General Data Protection Regulation Statement

General Data Protection Regulation Statement 

(“GDPR Statement”)

This GDPR Statement applies to persons in the European Economic Area (“EEA”), including those based in the United Kingdom. This GDPR Statement supplements our Privacy Policy. However, where the Privacy Policy conflicts with the GDPR Statement, the GDPR Statement will prevail as to persons located in the EEA.

1. Controller of Personal Information and Local Representative

1. Rosebud Growth Pte Ltd is the controller of the personal information we collect. Please contact us at site.dpo@gmail.com for information relating to your rights regarding your personal information. 

2. Information Rights Under GDPR

1. You have certain rights regarding your personal information. These rights include the following:

1. The right to request access to your personal information. This enables you to receive a copy of the personal information we hold about you.

2. The right to request correction of your personal information if it is inaccurate. You may also supplement any incomplete personal information we have, taking into account the purposes of the processing.

3.   The right to request deletion of your personal information if:

• your personal information is no longer necessary for the purposes for which we collected or processed them; or

• you withdraw your consent if the processing of your personal information is based on consent and no other legal ground exists; or

• you object to the processing of your personal information and we do not have an overriding legitimate ground for processing; or

• your personal information is unlawfully processed; or

• your personal information must be deleted for compliance with a legal obligation.

4. The right to object to the processing of your personal information. We will comply with your request, unless we have a compelling overriding legitimate interest for processing or we need to continue processing your personal information to establish, exercise, or defend a legal claim.

5. The right to restrict the processing of personal information, if:

• the accuracy of your personal information is contested by you, for the period in which we have to verify the accuracy of the personal information; or

• the processing is unlawful, and you oppose the deletion of your personal information and request restriction; or

• we no longer need your personal information for the purposes of processing, but your personal information is required by you for legal claims; or

• you have objected to the processing for the period in which we have to verify overriding legitimate grounds.

6. The right to data portability. You may request that we send this personal information to a third party, where feasible. You only have this right if it relates to personal information you have provided to us where the processing is based on consent or necessity for the performance of a contract between you and us, and the processing is conducted by automated means.

7. You also have the right to lodge a complaint before your national data protection authority.

2. You will not usually have to pay a fee to access your personal information (or to exercise any of the other rights described in this Statement). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

3. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights).  To the extent you use a third party to submit a data request on your behalf, we may need to take reasonable steps to verify the authenticity of the request. These are security measures to ensure that personal information is not disclosed to any person who has no right to receive it. In an effort to speed up our response, we may also contact you to ask you for further information in relation to your request. To exercise your rights, please contact us at site.dpo@gmail.com. 

3. Information Uses and Legal Basis

1. We will only use your personal information under the circumstances permitted by the law or you.

2. Pursuant to GDPR, we will use your personal information in one or more of the following circumstances:

Information Uses	Information Processing Legal Basis
Registration and other contracts	Where we need to perform the contract we are about to enter into or have entered into with you.
Improve our Website, Platform and/or Services, personalisation and customisation	Where it is necessary for our legitimate interests (or those of a third-party) to provide or improve Website, Platform and/or Services, including our interest to provide you improved and personalised Services, and where your interests and fundamental rights do not override those interests.
Communication	Where it is necessary for our legitimate interests (or those of a third-party) to communicate with you and your interests and fundamental rights do not override those interests. Where we need your consent for the information use, we will seek your prior consent.
Legal Compliance	Where it is necessary to meet our legal obligations.

4. International Transfers

1. Your personal information may be stored or transferred to countries outside the EEA and the UK for the purposes described in this Statement. When we store or transfer your personal information outside the EEA and the UK, we take the precautions detailed in our Privacy Policy to ensure that your personal information is properly protected.

Last Updated: 28 October 2025