Effective date: May 2026 — This policy is issued by L’éclair Patisserie Pte Ltd (“L’éclair”, “we”, “us”, “our”) and applies to personal data collected through our website, café, online shop, catering services, and any communications with us.
1. What Personal Data We Collect
When you place an order, make an enquiry, or interact with us, we may collect:
- Name, email address, and phone number
- Delivery address and billing details
- Order history and purchase preferences
- Payment information (processed securely via our payment gateway; we do not store card details)
- Communications you send to us (email, enquiry forms, social media messages)
- Website usage data (via cookies — see our Cookie notice on-site)
2. Why We Collect Your Data
We collect and use your personal data for the following purposes:
- To process and fulfil your orders, including delivery and self-collection arrangements
- To respond to your enquiries and provide customer support
- To send order confirmations, updates, and service-related communications
- To send promotional messages and updates, if you have given your consent
- To improve our website, products, and services
- To comply with our legal and regulatory obligations
3. Consent & Your Rights
We collect your personal data with your consent, which you provide when placing an order or signing up for communications. You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or outdated information
- Withdraw consent to marketing communications at any time, without affecting the lawfulness of prior processing
- Request deletion of your data, subject to our legal and operational obligations
To exercise any of these rights, please write to us at dpo@leclair.com.sg.
4. Who We Share Your Data With
We do not sell your personal data. We may share it with trusted third-party service providers who assist us in operating our business, including:
- Payment processors (e.g. Stripe, PayNow providers)
- Delivery and logistics partners
- Email and messaging service providers
- Website hosting and analytics providers
All third parties are required to handle your data in accordance with applicable data protection laws. Some providers may be located outside Singapore — where this is the case, we take reasonable steps to ensure your data is protected to a comparable standard.
5. How Long We Keep Your Data
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Order records are typically retained for up to 7 years for accounting and legal purposes. If you withdraw consent or request deletion, we will cease using your data and remove it where we are not legally required to retain it.
6. Data Security
We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) as required under the PDPA.
7. Marketing Communications
We will only send you promotional messages (including via Email, SMS or WhatsApp) if you have given your clear and explicit consent to do so. You may withdraw this consent at any time by:
- Replying “STOP” to any message we send
- Emailing us at unsubscribe@leclair.com.sg
We comply with Singapore’s Do Not Call (DNC) Registry provisions under the PDPA. Numbers registered with the DNC Registry will not be contacted for marketing purposes unless we have your prior consent.
8. Data Protection Officer
L’éclair Patisserie Pte Ltd has appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with the PDPA. For any data protection queries, requests, or concerns, please contact our DPO at:
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The latest version will always be available on our website at leclair.com.sg/privacy-policy. We encourage you to check back periodically.
10. Governing Law
This Privacy Policy is governed by the laws of Singapore, including the Personal Data Protection Act 2012 (PDPA) and its subsequent amendments.
Last updated: May 2026 — L’éclair Patisserie Pte Ltd
