Last updated: 31 August 2026
This Privacy Policy explains how The Ugly Company Pte Ltd (“Naturali”, “we”, “us”, “our”) collects, uses, discloses and protects your personal data when you visit naturali.me (the “Site”), buy from us, or contact us.
We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”).
1. Who we are and how to reach us
Naturali is operated by The Ugly Company Pte Ltd, UEN 202010538E, registered address 138C Yuan Ching Road, #18-139, Singapore 613138, Singapore.
Our Data Protection Officer can be reached at hello@naturali.me, or by post at the address above marked “Data Protection Officer”.
2. What personal data we collect
Order and account information
Your name, billing address, delivery address, email address, phone number, order history, and account login details if you create an account.
We do not collect or store your full card number. Card details are entered directly with our payment processor, Stripe, and we receive only limited information such as the card brand, the last four digits, and whether the payment succeeded.
Device and usage information
Your IP address, browser type and version, device type, time zone, referring pages, the pages and products you view, and how you interact with the Site. This is collected automatically through cookies and similar technologies, and through our server logs.
Communications
The content of emails, contact-form messages and other correspondence you send us, together with your contact details, so that we can respond and keep a record of the enquiry.
Reviews
If you leave a product review, we collect the name you choose to display, your email address, and the content of your review. Reviews are handled by Judge.me on our behalf, and the review you submit is published on the Site.
Marketing preferences
Whether you have consented to receive marketing from us, and your response to it.
3. Why we use your personal data
- To process and deliver your orders, and to take payment.
- To send you order confirmations, dispatch notices and other service messages.
- To manage your account and provide customer support.
- To handle returns, refunds and warranty or quality issues.
- To detect and prevent fraud, abuse and other unlawful activity.
- To operate, maintain, secure and improve the Site.
- To send you marketing about our products, where you have consented, and to measure how it performs.
- To comply with our legal and regulatory obligations, including tax and accounting record-keeping.
4. Our basis for using your data
Under the PDPA we rely on your consent, on deemed consent where you voluntarily give us data for an obvious purpose such as fulfilling your order, and on the legitimate interests and other exceptions permitted by the Act — for example, to prevent fraud, to secure our systems, and to meet legal obligations.
You may withdraw your consent at any time — see section 9.
5. Who we share your data with
We do not sell your personal data. We share it only with parties who help us run the business, and only as far as they need it:
- Stripe — payment processing, including card and PayNow payments, and fraud screening.
- Delivery partners — J&T Express, SPX Express, Ninja Van and Singapore Post (SingPost) — to deliver your order. They receive your name, delivery address and phone number.
- Hosting and infrastructure providers — to host the Site and store its data.
- Email providers — to send order and service emails, and marketing where you have consented.
- Google Analytics — to understand how the Site is used.
- Meta (Facebook) Pixel — to measure the performance of our advertising and to show you relevant ads on Meta platforms.
- Judge.me — our product-review service. It receives your name, email address and review content when you leave a review, and its widget loads on our product pages. It may also email you after a purchase to invite a review.
- Professional advisers — accountants, auditors and lawyers, where needed.
We may also disclose personal data where we are required to do so by law, by a court order or by a regulator, or where disclosure is necessary to establish, exercise or defend legal claims, or to protect the safety of any person.
If our business or its assets are transferred to another party, personal data may be transferred as part of that transaction. We would tell you if that happened.
6. Transfers outside Singapore
Some of our service providers, including Stripe, process data on servers outside Singapore. Where we transfer personal data overseas, we take steps required by the PDPA to ensure it receives a standard of protection comparable to that under the Act, normally through contractual commitments with the recipient.
7. Cookies
We use cookies and similar technologies to keep you logged in, remember the contents of your basket, secure the checkout, and understand how the Site is used.
Some cookies are strictly necessary for the Site to work; without them the shop and checkout will not function. Others are optional. You can control or delete cookies through your browser settings.
Advertising and measurement
We use Google Analytics to measure how the Site is used, and the Meta (Facebook) Pixel to measure our advertising and to show ads to people who have visited the Site. These tools set cookies or similar identifiers and share limited information about your activity on the Site with Google and Meta, who act as our partners for these purposes.
You can opt out of Google Analytics using Google’s browser add-on, and you can control how Meta uses your data through your Meta account’s ad settings. Blocking these cookies in your browser also prevents this collection, and does not affect your ability to shop.
8. Marketing
We send marketing emails only to people who have consented to receive them. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing hello@naturali.me.
Unsubscribing from marketing does not stop service messages about orders you have placed, such as confirmations and dispatch notices.
9. Your rights
Under the PDPA you may:
- Access the personal data we hold about you, and ask how it has been used or disclosed in the past year.
- Correct personal data that is inaccurate or incomplete.
- Withdraw consent to our collection, use or disclosure of your personal data.
To make a request, email hello@naturali.me. We may need to verify your identity first, and we may charge a reasonable fee for an access request as permitted by the PDPA. We will respond as soon as reasonably possible.
Withdrawing consent may mean we can no longer provide certain services to you — for example, we cannot fulfil an order without your delivery address. We will tell you if that is the case.
10. How long we keep your data
We keep personal data only as long as we need it for the purposes described here, or as long as the law requires. Order and transaction records are kept for at least five years to meet Singapore tax and accounting requirements. Account data is kept while your account is open. Marketing data is kept until you withdraw consent.
When personal data is no longer needed for any legal or business purpose, we delete it or anonymise it.
11. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, use, disclosure, alteration or loss. These include encrypted connections (HTTPS), restricted administrative access, and using a PCI-compliant payment processor so that card details never reach our systems.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children
The Site is not directed at children, and we do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe we have done so, contact us and we will delete it.
13. Third-party sites
The Site may link to other websites. This policy does not apply to them, and we are not responsible for their privacy practices. Please read their policies before giving them your data.
14. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be highlighted on the Site.
15. Questions and complaints
Please contact our Data Protection Officer at hello@naturali.me with any question or complaint about how we handle your personal data. We will investigate and respond.
If you are not satisfied with our response, you may refer the matter to the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.