The following company is the controller for all data processing activities described below:

Fresh N Natural
Foods Pte Ltd. 

14 Chin Bee Road
Singapore 619824

Tel: +65-6547-4222

Fax: +65-6547-4533

E-Mail: enquiry@freshnatural.com.sg

2. Details about specific processing activities

• Promotions: Raffles / Loyalty programmes / other promotions

If you take part in a promotion, we collect personal data that is required to carry out the promotion. These are marked as mandatory fields in the participation form. If you do not provide this data, you will not be able to take part in the promotion.

In addition, we may collect further data that you can provide voluntarily. For example, we ask for your salutation so that we can address you as requested. Answering questions about the product purchase and the promotion itself is important to us because we derive insights and decisions about product development and maintenance from this.

We generally store participants' data for up to 6 months after the end of the promotion. There are also retention periods under tax and commercial law for the winners' data, which means that we have to store this data for longer.

As part of some promotions, we link participation in the promotion with the obligation to consent to further marketing measures (e.g. newsletter subscription) and - with your consent - may also use the data collected as part of the promotion to personalize marketing measures.

We use service providers as processors (e.g. for the dispatch of goods or the processing of cashback) to carry out the promotion.

• Contacting us / feedback

You may contact us via email. We will process your data in order to reply to you.

• Server Logs

When accessing our website or using our app, we will process data in server log files. This data derives from your terminal equipment and may include personal data. In particular, we process the following data:

- The operating system of your terminal equipment

- The browser used by you (when accessing the website)

- The name of your provider

- Your IP address

- Data and time of access

- Accesses pages and search terms (if applicable)

- The website that referred you to our website (referrer; when accessing the website)

This processing activity is necessary to ensure the operation of our website / app, to optimise the content and deliverability of our website / app, and to provide the necessary information to public bodies in case of a cyber attack.

We regularly delete this data after 14 days, in case of misuse after administrative or legal proceedings are finished.

• Tracking and cookies

Our website uses cookies and similar technologies that store information on your terminal equipment or accesses such information for the following purposes:

• Providing our website / app

• Analytics and personalisation - Tracking

• (Re-)Marketing / data sharing with third parties

Providing our website / app

We use cookies and similar technologies to ensure certain features of our website / app. This is strictly necessary to provide our website / app. By doing this, we can, for example,

• Save your preferred language version of our website / app or similar settings for your next visit.

• Distribute requests to our website / app across multiple web servers (load balancing).

• Provide a uniform context (session) to multiple requests to our website / app, in order to facilitate login-secured parts of our website or checkout / payment processes.

• Save your consent regarding tracking tools and active / deactivate tracking tools according to your choice.

Our legitimate interest for these processing activities lies in the uninterrupted usability of our website / app and in ensuring that user interactions are actually linked to an authenticated user.

We use the following products to enable the functionality of the website / app:

Analytics and personalisation – Tracking

We use cookies and similar technologies to evaluate user behaviour on our website and in our app and to adapt them according to this.

Provided you have given your consent, we process information on your terminal equipment and the browser you are using (in the case of the website) every time you interact with our website / app. For example, we can find out with which language settings you use our website / app, whether you use a smartphone or a desktop computer or from which country you access our website or use the app.

In addition, we process information about how you interact with our website / app, e.g. from where you are referred to our website / app, how long you use our website / app and the path you take through individual sub-pages. For example, we can record whether you found us via a search engine (and if so, under which search term) or an advertisement, how long you spent browsing the content of a particular page and how many pages you visited in total.

We use this information to create analyses of user behaviour on our website and in
our app and to optimise the website / app accordingly. In some cases, we create several different versions of our website, which we present to individual users or user groups, and use cookies or similar technologies to evaluate which version is used by you in which way.

Legal basis for this processing activity is your consent (Art. 6 para. 1 a) GDPR. You may withdraw or change your consent for future processing at any time by changing your tracking settings. Additionally, you may change your browser settings regarding cookies and similar technologies.

We use the following products for (re-)marketing and share data with the following third parties

Google Ads / Doubleclick (website)

Google Ads / Doubleclick is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). More information about cookies set by Google can be found here https://policies.google.com/technologies/cookies#types-of-cookies. Please also refer to the Google Privacy Policy https://policies.google.com/privacy.

YouTube

YouTube Cookies are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”). More information about cookies set by YouTube can be found here https://policies.google.com/technologies/cookies#types-of-cookies. Please also refer to the Google Privacy Policy https://policies.google.com/privacy.

Google Floodlight (website)

Google Floodlight is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). More information about cookies set by Google can be found here https://policies.google.com/privacy. Please also refer to the Google Privacy Policy https://policies.google.com/privacy.

We maintain publicly accessible profiles on social networks and platforms to communicate with interested parties, customers, and users and to provide information about our products and services. The platforms we use include Facebook, Instagram, Pinterest, TikTok, X (formerly Twitter), YouTube, and Snapchat.

Please note that your personal data may be processed by the respective platform operators. This includes, among other things, your IP address, the pages and content you visit, as well as any information you share via the platforms or provide to us through them.

Data processing is generally carried out independently by the respective platform operators and may take place outside the European Union. We have no influence on the data processing by platform operators and refer to their respective privacy policies:

• Facebook & Instagram: Meta-Datenschutzrichtlinie – So erfasst und verwendet Meta Nutzerdaten | Privacy Center | Verwalte deine Privatsphäre auf Facebook, auf Instagram und im Messenger | Facebook Privacy

• Pinterest: Datenschutzrichtlinien | Pinterest Policy

Joint Responsibility with Meta (Facebook & Instagram)

We operate a Facebook page and an Instagram profile. Facebook and Instagram are services provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"). When using our Facebook page or Instagram profile, personal data may be processed by Meta, for which both Meta and we are jointly responsible. This joint responsibility is regulated in Facebook's "Page Insights Controller Addendum."

All key information regarding data processing on Facebook and Instagram can be found in the Facebook Data Policy and the Instagram Privacy Policy. These policies also provide details about the nature and scope of the personal data processing, as well as your rights regarding access, confirmation, rectification, deletion, restriction, data portability, and the right to lodge complaints.

We have no control over data processing by Meta. We do not receive any data from Meta that would allow us to identify users or analyze their behavior. Furthermore, we do not use any tools that would enable such identification or analysis.

Processing of Your Data by Us

We process the data you provide to us through these platforms (e.g., messages, comments, likes) solely for the purpose of communication with you or to handle your inquiries.

3. Access, Correction and Withdrawal of Consent

You may contact us at any time to:

• request access to the personal data we hold about you;

• request correction of inaccurate or incomplete personal data;

• withdraw your consent to the collection, use or disclosure of your personal data where such processing is based on consent.

We will respond to your request within a reasonable period and may need to verify your identity before processing your request.

4. Version information

Last revision: July 2026