Privacy policy

2 Privacy policy

2.1 Responsible organisation

GERMONIZER PTE. LTD., trading as BESURO, is responsible for the personal data covered by this policy and acts as controller where that term applies. Contact our privacy team at info@besuro.com or the address in section 1.2 of our Terms of Service.

2.2 Information collected

Depending on your interactions, we collect contact and delivery details, account information, order and payment-status records, support communications, consent and marketing preferences, and technical data such as IP address, browser, device, approximate location and cookie identifiers. Optional analytics and advertising collection is subject to the choices and legal requirements described in section 3.

2.3 Payments

Payment details are processed through the payment providers shown at checkout. We use transaction information needed to reconcile payments, refunds and fraud checks. The provider’s notice describes its own processing. Do not send payment-card details through email or support messages.

2.4 Purposes and legal grounds

We use order and contact information to take steps at your request, fulfil purchases and provide related support; maintain records and respond to lawful requests to meet legal obligations; and protect our services against fraud and security threats. Where legitimate interests are a recognised legal basis, we rely on them only after considering your rights. We obtain consent for marketing and tracking where required. Under Singapore law, processing relies on consent, applicable deemed consent or a lawful exception. Where required, we provide a specific notice for a new purpose before using data for that purpose.

2.5 Choices and withdrawal

Required checkout fields enable us to process and deliver your order; without them we may be unable to fulfil it. Optional marketing consent is not a condition of purchase. Withdraw consent through the relevant unsubscribe link, cookie settings or info@besuro.com. Withdrawal does not invalidate prior lawful processing or prevent retention or processing required or otherwise permitted by law. We will explain material consequences where relevant.

2.6 Recipients

We disclose information as necessary to providers supporting e-commerce, payments, hosting, delivery, communications, support, analytics and fraud prevention; professional advisers; and authorities where lawfully required. Advertising disclosures occur only under applicable consent or other legal requirements. We do not authorise providers to use information beyond the agreed purposes unless they have an independent lawful basis and appropriate notice.

2.7 International transfers

Providers may process information outside your country, including outside Singapore or the EEA/UK. We apply the safeguards required by the relevant law. Singapore transfers require comparable protection unless an exception applies. Where GDPR or UK transfer rules apply, transfers rely on an applicable adequacy decision, approved contractual safeguards with any necessary supplementary measures, or another lawful route. Contact info@besuro.com for information about the safeguards applicable to your data.

2.8 Retention

We retain order and accounting records for applicable legal recordkeeping periods; support and dispute records while needed to resolve the issue and related claims; and account information while the account remains active and for any justified period afterwards. Consent records and suppression information are kept as needed to demonstrate and respect your choices. Technical data is retained according to its purpose and the cookie information provided through our settings. We delete or anonymise data when no longer needed, subject to lawful preservation requirements.

2.9 Security and sensitive reports

We use reasonable organisational and technical safeguards appropriate to the risks. No system is completely secure. Please avoid sending unnecessary health, identity-document or incident details. Where support requires sensitive information, we handle it under the additional protections and lawful grounds that apply. We do not use health or suspected-spiking reports for targeted advertising.

2.10 Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent. Some rights depend on jurisdiction and the processing basis. Email info@besuro.com; we may request proportionate identity verification and will respond within applicable statutory periods. EEA/UK requests are generally addressed within one month, subject to lawful extensions. You may complain to Singapore’s PDPC or the competent data-protection authority in your jurisdiction. You may object at any time to direct marketing where that right applies.

2.11 Marketing and children

Promotional emails and messages include an appropriate opt-out route. Transactional order and safety messages are separate from advertising. Singapore telephone marketing is subject to applicable Do Not Call and consent requirements. Product age guidance does not authorise collection of children’s personal data. Where parental consent or other safeguards are required for a child’s interaction, we must apply them before the relevant processing. Contact info@besuro.com about a child’s information or a deletion request.

2.12 Privacy contact and updates

Privacy and DPO enquiries: info@besuro.com. We update this notice when practices change and give additional notice or obtain consent where required. Additional jurisdiction-specific rights are provided in the applicable local notice where required.

3 Cookies and preferences

3.1 Technologies

Cookies, pixels and similar technologies support the store, save preferences and, where permitted, measure usage and advertising effectiveness.

3.2 Categories

Necessary technologies support functions such as checkout, security and session management. Preference, analytics and advertising technologies are separately identified in the cookie settings, together with the relevant providers, purposes and durations.

3.3 Consent

Technologies requiring consent are blocked until you consent. Rejecting optional tracking does not prevent a purchase. Where consent is required, we offer clear acceptance, rejection and customisation options. Consent is not inferred merely from browsing.

3.4 Changing preferences

Use the Cookie Settings link to change or withdraw optional choices. Browser controls may also remove stored cookies. Withdrawing consent stops future consent-based tracking but does not undo earlier lawful processing.

3.5 Advertising services

Where enabled and lawfully permitted, analytics or advertising providers may receive identifiers and interaction data. The cookie settings identify the services actually used. Choices apply to relevant pixels and server-side disclosures as well as cookies. Applicable local opt-out rights are provided where required.