Privacy Policy

Advocado Privacy Policy

Last updated: 9th October 2026

We respect your privacy. We do not sell, rent, lease or trade your personal data. We share your personal data with a third party for that party's own marketing only if you have separately opted in, and you can withdraw that at any time.

At Advocado Pte Ltd (“Advocado”, “we”, “us”), we take our responsibilities under Singapore’s Personal Data Protection Act 2012 (the “PDPA”) seriously. This Privacy Policy explains how we collect, use, disclose and otherwise process your personal data (“Personal Data”), so you can make an informed decision before providing it.

This Privacy Policy applies to your Advocado loyalty account (“Loyalty Account”) and to Awesome Free, Advocado’s offers service, which you use with the same account.

Advocado collects Personal Data in three ways: when you sign up for a Loyalty Account; when you use our software, apps and platforms, including Awesome Free; and when you visit or transact with merchants that use Advocado (“Merchants”).

When you register, we show you this Privacy Policy and ask for your consent to the Purposes in paragraph 1.2. The optional purpose in paragraph 1.2.8 needs a separate opt-in, and you can use your Loyalty Account without it. Paragraphs 1.2.9 and 1.2.10 explain how Advocado and Awesome Free marketing messages work.

For any questions about this Privacy Policy or how we handle Personal Data, contact our Data Protection Officer (“DPO”) at dpo@advocado.me.

1. Purposes for collection, use, disclosure and processing of Personal Data

1.1 The Personal Data we collect includes:

Personal information: name, date of birth and gender.
Contact information: mobile number and email.
Transaction information: purchases, visits, rewards, stored value, prepaid items, and Awesome Free claims and redemptions.
Interest categories: derived from your activity with Merchants.
Device and usage information: IP address, device type, app activity and cookies.

1.2 We may, directly and through Merchants, collect, use and disclose your Personal Data for the following purposes:

1.2.1 to allow you to take part in the loyalty programmes and marketing activities of Merchants you have joined;

1.2.2 to provide and administer your Loyalty Account;

1.2.3 to respond to your requests for support;

1.2.4 to keep records of the business we carry on;

1.2.5 to send you marketing materials by email, SMS, messaging apps or voice calls about the loyalty programmes and marketing activities of Merchants you have joined, in accordance with the PDPA and Do Not Call rules;

1.2.6 to collect app and website usage information so we can maintain, secure and improve our services;

1.2.7 to prevent fraud and misuse, and to comply with legal and regulatory obligations;

1.2.8 Optional, only if you separately opt in (partner sharing): to disclose your name, contact details, date of birth and interest categories to selected partner brands [category, e.g. lifestyle and family brands], so they can send you their own marketing. This is not a condition of your Loyalty Account;

1.2.9 Advocado updates: to send you marketing about Advocado’s own products and services, including new services we launch.

(a) By email and app notifications: if you have a Loyalty Account, receiving these updates by email and app notification is part of our service. You can unsubscribe from emails at any time, and turn off app notifications in your device settings.

(b) By SMS, messaging apps or calls: we send these updates through these channels only if you separately opt in;

1.2.10 Awesome Free offers: to send you Awesome Free Offers and deals from participating merchants, tailored using your transaction information and interest categories. We send these messages ourselves and do not give your contact details to those merchants for this purpose.

(a) By email: if you have a Loyalty Account, including one created through Awesome Free, receiving these Offers by email is part of our service. You can unsubscribe at any time.

(b) By SMS, messaging apps or calls: we send Awesome Free Offers through these channels only if you separately opt in; and

1.2.11 where you claim an Awesome Free Offer, for two purposes:

(a) to verify, fulfil and track your claim, and to report results to the merchant providing the Offer (“Offer Merchant”). Those reports are in aggregated or de-identified form, except for the details needed to fulfil your claim; and

(b) where you agree at the time of claiming, to disclose your name, mobile number [and email] to that Offer Merchant so it can send you its own vouchers and promotions. The Offer Merchant then uses those details under its own privacy policy.

1.3 We may also process transaction information collected by Merchants for three purposes:

so you can continue to take part in those Merchants’ loyalty programmes;
for those Merchants’ business purposes;
for data analytics.

We use aggregated or de-identified data where Merchants do not need to identify you.

1.4 Before using your Personal Data for a purpose not listed above, we will notify you and obtain your consent, unless the PDPA permits us to proceed without it.

2. Disclosure of Personal Data to third parties

2.1 We respect the confidentiality of the Personal Data you provide to us.

2.2 We disclose Personal Data only to:

2.2.1 Merchants whose loyalty programmes you join, for those programmes;

2.2.2 our service providers (such as hosting, messaging, customer support and analytics providers), which process Personal Data on our behalf and on our instructions;

2.2.3 partner brands, only where you have opted in under paragraph 1.2.8;

2.2.4 Awesome Free Offer Merchants, when you claim one of their Offers: your name, mobile number and claim details, to verify and fulfil your claim. Where you agree at the time of claiming, they also receive your name, mobile number [and email] so they can send you their own vouchers and promotions; and

2.2.5 other parties where disclosure without consent is required or permitted by law. This includes investigations or proceedings, emergencies threatening life, health or safety, law enforcement agencies with proper written authorisation, public agencies acting in the public interest, and the other exceptions in the First and Second Schedules to the PDPA.

2.3 We do not sell, rent, lease or trade Personal Data.

2.4 Anyone receiving Personal Data under paragraph 2.2.2, 2.2.3 or 2.2.4 must be bound by a written agreement to:

use it only for the agreed purpose;
protect it with reasonable security arrangements;
not disclose it further without our approval;
notify us promptly of any data breach; and
delete or return it at the end of the agreed use, and confirm that it has done so.

3. Request for access and/or correction of Personal Data

3.1 You may request access to, or correction of, the Personal Data we hold by contacting our DPO at dpo@advocado.me. We will need enough information to verify your identity and understand your request.

3.2 We will correct your Personal Data within 30 days of receiving sufficient information. If we cannot, we will tell you the soonest practicable time we can. Some types of Personal Data are exempt from correction under the PDPA.

3.3 We may charge a reasonable fee for access requests and will give you a written estimate first. We do not charge for correction requests.

4. Request to withdraw consent

4.1 You may withdraw consent for any of the Purposes in paragraph 1.2. Do this in your Loyalty Account settings [where available], or by emailing our DPO with the scope of your withdrawal and your Loyalty Account details.

4.2 You can opt out of promotional messages, including Advocado and Awesome Free marketing, at any time. Use the unsubscribe link or reply option in the message, or your Loyalty Account settings. To stop marketing from an Awesome Free Offer Merchant you agreed to hear from, use the opt-out in that merchant’s messages or contact the merchant directly. If you ask us, we will pass your request on to the merchant.

4.3 You can switch off partner sharing (paragraph 1.2.8) at any time. We will then stop further disclosures, and instruct partners who received your Personal Data to stop using it and delete it.

4.4 We will process withdrawal requests within [10 business days], and in any event within 30 days.

4.5 Withdrawing consent may affect our ability to provide some services to you. If you withdraw consent for specific Merchants but continue to use Advocado, we may still send you essential service messages about your Loyalty Account.

4.6 If you withdraw consent to all collection, use and disclosure of your Personal Data, we will treat this as a request to delete your Loyalty Account.

5. Request to delete account

5.1 You may delete your Loyalty Account by emailing dpo@advocado.me [or through the app]. You will not be able to recover rewards, stored value, prepaid items, stamps, points or Awesome Free Offers once the account is deleted.

5.2 After deletion, we retain information only in anonymised form, for aggregated reporting and analysis.

6. Management and security of Personal Data

6.1 We take reasonable efforts to keep your Personal Data accurate and complete where we use it to make a decision about you or disclose it to another organisation. Please tell us of any changes.

6.2 We maintain reasonable security arrangements to protect Personal Data against unauthorised access, collection, use, disclosure, copying, modification, disposal or loss. These include encryption in transit, access controls, staff training, and contractual safeguards with service providers and partners.

6.3 We keep Personal Data while your Loyalty Account is active and for [X months] after closure, unless the law requires longer. After that, we delete or anonymise it. Partners must delete Personal Data at the end of the agreed use and confirm that they have done so.

6.4 Where Personal Data is transferred outside Singapore, including to service providers or platforms hosted overseas, we comply with the PDPA. We obtain consent where required, and ensure the recipient is bound by legally enforceable obligations to protect the data to a standard comparable to the PDPA.

6.5 If a data breach occurs, we will assess it promptly. We will notify the Personal Data Protection Commission and affected individuals where the PDPA requires.

7. Questions and complaints

7.1 For questions or complaints about how we handle your Personal Data, contact our DPO at dpo@advocado.me. You may also contact the Personal Data Protection Commission.

8. Updates to this Privacy Policy

8.1 We review our policies, procedures and processes regularly.

8.2 We will notify you of material changes to this Privacy Policy before they take effect, by app notification or email. Where a change involves a new purpose requiring your consent, we will ask for it. Changes do not apply retrospectively.