Who we are

Nuloft (NULOFT PTE LTD, UEN 202220078H) runs nuloft.com. This policy explains how we collect, use, share and protect your personal data, in line with Singapore’s Personal Data Protection Act 2012 (PDPA). “We”, “us” and “our” mean Nuloft.

What we collect

• Details you give us: your name, phone number, email, billing and delivery address, home access details, order notes, and anything you tell us when you contact us, chat with us, or write a review.
• Order and payment details: what you bought, how much you paid and how. Card payments are handled by PayPal; we don’t see or store your full card number.
• Account details: if you create an account, your login and order history.
• Website and device data: pages viewed, links clicked, device and browser type, approximate location from your IP address, and similar information collected by cookies and similar technologies.
• Marketing preferences: whether you have subscribed to our newsletter and how you interact with our emails.

How we use it

• To process and deliver your orders, take payment, arrange returns and handle warranty claims.
• To contact you about your order and delivery, including by phone, email and WhatsApp.
• To answer your questions and provide customer service.
• To send you newsletters and offers, if you have agreed. You can unsubscribe at any time using the link in every email.
• To invite you to review your purchase, if you agreed at checkout.
• To understand how our website is used, measure our advertising and improve our products and services.
• To prevent fraud and spam, keep our website secure, and meet our legal and accounting obligations.

Who we share it with

We don’t sell your personal data. We share it only as needed with trusted service providers who act for us, including:

• Our delivery and installation partners, who need your name, phone number and address to deliver your order.
• Our sister company BEDANDBASICS, which helps run our customer service, warehousing and logistics.
• Payment providers (PayPal) and our bank, to process payments and refunds.
• Website, email and support services, such as our web host, WordPress and Jetpack, our email delivery service, Zendesk (customer chat), Mailchimp (newsletters), CusRev (review invitations), and CleanTalk and Akismet (spam protection).
• Analytics and advertising services, such as Google (Analytics and Tag Manager), Meta (Facebook and Instagram) and Cloudflare, which collect data through cookies and similar technologies.
• OneMap (Singapore Land Authority), which receives the postal code you type at checkout to fill in your street address.
• Professional advisers, authorities or others where required by law, or to protect our rights, our customers or the public.

Some of these providers store data outside Singapore. Where they do, we take steps to make sure your data gets a standard of protection comparable to the PDPA.

Cookies

Cookies are small files stored on your device. We use them to keep your cart and login working, remember your preferences, understand how our website is used, and show you relevant ads on other sites. You can block or delete cookies in your browser settings; the website may not work fully without essential cookies such as those for your cart.

How long we keep it

We keep your personal data only as long as we need it for the purposes above, including our warranty periods (up to 15 years for some mattresses) and legal, tax and accounting requirements. After that, we delete or anonymise it.

How we protect it

We use reasonable security measures, including encrypted connections (HTTPS), access controls and trusted providers, to protect your data from unauthorised access, use or disclosure. No method is completely secure, so please keep your account password safe.

Your choices and rights

• You can ask to see the personal data we hold about you, and how we have used or shared it in the past year.
• You can ask us to correct data that is wrong or incomplete.
• You can withdraw your consent to our use of your data, for example for marketing. If you withdraw consent needed to process an order, we may not be able to complete it.
• You can unsubscribe from marketing emails at any time.

To make a request, email our Data Protection Officer at **@****ft.com with the subject “Personal data request”. We may need to verify your identity and will reply as soon as reasonably possible, usually within 30 days. We may charge a reasonable fee for access requests, and will tell you beforehand.

Children

Our website is not intended for anyone under 18, and we don’t knowingly collect personal data from children.

Other websites

Our website may link to other sites, such as social media or payment pages. Their own privacy policies apply, and we are not responsible for their practices.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

Contact us

Data Protection Officer, NULOFT PTE LTD. Email **@****ft.com or call +65 6850 5075.