity: Genwell (a brand of Gemstory World Pte. Ltd.)
UEN: 201841257K
Website: https://genwellasia.com
Gemstory World Pte. Ltd. (“Genwell”, “we”, “us”, “our”) is committed to protecting your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your Personal Data when you interact with us online or offline.
By using our services or providing Personal Data to us, you agree to the practices described below.
1) Personal Data we collect
Depending on your interactions with us, we may collect:
- Identification & contact details: name, email address, phone number, postal address.
- Account & transaction data: login details, order history, invoices, delivery information.
- Payment information: payment method, transaction identifiers. (Card data is processed by our payment processors; we do not store full card details.)
- Device & usage data: IP address, browser type, device identifiers, cookies, pages viewed, interaction logs.
- Communications: enquiries, support requests, marketing preferences, survey responses.
- Media submissions (if any): photos, reviews, or other content you choose to provide.
We typically collect data directly from you, through our website, forms, chat or email; and indirectly via cookies/analytics or from third-party service providers that support our operations.
2) Purposes of collection, use and disclosure
We collect, use and/or disclose your Personal Data for the following purposes:
- Service delivery: to create/manage accounts, process orders, provide customer support, fulfil deliveries, and handle returns/warranty.
- Payments & fraud prevention: to process payments via PCI-DSS–compliant processors and prevent, detect, and investigate misuse or fraud.
- Communications: to send service messages (order updates, policy changes), and—where permitted—marketing messages.
- Personalisation & improvements: to analyse site/app performance, enhance features, and improve products and services.
- Legal & business needs: to comply with laws, respond to lawful requests, enforce terms, manage risk, and maintain records.
Where required by PDPA, we obtain consent for collection, use, and disclosure. In limited cases, we may rely on PDPA exceptions (e.g., legitimate interests, investigations, emergencies, publicly available data, business asset transactions), taking reasonable steps to mitigate any adverse effects on you.
3) Consent, deemed consent & withdrawal
- You give consent when you provide Personal Data to us for stated purposes or continue to use our services.
- Under PDPA, deemed consent may arise by your conduct (e.g., submitting an order with contact details), or via deemed consent by contractual necessity.
- You may withdraw consent (including marketing consent) at any time by contacting us (see Section 11). We will inform you of likely consequences (e.g., we may be unable to provide certain services) and process your request within a reasonable time.
4) Access and correction
You may request access to your Personal Data or correction of inaccurate data we hold. Please contact us (Section 11). A reasonable administrative fee may apply for access requests. We will respond within a reasonable time in accordance with PDPA.
5) Accuracy
We take reasonable steps to ensure Personal Data is accurate and complete. Please keep your information up to date by notifying us of any changes.
6) Protection
We implement reasonable administrative, technical, and physical safeguards to protect Personal Data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. While no method is 100% secure, we continuously review our measures to align with industry practices.
7) Retention
We retain Personal Data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law (e.g., tax and accounting rules). When no longer needed, we will delete or anonymise the data.
8) Overseas transfers
If Personal Data is transferred or accessed outside Singapore (for example, by cloud providers or payment processors), we will comply with PDPA Transfer Limitation obligations and ensure recipients provide a comparable standard of protection (e.g., through contractual clauses and additional safeguards).
9) Marketing messages & Singapore DNC Registry
For telemarketing (calls, SMS/MMS/WhatsApp) sent to Singapore numbers, we will check relevant numbers against the Do Not Call (DNC) Registry, unless you have given clear and unambiguous consent to receive such messages. You can opt out of marketing emails/SMS at any time via the unsubscribe link or by contacting us.
10) Cookies and analytics
We use cookies and similar technologies to operate the site, remember preferences, and perform analytics. You can manage cookies in your browser settings; disabling cookies may affect site functionality. We may use third-party analytics and advertising tools that collect pseudonymous data about site usage.
11) Contact our Data Protection Officer (DPO)
If you have questions, requests (access/correction/withdrawal), or a complaint about how we handle your Personal Data, please contact:
Gemstory World Pte. Ltd. (Genwell)
Address: 12 Kallang Ave #03-07, The Workshop @ Lavender (Aperia Mall), Singapore 339511
Email: info@genwellasia.com
Tel: +65 9366 8836
We will review and respond within a reasonable period. If you are not satisfied, you may also contact the Personal Data Protection Commission (PDPC) Singapore.
12) Third-party services and links
Our website may contain links to third-party sites or use third-party services (e.g., payment gateways, logistics, analytics). Their privacy practices are governed by their own policies. We encourage you to review those policies before providing any data.
13) Children’s data
Our services are not directed to children. If you are a parent/guardian and believe your child has provided Personal Data without consent, please contact us so we can take appropriate action.
14) Updates to this Policy
We may update this Privacy Policy from time to time. Changes take effect when posted on our website with a new “Effective date”. Material changes may be notified to you via email or a site notice.
15) Governing law
This Policy is governed by the laws of Singapore.