Privacy Policy for Foliage Paths

Foliage Paths is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and process your data when you interact with our online platform and engage with our services, including bespoke houseplant sourcing and cultivation, interior plantscaping design, botanical mapping, digital greenery installations, plant health diagnostics, sustainable horticultural consulting, and educational workshops.

1. Information We Collect

We collect various types of information in connection with the services we provide:

• Personal Data You Provide Directly: This includes information you submit when you contact us, request a quote, make a purchase, register for a workshop, or subscribe to our newsletters. This may include your name, contact details (such as address, phone number), and any specific project requirements or interests related to our services.
• Service Usage Data: We may collect information about how you access and use our online platform. This data may include your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. This helps us understand user behavior and improve our site's functionality.
• Information from Third Parties: In some cases, we may receive information about you from third-party services, such as payment processors, if you engage with them in relation to our offerings.

2. How We Use Your Information

We use the information we collect for various purposes, primarily to deliver and enhance our specialized horticulture and landscape cartography services:

• To Provide Our Services: Fulfilling requests for bespoke houseplant sourcing, interior plantscaping design, botanical mapping, digital greenery installations, and delivering plant health diagnostics and consultations.
• To Communicate With You: Responding to inquiries, providing updates on project status, sending information about our products and services, and notifying you about changes to our terms or policies.
• For Marketing and Promotional Purposes: With your consent, sending newsletters, marketing communications, and information about new workshops or offerings that may be of interest to you.
• To Improve Our Services: Analyzing user behavior and platform performance to refine our offerings, optimize our online presence, and develop new services.
• For Legal Compliance and Security: Complying with legal obligations, preventing fraud, and ensuring the security of our online platform and data.

3. Legal Basis for Processing (GDPR)

Our legal basis for collecting and using your personal data depends on the specific context in which we collect it:

• Performance of a Contract: When we need to fulfill our obligations under a contract with you, such as delivering a plantscaping project or workshop.
• Your Consent: Where you have given us explicit consent to process your data for a specific purpose, such as signing up for marketing communications.
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these interests are not overridden by your data protection rights. This may include improving our services, preventing fraud, or ensuring the security of our operations.
• Legal Obligation: When we are required to process your data to comply with applicable laws or regulations.

4. Sharing Your Information

We do not sell your personal data. We may share your information with limited third parties under specific circumstances:

• Service Providers: We may engage trusted third-party companies and individuals to facilitate our services (e.g., payment processing, website hosting, analytics). These providers have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: If Foliage Paths is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request the deletion of your personal data under certain circumstances.
• Right to Restrict Processing: Request that we limit the way we use your data.
• Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to the processing of your personal data for direct marketing purposes or when processing is based on our legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on your consent to process your personal data.

To exercise any of these rights, please contact us using the details provided below.

7. Security of Your Data

The security of your data is paramount to us. We implement appropriate technical and organizational measures designed to protect your personal data from accidental loss, unauthorized access, use, alteration, or disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

8. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside Singapore and choose to provide information to us, please note that we transfer the data to Singapore and process it there. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your personal data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our online platform, prior to the change becoming effective and update the "last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: