Privacy Policy
Last updated: June 2025 · Compliant with Singapore PDPA
1. Data We Collect
ATW collects the following types of information:
- Account information: name, email address, password (encrypted)
- Order information: shipping address, order history, payment confirmation (we do not store card details — handled by Stripe)
- Assessment data: your wellness assessment responses and generated protocols
- Usage data: page visits, interactions, session duration (via Google Analytics)
- Communications: messages you send us via WhatsApp, email, or our AI Advisor
2. How We Use Your Data
Your data is used to:
- Process and fulfill your orders
- Provide personalized aromatherapy recommendations
- Manage your membership, entitlement and fulfilment
- Send order confirmations and service updates (transactional)
- Send wellness content and promotions (with your consent, opt-out anytime)
- Improve platform quality using consented, minimized and appropriately aggregated data
3. Data Storage and Security
Your data is stored in Supabase (cloud database) with row-level security policies ensuring you can only access your own data. Payment processing is handled by Stripe — ATW never stores credit card details. All data transmission is encrypted via HTTPS/TLS.
4. Third-Party Services
ATW uses the following third-party services that may process your data:
- Stripe: Payment processing (Singapore)
- Supabase: Database and authentication
- Google Analytics: Website analytics (anonymized IP)
- Meta Pixel: Advertising measurement (with consent)
- OpenAI / Claude: AI Wellness Advisor (conversation content processed server-side, not stored by AI providers beyond session)
5. Your Rights (Singapore PDPA)
Under Singapore's Personal Data Protection Act, you have the right to:
- Access the personal data ATW holds about you
- Correct inaccurate personal data
- Withdraw consent for marketing communications at any time
- Request deletion of your account and associated data
To exercise these rights, email hello@atw.sg.
6. Cookies
ATW uses essential cookies for authentication (session management) and analytics cookies (Google Analytics, with anonymized IP). You can disable analytics cookies in your browser settings without affecting core platform functionality.
7. Data Retention
We retain your account and order data for 7 years (Singapore accounting requirements). Assessment data is retained while your account is active. You may request deletion at any time; deleted accounts retain anonymized transaction records only.
8. Contact Our Data Officer
For privacy-related inquiries, contact: hello@atw.sg · WhatsApp: +65 9355 7508