Data Protection & PDPA
Last updated: 4 September 2026
LaventTech is operated by L'AVENT ROASTER PTE. LTD., Singapore.
LaventTech handles personal data in line with Singapore's Personal Data Protection Act (PDPA). This page explains the roles and responsibilities. It sits alongside our Privacy Policy, which describes the data itself in detail.
- A customer ordersFrom your café, in your name
- Held for your café aloneNever pooled with another café's data
- Used to run the serviceNot sold, not used for our marketing
- Deleted on requestSee the Data Deletion page
Roles
For a café's customer data, the café is the organisation responsible for that data. LaventTech acts as a data intermediary, processing it on the café's instructions to provide the service.
For website enquiry data, merchant account data and billing data, LaventTech is the responsible organisation.
PDPA principles we follow
Consent and purpose limitation: personal data is used only for the purposes it was provided for.
Notification: individuals are told why their data is being collected.
Accuracy and protection: we take reasonable steps to keep data accurate and to protect it.
Access and correction: individuals may request access to, or correction of, their personal data.
Retention limitation: we keep personal data only as long as it is needed or legally required.
Transfer limitation: where data is processed outside Singapore, we take steps intended to keep protection comparable to the PDPA standard.
Tenant isolation
Merchant data is separated at the architecture level, so one merchant cannot reach another merchant's data through the platform.
Merchant responsibilities
Merchants remain responsible for notifying and obtaining consent from their own customers, for honouring withdrawal of consent and Do Not Call obligations, for answering access and correction requests from their own customers, and for their own data-breach obligations.
We will support a merchant with the information we hold when it needs to answer such a request.
Data breach
If we become aware of a data breach affecting personal data we hold or process, we will assess it without undue delay, take steps to contain it, notify affected merchants, and support any notification obligations that apply under the PDPA. Report a suspected breach to info@laventtech.com.
Contact
Data-protection queries: info@laventtech.com.
Singapore · info@laventtech.com
Questions about this policy? Email us and we'll help. See also our contact page.