1. Data We Collect

ATW collects the following types of information:

• Account information: name, email address, password (encrypted)
• Order information: shipping address, order history, payment confirmation (we do not store card details — handled by Stripe)
• Assessment data: your wellness assessment responses and generated protocols
• Usage data: page visits, interactions, campaign source, product journey and verified transaction state through ATW first-party analytics and Google Analytics
• Communications: messages you send us via WhatsApp, email, or our AI Advisor

2. How We Use Your Data

Your data is used to:

• Process and fulfill your orders
• Provide personalized aromatherapy recommendations
• Manage your membership, entitlement and fulfilment
• Send order confirmations and service updates (transactional)
• Send wellness content and promotions (with your consent, opt-out anytime)
• Improve platform quality using consented, minimized and appropriately aggregated data

3. Data Storage and Security

Your data is stored in Supabase (cloud database) with row-level security policies ensuring you can only access your own data. Payment processing is handled by Stripe — ATW never stores credit card details. All data transmission is encrypted via HTTPS/TLS.

4. Third-Party Services

ATW uses the following third-party services that may process your data:

• Stripe: Payment processing (Singapore)
• Supabase: Database and authentication
• Google Analytics: Website analytics (anonymized IP)
• Meta Pixel: Advertising measurement (with consent)
• OpenAI / Claude: AI Wellness Advisor (conversation content processed server-side, not stored by AI providers beyond session)

5. Your Rights (Singapore PDPA)

Under Singapore's Personal Data Protection Act, you have the right to:

• Access the personal data ATW holds about you
• Correct inaccurate personal data
• Withdraw consent for marketing communications at any time
• Request deletion of your account and associated data

To exercise these rights, email hello@atw.sg.

6. Cookies

ATW uses essential cookies for authentication and privacy-minimized first-party journey measurement, including random visitor and 30-minute session identifiers. These identifiers do not contain your name, email, phone number, chat text or assessment answers. Where enabled, Google Analytics uses separate analytics cookies. Analytics availability never determines payment, entitlement or access to core platform functions.

7. Data Retention

We retain account and order data according to service, legal and accounting requirements. Assessment data is retained while your account is active. The operational retention target is 13 months for anonymous usage analytics and 24 months for authenticated product analytics. You may request access or deletion; deleting an ATW ID removes its linked product-analytics identity records, while legally required transaction records are governed separately.

8. Contact Our Data Officer

For privacy-related inquiries, contact: hello@atw.sg · WhatsApp: +65 9355 7508