Information collected and how we use it
Types of information collected
The personal information that we ask from you is necessary for us to successfully provide our Services to you. We will only collect information that is necessary and utilise it for the purpose of its collection. Such purpose includes, but is not limited to:
Information provided through our mobile application: personal information you provide to us, like your name, user name, password, mobile phone number, email address, or data you may sync with the device you use to access or use our mobile application, information used to create your account or related to your account setup on the mobile application, devices you add or information that you send, and feedback provided.
Information related to your mobile device or SIM card: information related to the mobile device terminal, including but not limited to: IMEI number, IMSI number, the version of your operating system, manufacturing information about your device, model name, and network operator. We also collect information about the device associated with your account, including but not limited to, MAC address, DID, network status of the device (IP/network signal), and the version of your firmware.
Location information (only for specific aspects of our Services): types of information on your location, including but not limited to, region, country code, city code, mobile network code, mobile country code, cell identity, district name, longitude and latitude information, time zone settings, language settings.
Log information: information related to your use of certain Services, including but not limited to, cookies and other anonymous identifier technologies, IP address, network request information, temporary messaging history, standard system logs and crash information (please see our Cookies Policy for more information).
Other information: environmental characteristics value (ECV) (i.e. value generated from Account ID, phone device ID, connected Wi-Fi ID and location value).
Account credentials: information related to your account credentials, including but not limited to, name, user name, password, password security questions and answers, email address, etc.
We also collect other types of anonymous information which are aggregated, anonymized or de-identified. For example, the device model and system version number of the user’s mobile phone device may be collected when using a particular service. Such information is collected in order to improve the Services we provide to you.
How this personal information can be used
Your personal information shall be used for one or more of the following purposes:
- Providing, processing, maintaining, improving, and developing our goods and/or Services to you, and Services provided through your device or by 28Daymumandbaby;
- Communication with you about your device, service, or any general queries, such as updates, device firmware/software updates, customer support, related information, and notices);
- Conducting marketing-related activities. For more information on marketing and promotional activities, please refer to the Direct Marketing section below; and/or
- Analysing and developing statistics on use of our Products and Services to better improve our Products and Services.
Below are further details on how we use your information (including personal information):
- Setting up your 28Daymumandbaby Account. Personal information you provide when creating an 28Daymumandbaby Account on our web sites or through our mobile application is used for creating your account and profile page.
- Providing location-based Services. When using our mobile application, we use information about your location to determine the time zone of the mobile device from which you access or use the application. This will ensure that the application accurately displays the time and location to optimize user experience. You can turn off this feature at any time by going to device settings or by discontinuing your use of the application.
- Accessing devices. The authenticity of devices that are operated through the application must be verified. We therefore need to confirm the legal identity of the device by consulting the factory MAC and DID information. In addition, in order to connect the device to the network, it will need to be configured through the app. During configuration, you must enter the corresponding Wi-Fi name and password. This information will only be used to connect the device to the network. The Wi-Fi and password data you enter will be encrypted and stored locally on your device; it will not be uploaded to the server. In addition, you can access the device and delete this information at any time. We also need to analyse the device’s IP and network signal in order to determine the optimal network connection method. This will ensure the stability of the device network.
- Providing push Services. Account numbers and IMEI Numbers will also be used for the 28Daymumandbaby push service, which sends device notifications to the user. You can turn off this feature at any time by changing the preferences listed under “Message Settings.”
- Verification of user identity. 28Daymumandbaby uses EVC to verify user identities and ensure that hackers or other unverified persons are unable to log in.
- Collecting user feedback. The feedback you choose to provide is extremely valuable, as it helps us improve the Services provided by us. In order to track your feedback, we use the personal information you provide to contact you and for our record.
- Sending notifications. We may occasionally use your personal information to send important notifications, for example, notifications about the status of device malfunctions; your customized device push notifications (which depend on what additional equipment you have purchased); and changes to our terms, conditions, and policies.
We may use the personal information you provide to us to market to you products and services offered by 28Daymumandbaby or our business partners. We will only so use your personal data after we have obtained your prior consent in accordance with your local data protection laws. You have the right to opt in to such use of your personal data for direct marketing. If you do not wish to receive certain types of email communications you may opt-out by following the unsubscribe link located at the bottom of each email communication. We will not transfer your personal data to our business partners for use by our business partners in direct marketing.
How do we share your information?
If required, we will share your personal information with law enforcement agencies, government authorities and, in order to operate successfully and provide you with the full functionality of our Products and Services, we disclose your personal information to other 28Daymumandbaby affiliated companies and/or other third parties.
Third-party service providers may process your personal information on 28Daymumandbaby‘s behalf or for one or more of the purposes listed above. If we share your information with a third-party service provider, we will ensure that the third-party service provider has a comparable level of data protection as is provided by the applicable data protection legislation.
When using certain mobile applications on our devices, in order to provide you with some of the Services you requested, we share your IP address with third parties. If you no longer wish to allow us to share this information, please contact us by sending an email to enquiry@28Daymumandbaby.com
We do not sell any personal information to third parties.
Information not requiring consent
We may share anonymized information in aggregate form with third parties (such as advertisers on our website) for commercial purposes. We may share trends in common usage of our Services, for example, the number of customers in a particular group who purchase certain Products or engage in certain transactions.
For the avoidance of doubt, 28Daymumandbaby may collect, use, or disclose your personal information without your consent if it is, and only to the extent it is allowed explicitly under local data protection laws. We may also disclose your information without your consent if we believe in good faith that it must be disclosed in order to protect our rights, your safety, or the safety of others; investigate fraud; or to respond to government requests.
28Daymumandbaby‘s security measures
We are committed to keeping your personal information secure. In order to prevent unauthorized access, disclosure, or other similar risks, we have put in place reasonable physical, electronic, and internal procedures to protect the information we collect from you during your use of the mobile application.
All of your personal information is stored on secure servers and protected in controlled facilities either directly by us or by a third party contracted by us. We classify your data based on importance and sensitivity, and we will do our best to ensure that your personal information is always protected by a high level of security. We also strive to ensure that employees and third-party service providers who provide products and services to you by accessing this information will be held under strict contractual confidentiality obligations. Similarly, we have special access control measures for cloud-based data storage. In summary, we regularly review our information collection, storage, and processing practices, including physical security measures taken in order to prevent any unauthorized access and use.
We will take all practicable steps to protect your personal information. You should, however, be aware that the use of the Internet is not entirely secure, and for this reason, we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the Internet.
Where there is a breach of personal data, we will act upon it in a timely fashion, by notifying the breach to the relevant supervisory authority and/or the relevant data subjects in accordance with applicable data protection laws.
What you can do
You can play your part in safeguarding your personal information by not disclosing your login password or account information to anybody unless such person is duly authorized by you. When you log into your account, always be mindful to log out at the end of the session, especially if you are using another person’s device.
28Daymumandbaby cannot be held responsible for lapses in security caused by third party access to your personal information as a result of your failure to keep your personal information private. Notwithstanding the foregoing, you must immediately notify us if any online users access your account without permission or if any other security breaches occur.
Your cooperation will help us better protect your personal information.
We retain information we collect about you as long as it is still needed for the purposes we obtained it or for as long as it is needed to comply with applicable legal requirements or permissions. We shall cease to retain personal information, or remove the means by which the personal information can be associated with particular individuals, as soon as it is reasonable to assume that the purpose for which that personal information was collected is no longer being served by retention of the personal information. If further processing is required for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes according to the applicable laws, your data may be further retained by us even if the further processing is incompatible with original purposes. Should that be the case, we will notify you of any new purpose in which your personal data is used.
Accessing other features on your device
Our application will need to access certain features on your device, for example, Wi-Fi network status. This information is necessary for our application to run on your device and for you to be able to use it. You can close the application on your device at any time, or you can contact us at enquiry@28Daymumandbaby.com to revoke your consent. Please note that this may affect the Services which we are able to provide to you.
You have control over your personal information
If you have previously agreed to let us use your personal information for the purposes described above, you can change your decision at any time by writing to us at 28 Sin Ming Lane, #07-131, Midview City, Singapore 573972 or sending an email to enquiry@28Daymumandbaby.com or by changing any relevant control settings through the application.
Access, update, correct, erase or restrict processing your persona information
You have the right to request access to and/or to correct any personal information we hold about you. When you update your personal information, you will be asked to verify your identity before your request is processed. Once we have a sufficient amount of information, we will be able to process your request to either access or make corrections to personal information. We will respond to your request within the time period specified by applicable data protection law.
A copy of your personal data collected and processed by us will be provided to you upon your request free of charge. For any extra request of the same information, we may charge a reasonable fee based on actual administrative costs according to the applicable laws. If you would like to request access to your personal data held by us or if you believe any information we are holding about you is incorrect or incomplete, please write to us or email us as soon as possible at enquiry@28Daymumandbaby.com.
If you are using or accessing our Products and Services from the European Union (EU), under the General Data Protection Regulation (GDPR), you have the right to obtain from us erasure of your personal information. Where you have made a request to us for erasure, we shall consider the grounds regarding your request and take reasonable steps, including technical measures, in accordance with the GDPR.
As an EU user, you also have the right to restrict the processing of your personal information in certain circumstances. We shall consider the grounds regarding your restriction request. If the grounds under the GDPR apply, we shall only process your personal information under applicable circumstances in the GDPR and inform you accordingly.
As an EU user, you also have the right not to be subject to a decision based solely on automated processing, including profiling, and the right to receive your personal information in a structured, commonly used format or to transmit it to another data controller.
Withdrawal of consent
You can submit a request to us, by email at enquiry@28Daymumandbaby.com, to withdraw your consent for us to collect, use and/or disclose any of your personal information that we hold or control. We will process your submission within a reasonable amount of time, after which, we will abide by your request and no longer collect, use, and/or disclose your personal information. You acknowledge that your withdrawal of consent may result in some legal consequences. Depending on the extent of your withdrawal of consent for us to process your personal information, it may mean that you will not be able to use or access our Products or Services.
Transfer of personal information outside of your jurisdiction
To the extent that we need to transfer personal information outside your jurisdiction, whether it is transferred to our affiliates (these may include communications, social media, technology, or cloud Services) or to third-party service providers, we shall do so in accordance with the applicable laws. In particular, in order to ensure that all such transfers comply with applicable local data protection law, we will implement appropriate security safeguards. You will have the right to be informed of the appropriate safeguards taken by us for this transfer of your personal information. For example, if you choose to use other third-party services available for this product or service (such as Amazon Alexa, Google Assistant, etc.), those third parties may be able to read information about you and information about you may also be transferred to a third-party server outside of your jurisdiction. By using our Services, you agree to this kind of transfer.
We believe that it is the responsibility of parents to monitor their children when using our Products and Services. Our policy, however, does not require us to obtain the personal information of minors or to send any promotional materials to them.
28Daymumandbaby will not seek or attempt to seek out any way to obtain personal information from a minor. If parents or guardians have reason to believe that a minor has provided personal information to 28Daymumandbaby without their prior consent, they should contact us at enquiry@28Daymumandbaby.com to ensure that such personal information is removed and that subscriptions the minor may have for any applicable any of our Services are cancelled.
Order of priority
Do I have to agree to all terms and conditions of third parties?
Data Protection Officer
28Daymumandbaby Pte Ltd
28 Sin Ming Lane, #07-131, Midview City