Glello Privacy Policy

Depending on your interaction with us, we may collect:

• Contact and enquiry details: names, email addresses, telephone numbers, organisation details, messages, preferences and enquiry history.
• Booking and participant details: event date, time and venue, package, attendance, a child’s name, age and interests, personalisation instructions, and parent, guardian or emergency contacts.
• Safety and supporting information: relevant allergies, accessibility or support needs, incident details, and evidence supporting a postponement or refund. Provide only what is necessary; medical certificates may have unrelated diagnoses and identification numbers redacted.
• Transaction and event records: quotations, invoices, payment and refund records, feedback, complaints, and photographs or videos as described in section 6.
• Website and advertising data: IP address, browser and device information, cookies and similar identifiers, referral sources, advertising click IDs, pages visited, link or WhatsApp button clicks, and interaction dates and times.

We obtain data through our website, WhatsApp, email, calls and events; from parents, guardians or authorised organisers; and through relevant service providers and advertising platforms.

We use relevant data to respond to and follow up on enquiries; prepare quotations; plan, personalise and deliver events safely; communicate with you; manage payments, changes and refunds; resolve complaints; and keep business records. We also use data to meet legal obligations, protect our systems and legal rights, and understand and improve our services, website and advertising. Advertising and promotional uses are explained below.

We collect, use and disclose personal data with consent, including consent validly deemed under the PDPA, or where the law otherwise permits or requires it. We notify you of the relevant purposes at or before collection, unless a lawful exception applies.

Our website and enquiry forms are intended for adults. If you provide another person’s data, you must be authorised to do so and, where required, obtain their consent and bring this policy to their attention. For a child under 13, any required consent must come from a parent or guardian, or someone validly acting on their behalf.

We use cookies, local storage, pixels and similar technologies to operate and secure our website, remember visit information, understand website use and measure advertising. Google and Meta (Facebook and Instagram) may receive device, usage and event information through their tags. We may associate visits and advertising interactions with enquiries, WhatsApp clicks and confirmed bookings, including event identifiers, dates and values, to understand which advertising produces results.

For Google enhanced conversions and related conversion measurement, we may share an adult enquirer’s email address and telephone number with Google to perform ad measurement services on our behalf. Contact identifiers are hashed using a one-way cryptographic process before transmission for matching. Google can match these identifiers against its records to attribute enquiries or bookings to advertising interactions. Hashing does not make the information anonymous. We do not send children’s details, photographs, medical information or enquiry message contents for advertising matching.

We obtain consent for advertising data collection and sharing where required by law or applicable platform policies. You may restrict cookies through your browser, adjust your Google or Meta advertising settings, or contact us to withdraw consent for future use of your contact details for advertising matching. Browser settings alone may not stop data sharing from our booking systems, and some website functions may be affected by blocking cookies.

More information is available in How Google uses information from partner sites and Meta’s Privacy Policy. These platforms also process information under their own applicable policies and settings.

We may send news, offers or service promotions by email, WhatsApp, SMS or telephone where you have consented or the law otherwise permits. We comply with applicable Do Not Call requirements for Singapore telephone numbers. You may opt out through an unsubscribe option, by replying to us or by contacting us below. Opting out does not prevent necessary communications about an active enquiry, booking or payment. Acceptance of booking terms does not by itself constitute consent to unrelated promotional messages.

We may take photographs and videos during events for use on our website, social media and advertisements, with consent where required or as otherwise permitted by the PDPA. You may ask us at any time not to photograph or feature you or your child, or to remove published material featuring you or your child. We will act promptly, stop further marketing use and remove relevant material from channels under our control. Declining or withdrawing permission does not affect your party service. We cannot guarantee removal of independent third-party reposts or copies already distributed, but will take reasonable steps to assist where practicable.

We share relevant data only as reasonably needed for the notified purposes, with:

• Our team and event suppliers: staff, contracted hosts, venues and suppliers involved in planning, delivering or supporting your booking.
• Technology and business providers: providers of hosting, data storage, customer management, automation, communications, accounting, payments and advertising measurement, including Google and Meta as described above.
• Other appropriate recipients: professional advisers, insurers, emergency services and public authorities where necessary to address incidents, establish or defend legal claims, or comply with law; and other recipients you authorise.

We do not sell personal data. Providers processing data on our behalf are subject to appropriate confidentiality, security and data protection requirements.

Our staff, contractors and service providers may access, store or process personal data outside Singapore, including in the Philippines and countries where our providers operate. We take the steps required under the PDPA to ensure comparable protection for overseas transfers, such as legally enforceable contractual obligations or other permitted safeguards.

We make reasonable security arrangements to protect personal data against unauthorised access, use, disclosure, alteration or loss, including access restrictions appropriate to the data and its use. If a breach requires notification under the PDPA, we will notify the PDPC and affected individuals as required.

We retain personal data only while it serves the purposes for which it was collected or another necessary legal or business purpose. Booking, payment and accounting records may be retained for applicable statutory periods or disputes. Safety information and supporting medical evidence are kept only for as long as needed for the relevant arrangements, incidents or legal requirements. We delete or anonymise data when retention is no longer necessary.

You may contact us to request access to your personal data and information about its use or disclosure in the preceding year, correct errors, withdraw consent, or request deletion. We may verify your identity and authority to act for a child or another person. Requests are subject to applicable legal exceptions; deletion is not an absolute right where retention remains necessary.

We respond to access and correction requests as soon as reasonably possible. If we cannot respond within 30 days, we will inform you in writing within that period when to expect a response. Any reasonable access fee will be explained before we process the request; we do not charge for corrections. Where a request cannot be fulfilled, we will explain the reason to the extent permitted or required by law.

After reasonable notice of a consent withdrawal, we will stop the relevant collection, use or disclosure, and cause our providers acting on our behalf to do so, unless the law permits or requires it to continue. We will explain any likely consequences: withdrawal of data necessary for a booking may affect delivery, but declining optional advertising or promotional use does not affect your party service. Withdrawal does not undo earlier lawful processing.

For privacy questions, requests or complaints, contact our Data Protection Officer through enquiry@glello.sg, with the subject “Privacy request”, or WhatsApp +65 8062 7987. Include enough information to identify the relevant enquiry, booking or published material. We will investigate and respond to privacy complaints. You may also raise a concern with Singapore’s Personal Data Protection Commission.

GLELLO PTE. LTD.
60 Paya Lebar Road, #6-28
Paya Lebar Square, Singapore 409051

We may update this policy and will show the revised date on our website. If we propose a new purpose requiring notification or consent, we will provide that notification and obtain consent before proceeding, unless the law permits otherwise. An update does not retrospectively authorise a use that was unlawful when it occurred.