By using the Website and/or WeWa App, you agree to these Terms of Use and the WeWa Policy which are incorporated herein by reference. Each time you use the Website/App, you reaffirm your acceptance of the then-current Terms of Use. WeWa reserves the right to change these Terms of Use at any time and at its sole discretion. The modified Terms of Use will be effective immediately upon posting and you agree to the new posted Terms of Use by continuing your use of the Website. You are responsible for staying informed of any changes.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you:

• Visit our website or mobile app

• Visit our physical stores and use our kiosks

• Place orders at our kiosks and counters, or on the mobile app

• Visit, engage, or interact with our social media accounts

• Participate in our loyalty programme

• Subscribe to our email, SMS, or WhatsApp marketing

• Interact with our advertisements on digital platforms

By using our website or services, you consent to the collection and use of your personal data as described in this Policy.

You may be required to create an account and specify a password to use certain features or benefits on the Website and/or App. You agree to provide, maintain and update true, accurate, current and complete information about yourself as prompted by the registration processes. You may not impersonate any person or entity or misrepresent your identity or affiliation with any person or entity, including using another person’s username, password, or other account information.

You are entirely responsible for maintaining the confidentiality of your password and your account. And you are entirely responsible for all activity made by you or anyone that uses your account. You agree to safeguard your password from access by others. If you believe that your account has been compromised, please contact us by email at eat@wewantwewa.com.

You agree to indemnify and hold WeWa harmless for losses incurred by WeWa or another party due to someone else using your account as a result of your failure to use reasonable care to safeguard your password. 

For all charges for any products sold on the Website or in physical stores, WeWa will bill your credit card. Charges will be inclusive of applicable taxes where required by law. Payments paid by you are final and non-refundable, unless otherwise determined by WeWa. You agree to provide valid and updated payment information. In the event legal action is necessary to collect on balances due, you agree to reimburse WeWa for all expenses incurred to recover sums due, including attorneys’ fees and other legal expenses.

WeWa does not process, record or maintain your credit card or bank account information. For orders on the Website or App, payment in cash upon pickup is not allowed.

Depending on how you interact with us, we may collect the following categories of personal data.

Identification and contact information
This may include your name, email address, mobile number, delivery address, saved addresses and other account or contact information that you provide to us.

Where voluntarily provided and relevant to our services, this may also include information such as your date of birth, gender, profile photo or similar account details.

Account and order information
This may include your account ID, login details, order history, selected outlet, products ordered, order value, date and time of order, delivery or collection details, loyalty or rewards activity, promotion participation and customer preferences.

Payment information
This may include transaction details, payment method, payment status, refund or cancellation status and payment provider identifiers.

Where payment is processed by a third-party payment provider, full payment card details are generally processed directly by that provider and are not stored by us unless expressly stated.

Technical and usage information
When you use our website, App or online services, we may collect information such as your device type, operating system, IP address, App or browser version, device identifiers, push notification token, log data, session data, feature interactions, crash reports and analytics events.

Location information
Where enabled by you or required for a relevant feature, we may collect approximate or precise location information, for example to support outlet discovery or relevant delivery or collection features.

Communications and support information
This may include customer support messages, enquiries, complaints, survey responses, promotion entries, reviews, customer feedback and other communications with us.

Marketing preferences
This may include your consent status, opt-in and opt-out choices, preferred communication channels and information about your interaction with our marketing communications or campaigns.

Images and user-generated content
Where a relevant feature is available, we may collect photographs, videos, reviews or other content that you voluntarily submit to us.

Optional allergy or special-order information
You may voluntarily provide allergy or special-order information where this is relevant to preparing or handling your order.

We will use such information only for the relevant order or customer request. Please do not provide unrelated health information through our services.

We collect, use and disclose personal data for purposes that have been notified to you and where permitted under the PDPA.

Depending on the circumstances, we may rely on your consent, deemed consent or an applicable exception under the PDPA.

For example, where reasonably necessary to fulfil an order or provide a service you have requested, we may disclose relevant information to a delivery or logistics provider.

We may collect, use and disclose personal data for the following purposes:

• creating, administering and securing your account;

• processing orders, reservations, payments, refunds and cancellations;

• arranging collection and delivery;

• providing customer support, responding to enquiries, handling complaints and managing service recovery;

• sending operational and transactional communications such as account notifications, order confirmations, receipts, delivery or collection updates, service notices and security notifications;

• administering loyalty and rewards programmes;

• administering promotions, surveys, events and customer feedback programmes;

• sending marketing communications, personalised offers or surveys where you have consented or where otherwise permitted under the PDPA;

• analysing, maintaining, troubleshooting, improving and developing our website, App, products, services, user experience and business operations;

• understanding how customers use our services and measuring the effectiveness of campaigns and promotions;

• detecting, preventing and investigating fraud, abuse, security incidents, technical issues or unlawful activity;

• protecting our legal rights and interests; and

• complying with legal, regulatory, accounting, audit, tax, dispute-resolution and enforcement obligations.

Where you voluntarily provide allergy or special-order information, we may use that information only as reasonably necessary to handle the relevant order or customer request.

Personalisation & Profiling

We may use information such as order history, preferences, location, device and usage data to:

• personalise our services;

• recommend products or offers;

• measure campaigns;

• improve our products and services; and

• detect and prevent fraud or abuse.

We do not use personal data to make decisions that produce legal effects or similarly significant effects concerning you solely by automated means unless this is separately disclosed to you and permitted under applicable law.

Accuracy of Personal Data

We take reasonable steps to ensure that personal data collected by us or on our behalf is accurate and complete where it is likely to be used to make a decision that affects you or disclosed to another organisation.

You should keep your account, contact and delivery details up to date.

If you believe that personal data we hold about you is inaccurate or incomplete, you may contact us using the details in this Policy.

We may collect personal data in the following ways:

Directly from you

For example, when you:

• create or update an account;

• place an order;

• make a payment;

• provide information through our website, App, kiosk or outlet;

• contact customer support;

• enter a promotion or participate in a survey or event;

• provide feedback or a review; or

• otherwise communicate or interact with us.

Automatically when you use our services

We may automatically collect certain technical and usage information when you use our website, App or online services, including through cookies, mobile SDKs, analytics tools, crash-reporting tools, server logs and similar technologies.

From service providers and partners

We may receive personal data from service providers and partners involved in providing our services, including payment processors, delivery or logistics providers, customer support providers, analytics providers, marketing platforms and authentication providers.

From other sources

We may receive personal data from affiliates or business partners where necessary to provide our services, process an order, administer a promotion, investigate suspected fraud or abuse, or support a customer request.

Where permitted by law and relevant to our relationship with you, we may also collect information from publicly available or business contact sources.

We may disclose personal data to recipients where relevant to the purposes described in this Policy.

These may include:

• our authorised employees and personnel;

• relevant WeWa outlets and kitchen personnel;

• delivery and logistics partners;

• payment processors and payment service providers;

• our technical and App service providers;

• cloud hosting and IT service providers;

• customer support providers;

• CRM providers;

• analytics and crash-reporting providers;

• marketing and communications providers;

• push notification providers;

• fraud prevention and security providers;

• professional advisers, auditors and insurers;

• banks and financial institutions;

• regulators, courts, law enforcement agencies and public authorities where required or permitted by law; and

• any person or organisation you authorise us to disclose your personal data to.

We may also disclose personal data where disclosure is reasonably necessary to complete a transaction or provide a service requested by you.

Where our service providers process personal data on our behalf, we take reasonable steps to ensure that they process the information only for authorised purposes and provide appropriate protection for the personal data.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, for legitimate business or legal purposes, or as required or permitted by law.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or otherwise cease retaining it in a manner consistent with the PDPA.

This Policy explains how we collect, use, disclose, store, protect, retain and transfer personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA"). It does not replace any separate consent, preference, transactional or in-App notice presented to you.

Data categories

We may collect the following categories of personal data, depending on how you use the App:

• Identification and contact data: name, email address, mobile number, delivery address, saved addresses, date of birth, gender where provided, account profile photo and similar account details.

• Account and order data: account ID, login details, order history, selected store, ordered products, order value, time and location of order, delivery or collection details, loyalty or promotion participation and customer preferences.

• Payment data: transaction details, payment method, payment status, refund/cancellation status and payment provider identifiers. Full card details are processed by our payment provider and are not stored by us unless expressly stated.

• Technical and usage data: device type, operating system, IP address, app version, device identifiers, push notification token, log data, session data, feature interactions, crash reports and analytics events.

• Location data: approximate or precise location data only where enabled or needed for relevant features such as store discovery, delivery or collection.

• Communications and support data: support messages, survey responses, promotion entries, customer feedback and other communications with us.

• Marketing preferences: consent status, opt-in/opt-out choices, preferred channels and campaign interaction data.

• Images and user-generated content: photos, videos, reviews or other content you voluntarily submit through the App.

• Optional allergy or special order information: information you voluntarily provide so that we can prepare or handle your order. Please do not provide unrelated health information through the App.

Collection sources

We collect personal data in the following ways:

• Directly from you, for example when you create an account, place an order, update your profile, contact support, enter a promotion, complete a survey or provide feedback.

• Automatically when you use the App or website, for example through cookies, mobile SDKs, analytics tools, crash reporting tools, server logs and similar technologies.

• From service providers and partners involved in providing the App, including payment processors, delivery or logistics partners, customer support tools, analytics providers, marketing platforms and authentication providers.

• From affiliates or business partners where this is necessary to provide the App, process an order, administer a promotion, investigate fraud or support a customer request.

• From publicly available or business contact sources where permitted by law and relevant to our relationship with you.

Purposes and PDPA basis for collection, use and disclosure

We collect, use and disclose personal data for purposes that have been notified to you and only where you have consented, where deemed consent applies under the PDPA, or where collection, use or disclosure is otherwise permitted under the PDPA. For example, deemed consent may apply where disclosure is reasonably necessary to fulfil your order or provide a service you requested, such as sharing your delivery address with a delivery partner. We may also rely on applicable PDPA exceptions, where the relevant conditions are met, for purposes such as fraud prevention, security, business improvement, service improvement, analytics, and protecting our legal rights.

We may collect, use and disclose personal data for the following purposes:

• Creating, administering and securing your App account.

• Processing orders, reservations, payments, refunds, cancellations, collection, delivery and related customer communications.

• Providing customer support, responding to enquiries, handling complaints and managing service recovery.

• Sending operational and transactional messages, such as account alerts, order confirmations, receipts, delivery updates, service notices and security notifications.

• Administering loyalty, rewards, promotions, surveys, events and customer feedback programmes where offered.

• Sending marketing communications, personalised offers or surveys where you have consented or where otherwise permitted under the PDPA, and subject to your opt-out choices and applicable Do Not Call requirements.

• Analysing, maintaining, troubleshooting, improving and developing the App, products, services, user experience and business operations.

• Detecting, preventing and investigating fraud, abuse, security incidents, technical issues or unlawful activity.

• Complying with legal, regulatory, accounting, audit, tax, dispute resolution and enforcement obligations.

• Handling optional allergy or special order information only for the relevant order or customer request.

Recipients, data intermediaries and transfers

We may disclose personal data to the following recipients where relevant to the purposes described in this Policy:

• Our authorised employees, personnel, affiliates and related companies who need access for the purposes described above.

• The relevant outlet, kitchen, delivery or logistics partner needed to fulfil your order or customer request.

• Our technical service provider and app provider, Samba Technologies Pte. Ltd. ("Cata"), 160 Robinson Road, #14-04, Singapore 068914, where Cata processes personal data for the App on our behalf as a data intermediary under the PDPA.

• Payment processors, fraud prevention providers, cloud hosting providers, IT support providers, customer support tools, CRM tools, analytics and crash reporting providers, marketing platforms, push notification providers and other service providers supporting the App.

• Professional advisers, auditors, insurers, banks, regulators, courts, law enforcement agencies or public authorities where required or permitted by law.

• Any person or organisation you authorise us to disclose personal data to, or where disclosure is reasonably necessary to complete a transaction requested by you.

If personal data is transferred outside Singapore, we will take appropriate steps to ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to the PDPA, unless an exception applies. Some recipients, such as Cata and certain cloud, hosting and analytics providers, may be located outside Singapore.

Cookies, SDKs and similar technologies

The App and related online services may use cookies, mobile SDKs, local storage, pixels, analytics tools, crash reporting tools and similar technologies.

These technologies may be used to:

• enable core App functions, authentication, payment, security, fraud prevention and service continuity;

• remember preferences and improve App performance;

• understand traffic, usage patterns, errors and feature performance;

• support analytics, product improvement and customer support; and

• support marketing, attribution or personalised offers where permitted and subject to your preferences.

You may be able to manage cookies, tracking choices, analytics permissions, advertising identifiers, location permissions and push notifications through the App or your device settings. Disabling certain technologies may affect App functionality.

Accuracy, security, retention and breach notification

We take reasonable steps to ensure that personal data collected by us or on our behalf is accurate and complete where it is likely to be used to make a decision that affects you or disclosed to another organisation. You should keep your account and delivery details up to date.

We use reasonable administrative, physical and technical measures to protect personal data in our possession or control, including access controls, confidentiality obligations, vendor controls, monitoring and encryption where appropriate.

No method of transmission or storage is completely secure. If a suspected data breach occurs, we will assess it and, where required by the PDPA, notify the Personal Data Protection Commission and/or affected individuals.

We retain personal data only for as long as it is necessary for the purposes described in this Policy, for legal or business purposes, or as required or permitted by law.

When personal data is no longer required, we will delete, anonymise or otherwise cease retaining it in a manner consistent with the PDPA.

Whether providing data is optional

You are not generally required by law to provide personal data to us. However, if you do not provide information that is necessary for a particular feature, order, payment, delivery, collection, customer support request or legal compliance step, we may not be able to provide that feature or service.

Marketing-related data and optional profile fields are generally optional. You may withdraw consent or change preferences as described below.

Your PDPA rights and choices

Subject to the PDPA and applicable exceptions, you may:

• request access to personal data about you that is in our possession or control, and information about how we have used or disclosed it;

• request correction of inaccurate or incomplete personal data;

• withdraw consent for specific collection, use or disclosure purposes, subject to legal or contractual restrictions and reasonable notice;

• opt out of marketing communications and update your channel preferences;

• request account closure or deletion/anonymisation of certain data where continued retention is not required or permitted; and

• contact us with complaints, questions or feedback about our personal data practices.

To make a request, contact our Data Protection Officer at eat@wewantwewa.com. We may need to verify your identity before responding. We may charge a reasonable fee for access requests and will inform you before doing so.

Where you withdraw consent, we will explain the likely consequences, which may include being unable to provide certain App features or services. Withdrawal does not affect collection, use or disclosure that occurred before the withdrawal was processed, or any collection, use or disclosure permitted without consent under the PDPA. We will respond to privacy-related requests in accordance with the PDPA and applicable law.

Marketing communications & Do Not Call

For marketing messages sent to Singapore telephone numbers, we will comply with applicable Do Not Call Registry requirements, consent requirements and sender identification rules.

You may opt out of marketing emails, SMS, push notifications or other marketing channels by using the unsubscribe or preference tools provided, changing your App settings, or contacting us at eat@wewantwewa.com. Operational and transactional messages may still be sent where necessary for the App or your order.

Children and minors

The App is intended for users who can create an account and place orders in accordance with the App terms. If you are a minor, you should use the App only with involvement of a parent or legal guardian where required.

We do not knowingly collect personal data from children where parental or guardian consent is required. If you believe a child has provided personal data to us without the required consent, please contact us so that we can take appropriate steps.

Automated decision-making, personalisation and profiling

We do not use personal data to make decisions that produce legal effects or similarly significant effects solely by automated means unless this is separately disclosed to you.

We may use order history, preferences, location, device and usage data to personalise the App, recommend products, prevent fraud, measure campaigns or show offers. You can manage marketing preferences as described in this Policy.

For marketing messages sent to Singapore telephone numbers, we will comply with applicable Do Not Call Registry requirements, consent requirements and sender identification rules.

You may opt out of marketing communications, including marketing emails, SMS, WhatsApp, push notifications or other marketing channels, by using the unsubscribe or preference tools provided, changing your preferences where available, or contacting us at eat@wewantwewa.com.

Operational and transactional messages may still be sent where necessary for your account, orders or use of our services.

We implement reasonable security measures to protect personal data from unauthorised access, use, or disclosure. These measures include administrative, technical, and physical safeguards.

For privacy-related enquiries, access or correction requests, withdrawal of consent, marketing opt-outs, complaints or feedback, please contact our Data Protection Officer:

WEWA SG PTE. LTD.
111 Somerset Road
#12-30 Singapore 238164

Email: eat@wewantwewa.com