Privacy Policy

Last updated on 14th Nov 2025.

This privacy policy (Privacy Policy) sets out the manner in which
MUSTAFA’S PTE. LTD. (UEN: 198000780C) and
MOHAMED MUSTAFA & SAMSUDDIN CO. PTE LTD (UEN: 198900680Z)
may collect, use, disclose or otherwise process Personal Data…
This Privacy Policy applies to all users of our Mustafa Rewards Application (App).

1. Collection of information

  1. In order for us to provide our rewards services through the App, we collect and use certain Personal Data identified below.
  2. While the specific types of Personal Data you submit through our App may vary, the following categories may be collected:
    1. Full Name. We do not collect NRIC or passport numbers unless required by law.
    2. Identity Data such as country of residence, job title, age, marital status, gender.
    3. Contact Data such as address, email, phone numbers.
    4. Membership and Activity Data including transaction history and rewards information.
    5. Transaction Data including billing and shipping details.
    6. Usage Data such as App usage patterns and settings.
    7. Marketing and Communications Data such as preferences, surveys, interests.
    8. Technical Data including IP address, device information and browser data.
    9. Any other Personal Data collected with notification and consent where required.
  3. How we collect your Personal Data

We collect your Personal Data:

  1. Directly from you:
    1. use our App;
    2. register or create an account;
    3. enter into contracts or make purchases;
    4. scan your member ID;
    5. apply for/enquire about products;
    6. interact via cookies or tracking tools;
    7. redeem points or participate in campaigns;
    8. subscribe to newsletters;
    9. request marketing materials;
    10. contact customer support.
  2. From authorised representatives acting on your behalf.
  3. When you interact with the App via cookies or similar technologies.
  4. From third parties or public sources, including:
    1. Analytics providers, advertising networks, social media platforms;
    2. Payment, delivery and technical service providers.

2. Purposes for processing your Personal Data

  1. We may collect and use your Personal Data for:
    1. Registering you as a new customer;
    2. Verifying your identity;
    3. Notifying or delivering rewards;
    4. Managing your membership account;
    5. Managing our relationship with you;
    6. Administering and securing our App;
    7. Delivering relevant content and advertisements;
    8. Making recommendations;
    9. Sending event/news/promotional information;
    10. Allowing participation in marketing campaigns;
    11. Complying with laws and regulations;
    12. Personalising your App experience;
    13. Any purpose for which you provided information;
    14. Incidental business purposes;
    15. Secure login via OTP/2FA;
    16. Contacting you regarding the above.
  2. These purposes may continue to apply after your relationship with us ends.
  3. Promotional offers and marketing
    By providing consent, you may receive communications…
    You may withdraw consent anytime under “My Account”.
  4. Cookies
    We use cookies, SDKs or other technologies…
    You may disable cookies, but parts of the App may not function properly.
  5. Change of purpose
    We will only process your Personal Data for its original purpose unless a compatible new purpose arises…
    You will be notified if required by law.

3. Disclosure of information

  1. We may disclose your Personal Data to:
    1. Suppliers, agents or contractors performing services;
    2. Government authorities for compliance, investigations or protection;
    3. Entities acquiring or merging with us;
    4. Parties in bankruptcy or reorganisation proceedings.
  2. We do not disclose Personal Data to unaffiliated third parties without consent.
    All third parties must protect your data in accordance with the law.

4. Retention of information

  1. We retain Personal Data only as long as necessary… including fulfilling legal obligations.
  2. We may anonymise Personal Data for research/statistical use indefinitely.
  3. We deactivate accounts after 24 months of inactivity unless exceptions apply.

5. International transfers of information

We may transfer Personal Data outside Singapore with safeguards ensuring PDPA-equivalent protection.

6. Security

We implement technical and organisational measures to protect your Personal Data.
You are responsible for keeping login credentials confidential.
No digital transmission is completely secure.

7. Collection of information from children

  1. We do not knowingly collect data from children under 18.
  2. Parents/guardians may provide verifiable consent for limited purposes.

8. Making changes to your Personal Data

Under the PDPA, you may:

  1. Access your personal data;
  2. Correct inaccurate data;
  3. Withdraw consent;
  4. Request deletion (subject to limitations).

You may update your data via “My Account”.

9. Links to other sites

Our App may contain links to other sites not covered by this Privacy Policy.

10. Changes to the Privacy Policy

We may modify this Policy at any time…
Continued use constitutes acceptance of changes.

11. Contact us

If you have questions or complaints, please contact our Data Protection Officer.