Privacy Policy
1. Who we are
Tela ("Tela", "we", "us", "our") is a pre-loved fashion marketplace operated by Adquantiv Pte. Ltd. (UEN [UEN]), a company incorporated in Singapore with its registered office at [registered address], Singapore. We are the organisation responsible for your personal data under the Singapore Personal Data Protection Act 2012 ("PDPA").
This Privacy Policy explains what personal data we collect when you use the Tela mobile app and website (together, the "Service"), how we use and share it, and the choices and rights you have. It should be read together with our Terms & Conditions.
2. Personal data we collect
- Account & profile — your mobile number (used to sign in), display name, username, profile photo, and any bio or preferences you add.
- Identity verification — when you verify your identity through Singpass / Myinfo, we receive confirmation of your verified status and a limited set of attributes (such as your name and that you are a verified Singpass user). We do not retain your full NRIC/FIN number.
- Listings & transactions — items you list, photos and descriptions, prices, offers, orders, purchases, sales, reviews, and messages with other users.
- Payments & payouts — to take payments and pay sellers we use Stripe. Stripe collects and processes your card or bank details directly; we receive limited information such as payment status, the last four digits of a card, your payout (bank) account status, and the identity details Stripe requires for seller onboarding. We do not store full card or bank account numbers.
- Delivery — delivery and collection addresses and contact details needed to fulfil orders.
- Communications & support — messages you send us, and the contents of in-app messages and dispute reports.
- Device & usage data — device type and operating system, app version, identifiers, push-notification tokens, log and diagnostic data, and how you interact with the Service.
- Approximate location — derived from your device or input, to show relevant local listings and estimate delivery.
3. How we collect your data
We collect personal data: (a) directly from you when you register, create listings, transact, or contact us; (b) automatically as you use the Service; and (c) from third parties acting on your instruction or on our behalf, including Singpass/Myinfo (GovTech) for identity verification, Stripe for payments and seller onboarding, and delivery partners.
4. How and why we use your data
We rely on your consent, deemed consent, and the legitimate-interests and other bases permitted under the PDPA to use your data to:
- operate the marketplace — create and secure your account, publish listings, and process offers, orders, payments, escrow, and payouts;
- verify identity, keep Tela safe, detect and prevent fraud and prohibited activity, and resolve disputes;
- personalise your feed, search, and recommendations;
- send you transactional messages (orders, offers, payouts) and, where permitted, service and marketing updates you can opt out of;
- provide customer support and improve and develop the Service; and
- comply with applicable laws and respond to lawful requests.
Marketing communications. Transactional and service messages about your account, listings, orders, payments, and payouts are not marketing — they are part of providing the Service. We send marketing messages (promotions, recommendations, and product updates) only on the channels you have opted in to — email, SMS, and/or WhatsApp. Marketing opt-in is off by default; you can change your choices or opt out at any time in the app under Settings › Notifications, or via the unsubscribe option in any marketing message. For marketing calls and text messages to Singapore numbers, we comply with the Do Not Call provisions of the PDPA and with the Spam Control Act.
5. When we share your data
We share personal data only as needed to run the Service, and we never sell it. We may disclose data to:
- Other users, as part of a transaction — for example, sharing a delivery address with your seller, or your public profile, listings, and reviews;
- Service providers (data intermediaries) who process data on our behalf, including Stripe (payments and payouts), Google Firebase / Google Cloud (app infrastructure, authentication, database, storage, and notifications), Singpass/Myinfo (identity verification), and delivery partners;
- Professional advisers (such as auditors and lawyers) where reasonably required; and
- Authorities or other parties where we believe disclosure is required by law, to enforce our Terms, or to protect the rights, safety, and property of our users, the public, or Tela, including in connection with a merger, acquisition, or sale of assets.
6. Transfers outside Singapore
Some of our service providers process data outside Singapore. Where we transfer personal data abroad, we take the steps required by the PDPA to ensure the recipient provides a standard of protection comparable to the PDPA, for example through contractual commitments.
7. How long we keep it
We keep personal data for as long as your account is active and as needed to provide the Service, and afterwards only as required to comply with legal, tax, accounting, and regulatory obligations, resolve disputes, and enforce our agreements. We delete or anonymise data when it is no longer needed.
8. Your rights under the PDPA
Subject to the PDPA, you may request access to the personal data we hold about you and information about how it has been used; request correction of inaccurate or incomplete data; withdraw consent to our collection, use, or disclosure of your data; and request deletion of your account. We will respond within the timeframes required by law. Some requests may affect your ability to keep using the Service, and we may retain certain data where the law allows or requires.
9. How we protect your data
We use technical and organisational measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect your data. Payment and bank details are handled by Stripe under its own security controls (PCI DSS). No system is completely secure, but we work continuously to safeguard your information and will notify you and the relevant authorities of a data breach where required.
10. Cookies & analytics
Our website uses essential cookies to function and limited analytics to understand usage and improve the Service. You can manage cookies through your browser settings. Our app uses similar technologies and device identifiers for analytics and notifications.
11. Children
Tela is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, please contact us and we will remove it.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version here with a new "last updated" date and, for material changes, notify you through the Service.
13. Contact us & our Data Protection Officer
For any privacy question or to exercise your rights, contact our Data Protection Officer at privacy@tela.sg, or write to Adquantiv Pte. Ltd., [registered address], Singapore. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore (PDPC).