Privacy Policy
Last updated: March 2026
ICEBATH.COM PTE. LTD. (UEN: 202323273R), a company incorporated in the Republic of Singapore with its registered office at 68 Circular Road, #02-01, Singapore (049422) (“we”, “us”, “our”, “the Company”), is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”).
This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how we protect it, and what rights you have. By using our website (icebaths.com), placing an order, or communicating with us, you acknowledge that you have read and understood this Privacy Policy.
We may update this Privacy Policy from time to time. The most current version will always be available on this page. We encourage you to review it periodically. Your continued use of our website or services following any changes constitutes acceptance of the updated Privacy Policy.
1. What Personal Data We Collect
Personal data is any information that can be used to identify you as an individual. We collect personal data in the following ways.
Information you provide directly
When you place an order, make an enquiry, or communicate with us, we may collect:
Your full name.
Your email address.
Your phone number (including WhatsApp number).
Your delivery address and installation address.
Your billing address.
Payment information (processed securely through our payment providers; we do not store full credit card details).
Any information you provide in messages to us via email, WhatsApp, website contact forms, or social media.
Installation site details, photographs of your space, and any specific requirements you share with us.
Your company or business name, if you are a commercial customer.
Information collected automatically
When you visit our website, we automatically collect certain technical information through cookies and similar technologies, including:
Your IP address.
Your browser type and version.
Your device type and operating system.
Pages you visit on our website, the time and date of your visit, and how long you spend on each page.
The website or source that referred you to us.
Your approximate geographic location (derived from your IP address).
Information from third parties
We may receive information about you from third-party services that we use, including analytics providers, advertising platforms, and CRM tools. This information is used in conjunction with the data we collect directly to improve our services and communications.
2. How We Use Your Personal Data
We collect and use your personal data for the following purposes:
To fulfil your order. Processing your purchase, arranging production, coordinating delivery and installation, communicating with you about your order status, and providing after-sales support and warranty services.
To communicate with you. Responding to your enquiries via email, WhatsApp, phone, website contact forms, or social media. Sending you order confirmations, delivery updates, installation details, and other transactional communications.
To send marketing communications. With your consent, sending you information about our products, services, promotions, events, and content that may be of interest to you, via email or WhatsApp. You can withdraw your consent to marketing communications at any time (see Section 8 below).
To improve our website and services. Analysing how visitors use our website so we can improve the user experience, content, and functionality. This includes the use of analytics tools such as Google Analytics (GA4).
To manage our customer relationships. Maintaining records of our interactions with you, managing your account in our CRM system, tracking your order history, and providing personalised support.
To comply with legal obligations. Meeting our legal, regulatory, and compliance obligations, including tax and accounting requirements.
To protect our business. Detecting and preventing fraud, enforcing our Terms and Conditions, and protecting the rights, property, or safety of our company, our customers, or others.
3. Cookies and Analytics
Our website uses cookies and similar tracking technologies to collect information about how you interact with the site. Cookies are small text files stored on your device when you visit a website.
Types of cookies we use
Essential cookies. These are necessary for the website to function properly. They enable basic features such as page navigation and access to secure areas. The website cannot function properly without these cookies.
Analytics cookies. These help us understand how visitors interact with our website by collecting information about pages visited, time spent on site, and traffic sources. We use Google Analytics (GA4) and other analytics tools for this purpose. The data collected is aggregated and anonymised where possible.
Marketing cookies. These may be used to track visitors across websites to allow us to display relevant advertisements. These cookies are set by third-party advertising platforms.
Managing cookies
Most web browsers accept cookies automatically. You can usually modify your browser settings to decline cookies or to notify you when a cookie is being set. Please note that disabling cookies may affect the functionality of certain parts of our website.
For more information about cookies and how to manage them, visit www.allaboutcookies.org.
4. Third-Party Service Providers
We share your personal data with trusted third-party service providers who assist us in operating our business. These providers are only given access to the data they need to perform their specific services and are required to protect your data in accordance with applicable laws.
The categories of third-party service providers we use include:
Customer relationship management (CRM). We use HubSpot to manage customer interactions, track enquiries, and coordinate communications. Your contact details, order information, and communication history may be stored in HubSpot.
Analytics and website performance. We use Google Analytics (GA4) and other analytics tools to understand website traffic and user behaviour. These tools may collect technical data such as your IP address, browser type, and pages visited.
Shipping and logistics. When we deliver your product, we share your name, delivery address, and contact details with our shipping and logistics partners to coordinate delivery.
Payment processing. Payment transactions are processed by our payment providers. We do not store your full credit card or bank account details. Your payment information is handled directly by the payment provider in accordance with their own privacy and security policies.
Communication platforms. We use WhatsApp and email to communicate with you. Messages you send us via these channels are stored as part of our customer records.
Website hosting and infrastructure. Our website is hosted by third-party hosting providers who may have access to technical data as part of providing their hosting services.
We do not sell your personal data to any third party. We only share your data as described in this Privacy Policy or with your consent.
5. Cross-Border Data Transfers
ICEBATH.COM PTE. LTD. is registered in Singapore, with manufacturing and operations based in Bali, Indonesia. Some of the third-party service providers we use (such as HubSpot, Google Analytics, and communication platforms) may store or process data in jurisdictions outside of Singapore.
Where your personal data is transferred outside of Singapore, we take reasonable steps to ensure that the receiving party provides a standard of protection that is comparable to the protection under the PDPA. This may include entering into contractual agreements with service providers that require them to protect your data to an equivalent standard.
6. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law.
Customer and order data. We retain records of your purchase, delivery, and installation for the duration of your warranty period plus an additional 2 years, to support any warranty claims or after-sales enquiries.
Communication records. Messages exchanged via email, WhatsApp, and other channels are retained for as long as they are needed to provide customer support and manage the ongoing relationship.
Marketing data. If you have consented to receiving marketing communications, we retain your contact details until you withdraw your consent or ask to be removed from our mailing list.
Website analytics data. Analytics data is retained in accordance with the data retention settings configured in our analytics tools. This data is typically aggregated and does not identify you personally after the retention period.
When personal data is no longer required, we will securely delete or anonymise it.
7. Data Security
We take reasonable steps to protect your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. Our security measures include:
Restricting access to personal data to authorised personnel who need it to perform their duties.
Using secure, encrypted connections (HTTPS) on our website.
Using password-protected systems and access controls for our internal tools and databases.
Selecting third-party service providers who maintain appropriate security standards.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
8. Your Rights
Under the PDPA, you have the following rights in relation to your personal data:
Right of access. You may request access to the personal data we hold about you and information about how it has been used or disclosed in the past year.
Right of correction. You may request that we correct any personal data that is inaccurate or incomplete.
Right to withdraw consent. You may withdraw your consent for us to collect, use, or disclose your personal data at any time. This includes the right to opt out of marketing communications. Please note that withdrawing consent may affect our ability to provide certain services to you (for example, if you withdraw consent for us to use your delivery address, we will not be able to deliver your product).
To exercise any of these rights, please contact our Designated Data Protection Officer (see Section 12 below). We will respond to your request within 30 days.
There may be circumstances where we are unable to comply with your request, for example if the data is needed for legal or business purposes permitted under the PDPA. If this is the case, we will inform you of the reasons.
9. Marketing Communications
We may send you marketing and promotional messages via email or WhatsApp about our products, services, and content that we believe may be of interest to you. We will only do so where we have your consent or where we are otherwise permitted to do so under applicable law.
You can opt out of marketing communications at any time by:
Clicking the unsubscribe link in any marketing email.
Replying “STOP” to any marketing WhatsApp message.
Contacting our Designated Data Protection Officer at the details below.
Please note that even if you opt out of marketing communications, we may still send you transactional messages related to your order, delivery, installation, warranty, or after-sales support.
10. Children’s Data
Our products are not intended for use by children, and we do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that data as soon as reasonably practicable.
If you believe that we may have collected data from a child, please contact our Designated Data Protection Officer immediately.
11. Third-Party Websites
Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policy of any website you visit. Clicking on a third-party link will take you away from our website, and your use of that website will be governed by its own privacy policy.
12. Data Protection Officer
We have appointed a Designated Data Protection Officer (“DPO”) who is responsible for ensuring our compliance with the PDPA and for handling any enquiries or complaints relating to your personal data.
If you have any questions about this Privacy Policy, wish to exercise your rights under the PDPA, or have a complaint about how we have handled your personal data, please contact our DPO:
Email hello@icebaths.com
Subject line “Data Protection Enquiry”
Address ICEBATH.COM PTE. LTD., 68 Circular Road, #02-01, Singapore (049422)
We will endeavour to respond to all enquiries and requests within 30 days.
13. Governing Law
This Privacy Policy and any dispute arising out of or in connection with it shall be governed by and construed in accordance with the laws of the Republic of Singapore, including the Personal Data Protection Act 2012
