GDPR Policy

Last Updated: December 2025

Data Protection & GDPR Compliance

Petal & Pepper is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Your Rights Under GDPR

You have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data ("Right to be Forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to our processing of your data

2. Legal Basis for Processing

We process your personal data only when we have a lawful basis to do so:

• Your explicit consent
• Fulfillment of a contract
• Compliance with legal obligations
• Protection of vital interests
• Our legitimate interests

3. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. You can request deletion at any time.

4. International Data Transfers

Any transfers of data outside of Singapore are done with appropriate safeguards in place to ensure your data remains protected.

5. Data Protection Officer Contact

If you have concerns about our data handling practices, you may contact us at:
Email: info@bytebastion.sbs

6. Exercising Your Rights

To exercise any of your rights under GDPR, please submit a written request to info@bytebastion.sbs. We will respond within 30 days.

7. Complaints

If you believe we have violated your data protection rights, you have the right to lodge a complaint with your local data protection authority.