Privacy
Personal data protection notice
Last updated 21 July 2026. How BrewRush Pte. Ltd. handles personal data under Singapore’s PDPA for our specialty espresso café website and operations.
1. Organisation identity
BrewRush Pte. Ltd. (UEN 202649582M) operates the specialty coffee café at 214 East Coast Road, #01-05, Singapore 428913, and the website brewrush.life. Contact: [email protected] / +65 6344 2917. Data protection email: [email protected] (subject “PDPA / DPO”).
We run an espresso-rush neighbourhood coffeehouse: espresso, milk drinks, batch brew, pastry, takeaway cups, seating when available, and small office trays when capacity allows. This notice covers personal data collected online and, where relevant, offline when you contact us about café services.
2. Purposes of collection
We collect personal data to answer visit and hours questions, office tray requests, private group notes, and general café messages; to coordinate timing where we accept a tray or group; to keep the website secure; to comply with law; and to send operational replies you requested. We do not sell personal data. We do not use enquiry data to market beer-brewery identities, get-rich schemes, fireworks, agency retainers or finance courses.
At the East Coast Road counter we may process limited information you volunteer for that visit (for example an allergen reminder you ask us to note while preparing your drink). Those notes are for safe service in the moment unless you ask us to keep a preference for a confirmed group booking.
3. Consent and notice
Website forms rely on consent via the unticked consent_pdpa checkbox. You may withdraw consent by emailing [email protected]; withdrawal does not undo lawful processing already completed. We may also process data where needed to perform a request you initiate (for example confirming a tray time) or where required by law.
Phone or email contacts without the web form are treated as café information requests; we will point you to this policy in replies where practical.
4. Categories of data
Enquiry data typically includes name, email, phone if provided, message content, preferred timing, and consent status. Technical data may include IP address, browser type, device class, pages viewed, and cookie identifiers described in the Cookies Policy. We do not require NRIC for ordinary café visits. Card payments in café, if any, are handled by payment providers at the till — this website does not collect card numbers.
Please avoid sending unnecessary medical detail. We are a coffee café, not a clinic, and we do not provide medical advice about caffeine.
5. Enquiry handling
Messages through send.php are routed to our operations mailbox (including [email protected] for form delivery) with an Asia/Singapore timestamp and a [BrewRush] subject prefix. Access is limited to staff who need to reply. Threads are kept long enough to finish your request and for reasonable follow-up, then deleted or anonymised per retention rules.
6. Data Protection Officer
Email [email protected] with “Data Protection Officer” in the subject, or write to BrewRush Pte. Ltd., 214 East Coast Road, #01-05, Singapore 428913, Attention: DPO. We aim to acknowledge requests promptly and respond to access or correction requests in line with PDPA expectations.
7. Retention
Contact records are generally kept up to twenty-four months after last meaningful correspondence unless law or safety requires longer. Cookie consent choices stored locally last up to six months. Security logs rotate on a shorter window. When retention ends we delete or irreversibly anonymise where feasible.
8. Access and correction
You may request access to personal data we hold about you or correction of inaccuracies, subject to PDPA exceptions. Help us verify your identity and locate records. We may refuse frivolous or vexatious requests as permitted and will explain why.
9. PDPC
Contact us first with complaints about data handling. You may also approach the Personal Data Protection Commission (PDPC) Singapore through its published channels.
10. Cookies
Strictly necessary cookies run the site and store consent. Optional analytics and preference cookies require Accept all or Customise. See the Cookies Policy for durations and vendors. Banner choices last up to six months.
11. Security
We use measures appropriate to a small café: limited mailbox access, HTTPS-ready hosting, least-privilege handling of exports, and staff guidance not to paste guest data into public chats. No transmission method is perfect — do not send passwords or card numbers through the contact form.
12. Cross-border and sub-processors
Hosting, email and analytics vendors may process data in Singapore or elsewhere. Where data leaves Singapore we take steps consistent with PDPA expectations, including contracts where applicable. Sub-processors are limited to tools needed to run the site and reply to café enquiries.
13. Children
The site targets adults organising visits or trays. If we collected a child’s data without appropriate consent, email [email protected] and we will delete where required.
14. Third-party links
Maps or external links have their own policies; we do not control them.
15. Change-log
21 July 2026 — initial publication for brewrush.life covering PDPA café enquiry handling, cookie banner practice, DPO contact and retention defaults for BrewRush Pte. Ltd.
We update this notice when systems or café operations change. The last updated date will move. Material changes will be noted on this page.
16. Café context
BrewRush is a specialty espresso-rush café. Personal data supports visit questions, tray timing, allergen conversations you start, and honest service — not unrelated industry pitches. Photos are illustrative of our brew bar and drinks.
17. Staff access
Only managers and designated shift leads read the enquiry mailbox. Website contractors receive time-limited access. Printed notes from private groups, if any, are secured and disposed after retention ends.
18. Marketing
We do not run a default bulk newsletter. If we launch optional roast-or-board updates later, we will ask separate consent with unsubscribe. Replies to your enquiry are transactional, not marketing blasts.
19. On-premise CCTV
If CCTV operates for safety, signage will say so. Footage is for security and incident review on a limited retention cycle, not for unrelated profiling.
20. Automated decisions
We do not use automated decision-making with legal or similarly significant effects. Form routing is administrative.
21. Breach response
If a notifiable breach affects personal data we hold, we will assess impact and notify individuals and/or PDPC as required, documenting remediation.
22. Summary
BrewRush Pte. Ltd. collects enquiry data to answer questions about our East Coast Road specialty coffee café. Consent boxes stay unticked until you choose. DPO contact is [email protected]. Retention is limited. Access and correction rights exist under PDPA. Cookies beyond necessity are optional. We do not sell personal data. Questions welcome in plain language — we would rather clarify how a neighbourhood espresso café handles data than hide behind fog.
[email protected] · [email protected] · +65 6344 2917 · 214 East Coast Road, #01-05, Singapore 428913.
Additional operational detail
When you request an office tray, we may process delivery timing, headcount, milk preferences and on-site contact numbers solely to fulfil that tray. When you ask about opening hours, we may retain the thread long enough to confirm holiday changes. When you describe an allergen, we use that detail to prepare the order you requested and do not recycle it into unrelated marketing.
Our specialty espresso café may use shared inboxes between shift leads. Each person with access is instructed to treat guest personal data as confidential café operations information. Printed order slips are discarded after service. Digital exports for troubleshooting website forms are deleted after the issue closes.
If you use a corporate email address, we still treat the enquiry as personal data belonging to you as an individual requester, while recognising your organisation may have its own rules for staff communications. We will not add you to third-party café directories without consent.
International visitors contacting us before travel to Singapore should know replies follow Asia/Singapore business hours of the café. We may ask clarifying questions about visit dates so we do not prepare trays for closed days. All of this remains PDPA-aligned café administration for BrewRush Pte. Ltd., not profiling for unrelated industries.
Finally, please remember photos on brewrush.life are illustrative. They are not a guarantee of identical seating layouts or pastry availability on your visit day. Personal data policy and menu honesty travel together at this East Coast Road coffeehouse.
Record location and training
Enquiry records live in our email systems and any export folders used temporarily for troubleshooting send.php. Staff training covers PDPA basics for a small specialty coffee café: collect less, use for stated purposes, secure access, delete on schedule, escalate DPO questions to [email protected]. We review this notice at least annually or when we change form fields, vendors or café processes at 214 East Coast Road.
Annual review note
BrewRush Pte. Ltd. reviews this PDPA notice when form fields change, when vendors change, and at least once yearly. The 21 July 2026 baseline reflects our specialty espresso café operations on East Coast Road, including office tray enquiries and unticked consent checkboxes. Guests can always ask [email protected] for a plain-language explanation of any section.