Who we are

KRYM Delights is a home-based food business in Singapore. This policy explains what personal data we collect, why we collect it, and what you can ask us to do with it. It follows Singapore’s Personal Data Protection Act (PDPA).

Our Data Protection Officer can be reached at Krymdelights@gmail.com, or on WhatsApp at +65 8629 4582.

What we collect

We only collect what we need to take an order and get it to you:

• Your name
• Your contact number, and your email address if you give us one
• A delivery address, if you are having an order delivered
• What you ordered, and any notes you gave us — sizes, wording on a cake, allergies you told us about
• The messages you send us on WhatsApp

We do not see or store your card or bank details. Payment is handled by Take.app, our ordering platform, and by your own bank or payment app.

We do not collect anything from children, and our site does not track you for advertising.

Why we use it

To take your order, prepare it, and arrange collection or delivery.

To contact you about that order — to confirm details, tell you it is ready, or sort out a problem.

To keep a record of orders for our own accounts.

To send you news about new bakes, festive menus or Infaq runs — but only if you have separately agreed to that. We will never add you to a marketing list just because you placed an order.

Consent, and taking it back

By placing an order or messaging us, you agree to us using your details for that order. Marketing is separate and always opt-in.

You can withdraw consent at any time by messaging us on WhatsApp or emailing Krymdelights@gmail.com. We will stop, and tell you if that means we can no longer complete something you have ordered.

If we ever send you marketing messages, every one will carry a way to opt out. Before sending marketing to a Singapore number we check it against the Do Not Call Registry, unless you have given us clear consent or we have an ongoing relationship that allows it.

Who else sees it

We keep your details to ourselves, apart from where the order cannot happen otherwise:

• Take.app — our ordering and payment platform, which processes orders placed through our order page
• Delivery partners — who need your name, address and phone number to deliver to you
• WhatsApp — the messaging service we talk to you on, operated by Meta

We do not sell your details to anyone, and we do not share them for advertising.

How long we keep it

We keep order records for as long as we need them for our accounts, and no longer than the law requires us to.

WhatsApp conversations are kept while they are useful for serving you — for example, so we remember how you liked your last order — and deleted when they are not.

If you ask us to delete your details, we will, unless we are required to keep a record of a transaction.

Seeing or correcting what we hold

You can ask us what personal data we hold about you and how we have used it, and you can ask us to correct anything that is wrong. Email Krymdelights@gmail.com.

We will respond within 30 days. If we need longer, we will tell you why and when to expect an answer.

Keeping it safe

Your details are held on password-protected devices and accounts. Only the family members who need them to fulfil your order can see them.

If something goes wrong and a data breach happens that is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the law requires.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. This version was last updated in September 2026.