Privacy policy

Last updated: 31 August 2026

1. About this Privacy Policy

This Privacy Policy explains how Alive Brewing Pte Ltd collects, uses, discloses, stores and otherwise processes personal data when you:

• Visit or use alivebrewing.sg;
• Create or use a customer account;
• Place or receive an order;
• Subscribe to marketing emails;
• Contact us;
• Interact with our website, products or services; or
• Otherwise provide personal data to us.

This Policy should be read together with our Terms of Service, Return and Refund Policy, Shipping Policy, Contact Information and Legal Notice.

2. Organization responsible for personal data

Alive Brewing Pte Ltd is responsible for personal data in its possession or under its control.

Alive Brewing Pte Ltd
UEN: 201917237M
27 Tuas Bay Walk, #04-08
Westview Food Factory
Singapore 637127
Website: https://alivebrewing.sg

3. Data Protection Officer

Questions, requests or complaints concerning personal data may be directed to:

Data Protection Officer
Alive Brewing Pte Ltd
Email: getbeers@alivebrewing.co
Address: 27 Tuas Bay Walk, #04-08, Westview Food Factory, Singapore 637127

Please use the subject line “Privacy Request”.

We may need to verify your identity before processing a request involving personal data.

4. Meaning of personal data

In this Policy, “personal data” means data about an individual who can be identified from that data, or from that data together with other information to which an organization has or is likely to have access.

Information that has been effectively anonymized so that it can no longer identify an individual is not personal data.

5. Personal data we collect

The personal data we collect depends on how you interact with us.

Contact and identity information

This may include:

• Name;
• Email address;
• Telephone number;
• Billing address;
• Delivery address;
• Recipient details; and
• Customer-account identifiers.

Age-related information

Because we sell alcohol, we collect a confirmation that a purchaser is at least 18 years old.

Where reasonably necessary for legal or licensing compliance, we or our delivery provider may request further age or identity verification. We do not intend to retain identity-document information unless it is necessary and permitted for a legitimate legal or business purpose.

Order and transaction information

This may include:

• Products viewed or ordered;
• Cart contents;
• Order number;
• Order value;
• Discounts;
• Payment status;
• Refund, cancellation and return information;
• Purchase history;
• Delivery status; and
• Customer-service records relating to an order.

Delivery information

This may include:

• Delivery address;
• Recipient contact information;
• Delivery notes and access instructions;
• Dispatch and delivery status;
• Courier records;
• Delivery date;
• Photographic proof of delivery; and
• Information concerning failed or disputed delivery.

Delivery photographs are intended to document the delivery location and should not deliberately capture individuals or unnecessary personal information.

Customer-account information

If you create a Shopify customer account, we may process:

• Account identifiers;
• Contact information;
• Order history;
• Account preferences; and
• Account security and authentication information.

Shopify manages the technical operation and authentication of Shopify customer accounts.

Communications

This may include information provided when you:

• Email us;
• Submit a contact form;
• Make an enquiry;
• Request support;
• Make a complaint;
• Request a return or refund;
• Submit a privacy request; or
• Otherwise communicate with us.

Marketing information

If you subscribe to marketing emails, we may collect:

• Email address;
• Subscription status;
• Consent or signup record;
• Email delivery information;
• Email opens, where tracking is enabled;
• Link clicks;
• Unsubscribe activity; and
• Spam-complaint information.

We do not currently use SMS, WhatsApp or postal mail for consumer marketing.

Device and website-use information

This may include:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Referring pages;
• Pages viewed;
• Approximate location derived from IP address;
• Dates and times of visits;
• Website navigation;
• Session and cookie identifiers; and
• Interactions with website features.

Payment information

Payments are processed by HitPay Payment Solutions Pte Ltd.

Depending on the selected payment method, HitPay and the relevant payment network or provider may process:

• Payment-card details;
• PayNow information;
• Google Pay information;
• UPI QR payment information;
• Payment authentication information;
• Transaction identifiers; and
• Fraud-prevention information.

Alive Brewing does not directly store complete payment-card numbers or card security codes. We generally receive limited transaction information such as payment status, amount, payment method, transaction reference and information needed to reconcile or refund an order.

6. How we collect personal data

We may collect personal data:

Directly from you

For example, when you:

• Place an order;
• Enter checkout information;
• Create a customer account;
• Confirm that you are at least 18;
• Add delivery instructions;
• Subscribe to marketing emails;
• Contact us; or
• Submit a return, refund, complaint or privacy request.

Automatically

We may collect technical and usage information through:

• Cookies;
• Similar browser technologies;
• Shopify storefront technology;
• Server logs; and
• Google Analytics 4.

From service providers

We may receive relevant information from:

• Shopify;
• HitPay;
• Payment networks and payment-method providers;
• Our chilled-delivery provider;
• Google Analytics;
• Email-delivery services;
• Fraud-prevention and security services; and
• Other vendors acting for or supporting Alive Brewing.

From other persons

Someone placing an order may provide personal data about a recipient. The purchaser is responsible for ensuring that they are authorized to provide the recipient’s information for the order and delivery.

7. Purposes for collecting, using and disclosing personal data

We may collect, use or disclose personal data for reasonable purposes including:

Operating the website

• Displaying and maintaining alivebrewing.sg;
• Providing website functions;
• Maintaining customer accounts;
• Remembering permitted preferences;
• Troubleshooting technical issues; and
• Improving website usability and performance.

Processing orders and payments

• Receiving and reviewing orders;
• Processing and confirming payments;
• Detecting payment errors;
• Preventing fraud;
• Issuing refunds;
• Maintaining transaction records; and
• Communicating about orders.

Fulfilling and delivering orders

• Preparing orders;
• Sharing necessary delivery information with our courier;
• Sending dispatch notifications;
• Completing attended or unattended delivery;
• Creating photographic proof of delivery;
• Investigating missing or disputed deliveries; and
• Arranging redelivery where applicable.

Age and regulatory compliance

• Confirming that a purchaser declares they are at least 18 years old;
• Taking reasonable steps concerning alcohol age restrictions;
• Complying with liquor-licence conditions;
• Preventing unlawful alcohol sales; and
• Responding to regulatory or law-enforcement requirements.

Customer service

• Responding to questions;
• Handling complaints;
• Processing cancellations, returns, replacements and refunds;
• Investigating order or product issues; and
• Maintaining records of customer interactions.

Marketing by email

Where you have subscribed or where otherwise permitted by law, we may:

• Send product-release information;
• Send event or brewery news;
• Send promotional offers;
• Manage subscription preferences; and
• Measure email delivery, opens, clicks, unsubscribes and spam complaints.

You may unsubscribe at any time using the link in a marketing email or by contacting getbeers@alivebrewing.co.

Analytics and improvement

We may use website and order information to:

• Understand how visitors use the website;
• Measure website traffic and performance;
• Identify technical problems;
• Assess product and collection interest;
• Improve navigation and content; and
• Make reasonable business and inventory decisions.

Security, fraud prevention and enforcement

We may process personal data to:

• Protect customer accounts;
• Detect suspicious orders or payments;
• Prevent fraud or abuse;
• Protect the website and our systems;
• Investigate security incidents;
• Enforce applicable terms and policies; and
• Protect the rights, safety and property of customers, Alive Brewing and others.

Legal and business administration

We may process personal data to:

• Comply with tax, accounting, licensing and legal obligations;
• Respond to lawful requests from authorities;
• Establish, exercise or defend legal claims;
• Obtain legal, accounting, insurance or other professional advice;
• Manage audits and corporate records; and
• Facilitate a legitimate merger, restructuring, financing, acquisition or sale of all or part of the business.

8. Consent and other permitted processing

Where the Singapore Personal Data Protection Act 2012 requires consent, we collect, use and disclose personal data with consent, deemed consent or another legal basis or exception permitted under applicable law.

We will not, as a condition of supplying a product or service, require consent to collect, use or disclose personal data beyond what is reasonable for that product or service.

Providing personal data needed for payment, fulfilment, delivery, age compliance or customer service is generally necessary to complete and administer an order.

9. Withdrawal of consent

You may withdraw consent for a particular purpose by contacting the Data Protection Officer at getbeers@alivebrewing.co.

Please identify:

• Your name;
• Relevant contact information;
• The purpose for which you wish to withdraw consent; and
• Any relevant customer or order details.

We will inform you of the likely consequences where appropriate and process the withdrawal within a reasonable period.

Withdrawal does not affect collection, use or disclosure that occurred before the withdrawal. It also does not prevent us from retaining or processing personal data where required or permitted by law.

If you withdraw consent for information necessary to fulfil or administer an active order, provide delivery, manage an account or comply with alcohol restrictions, we may be unable to provide the relevant service.

Marketing-email consent may be withdrawn using the unsubscribe link in any marketing email.

10. Disclosure of personal data

We may disclose personal data where reasonably necessary to:

Shopify

Our store is hosted on Shopify. Shopify processes information to provide:

• Storefront hosting;
• Checkout;
• Customer accounts;
• Order management;
• Shopify Email;
• Shopify Flow;
• Shopify Bundles;
• Fraud and security features; and
• Related ecommerce infrastructure.
• Shopify may process information in countries outside Singapore.

Shopify’s handling of personal data is described in its privacy materials:

https://www.shopify.com/legal/privacy
https://privacy.shopify.com/en

HitPay and payment providers

HitPay processes payments made through available methods including:

• Visa;
• Mastercard;
• American Express;
• UnionPay;
• JCB;
• PayNow;
• Google Pay; and
• UPI QR.

HitPay and the relevant payment networks, banks, wallet providers or payment-method operators may process personal data independently under their own legal and regulatory obligations.

HitPay’s privacy policy is available at:

https://hitpayapp.com/sg/privacy-policy

Delivery provider

We disclose information reasonably necessary to fulfil and document delivery to our third-party chilled-truck delivery provider, including:

• Recipient name;
• Delivery address;
• Telephone number;
• Delivery instructions;
• Access information;
• Order or parcel details; and
• Information required to record completion, failure or redelivery.

The delivery provider should use this information only for authorized delivery and related operational purposes or as otherwise required by law.

Google Analytics

We use Google Analytics 4 to measure website traffic and usage.

Google may process technical and usage information such as device information, browser details, website interactions, approximate location and cookie or device identifiers.

Google’s privacy policy is available at:

https://policies.google.com/privacy

We do not currently use Google Ads or Google remarketing intentionally. If these services are enabled in future, we will review and update this Policy and applicable privacy controls.

Shopify Email

We use Shopify Email to send marketing emails to subscribers.

Shopify Email may process subscription details and campaign-performance information such as:

• Delivery status;
• Opens, where tracking is enabled;
• Link clicks;
• Unsubscribes; and
• Spam complaints.

Professional and technical providers

We may disclose necessary information to:

• Information-technology providers;
• Security and fraud-prevention providers;
• Cloud and data-storage providers;
• Accountants;
• Auditors;
• Lawyers;
• Insurers; and
• Other professional advisers.

Authorities and legal recipients

We may disclose personal data:

• Where required or permitted by law;
• In response to a valid legal or regulatory request;
• To investigate suspected unlawful activity;
• To protect safety, rights or property; or
• To establish, exercise or defend legal claims.

Business transactions

Personal data may be disclosed to advisers, potential counterparties or successor entities in connection with a genuine merger, financing, restructuring, acquisition or sale, subject to appropriate confidentiality and legal safeguards.

11. No sale or personalized advertising by Alive Brewing

Alive Brewing does not sell customer personal data.

Alive Brewing does not currently use Meta Pixel, Facebook or Instagram advertising tracking, Google Ads remarketing, or customer personal data for cross-site personalized advertising.

Shopify, Google, HitPay and other providers may process information for their own permitted purposes under their respective privacy notices and settings.

If our advertising or data-sharing practices materially change, we will update this Policy and applicable privacy controls.

12. Cookies and similar technologies

Cookies are small data files stored on or accessed through a browser or device.

Our website and service providers may use:

Essential cookies

These support functions such as:

• Website security;
• Network management;
• Checkout;
• Cart contents;
• Customer authentication;
• Payment processing;
• Fraud prevention; and
• Remembering necessary session information.

Blocking essential cookies may prevent parts of the website from working.

Functional cookies

These may remember permitted preferences and improve how the website operates.

Analytics cookies

Google Analytics and Shopify analytics technologies may collect information about website visits, traffic, devices and interactions so that we can understand and improve the website.

Advertising cookies

Alive Brewing does not currently use advertising cookies intentionally for Meta advertising, Google Ads re-marketing or cross-site personalised advertising.

Shopify or another provider may set cookies for its own services as described in its privacy and cookie materials.

13. Managing cookies

Depending on location and applicable settings, Shopify may display customer privacy or cookie controls.

You may also manage or block cookies using browser settings. Blocking cookies may affect website functions, checkout, customer accounts or remembered preferences.

Where applicable, Shopify privacy choices may be available through:

https://privacy.shopify.com/en

Browser-based privacy preferences may apply only to the browser or device where they are selected.

14. Marketing communications

We currently send consumer marketing through email only.

We do not currently use SMS, WhatsApp, telephone calls or postal mail for consumer marketing.

You may unsubscribe from marketing email by:

• Selecting the unsubscribe link in the email; or
• Contacting getbeers@alivebrewing.co.

Unsubscribing from marketing does not prevent transactional or service communications concerning orders, delivery, accounts, policy changes, safety or customer support.

15. Accuracy of personal data

We take reasonable steps to ensure that personal data is accurate and complete where it is likely to be used to make a decision affecting an individual or disclosed to another organization.

You should provide accurate information and notify us when relevant information changes.

Account holders may be able to update certain information through Shopify customer accounts. You may also request correction by contacting the Data Protection Officer.

16. Security

We use reasonable administrative, technical and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss, disposal or similar risks.

These measures may include:

• Access restrictions;
• Account authentication;
• Service-provider controls;
• Secure e-commerce and payment platforms;
• Staff access limitations;
• Security monitoring; and
• Appropriate data-handling procedures.

No online transmission or storage method is completely secure. Do not send unnecessary payment-card details, identity documents or other sensitive information through ordinary email.

17. Data breaches

We will assess suspected personal-data breaches and take appropriate containment, investigation and remedial action.

Where required under the Singapore PDPA, we will notify the Personal Data Protection Commission and affected individuals as soon as practicable.

18. Retention

We retain personal data only for as long as reasonably necessary for legal or business purposes, including:

• Fulfilling and administering orders;
• Maintaining customer accounts;
• Providing customer support;
• Managing returns, refunds and disputes;
• Maintaining tax, accounting and transaction records;
• Complying with liquor-licensing and other legal obligations;
• Preventing fraud and abuse;
• Maintaining marketing consent and unsubscribe records; and
• Establishing, exercising or defending legal claims.

Retention periods vary by information type and applicable requirement.

When personal data is no longer required for a legal or business purpose, we will take reasonable steps to delete it, anonymise it or otherwise remove the means by which it can be associated with an individual.

Our service providers may maintain their own retention periods where they process information independently under legal or regulatory obligations.

19. Overseas transfers

Shopify, Google, HitPay or other service providers may store or process personal data outside Singapore.

Where Alive Brewing transfers personal data outside Singapore, we will take steps required under applicable law to ensure that the recipient provides a standard of protection comparable to the protection under the Singapore PDPA, unless an applicable legal exception applies.

These steps may include contractual protections, service-provider terms, data-processing agreements or reliance on other transfer mechanisms permitted by law.

20. Access and correction requests

Subject to applicable exceptions, you may request:

• Access to personal data in our possession or under our control;
• Information about how that personal data was used or disclosed during the preceding year; or
• Correction of an error or omission in your personal data.

Send requests to:

Data Protection Officer
getbeers@alivebrewing.co

Please use the subject line “Privacy Request”.

Provide sufficient information for us to identify you and understand the request. We may request identity verification.

We will respond within the period required by applicable law. Where permitted, a reasonable fee may apply to an access request. If so, we will provide an estimate before processing the request.

Some information may be withheld where an exception under applicable law applies, including where disclosure would reveal another individual’s personal data or otherwise be prohibited.

21. Deletion and other privacy requests

You may ask us to delete personal data that is no longer required or to consider another privacy request.

Deletion is subject to legal, accounting, transaction, licensing, fraud-prevention, dispute and other legitimate retention requirements.

Depending on applicable law and circumstances, additional rights may apply, such as restriction, objection or portability. These rights are not absolute and may not currently apply under Singapore law.

The Singapore Data Portability Obligation will apply only when the relevant implementing regulations take effect.

Requests concerning personal data that Shopify processes independently may be submitted through:

https://privacy.shopify.com/en

22. Persons younger than 18

Our alcohol products and online alcohol store are not intended for individuals younger than 18 years.

We do not knowingly accept alcohol orders from an individual younger than 18 years.

If you are a parent or guardian and believe that a person younger than 18 has provided personal data to us, contact the Data Protection Officer. We will review the matter and take appropriate action, subject to legal and regulatory retention requirements.

23. Third-party websites

The website may contain links to third-party websites, services or social-media platforms.

We do not control the privacy or security practices of third parties. Review the relevant third party’s privacy policy before providing personal data.

A link does not by itself imply that Alive Brewing is responsible for or endorses the third party’s privacy practices.

24. Complaints

If you have concerns about how we handle personal data, contact:

Data Protection Officer
Alive Brewing Pte Ltd
Email: getbeers@alivebrewing.co

Please describe the concern and provide relevant supporting information.

We will review the complaint and respond within a reasonable period.

If you remain dissatisfied, you may contact the Personal Data Protection Commission Singapore through its official channels, subject to its procedures.

25. Changes to this Policy

We may update this Privacy Policy to reflect changes in law, technology, service providers, website functions or our practices.

The current version will be published on alivebrewing.sg with an updated “Last updated” date. Where required, we will provide additional notice or obtain consent.

Material changes will apply prospectively unless applicable law requires otherwise.

26. Contact

For privacy questions or requests:

Data Protection Officer
Alive Brewing Pte Ltd
UEN: 201917237M
27 Tuas Bay Walk, #04-08
Westview Food Factory
Singapore 637127
Email: getbeers@alivebrewing.co