Privacy policy
Last updated : 1 October 2026
At MATRĒ, we respect your privacy.
MATRĒ is owned and operated by VLX Group Pte Ltd (UEN 202614296D), a company registered in Singapore at 2 Venture Drive, #14-02 Vision Exchange, Singapore 608526. In this policy, "MATRĒ", "we", "us" and "our" mean that company. We are the data controller for the personal information described here.
We collect only the personal information we need to take your order to your door, answer you when you communicate with us, and tell you about things you have asked to hear about. We do not sell your personal information for money, and we never will. Where we share information for advertising purposes, we say so below and you can switch it off.
Our Data Protection Officer can be reached at dpo@wearematre.com.
This policy forms part of our Terms of Service. Where this policy and the Terms conflict on privacy, this policy applies.
1. What this policy covers
This policy explains how we collect, use and share your personal information when you visit our site (wearematre.com), take our quiz, sign up for communication by email, SMS or WhatsApp, buy from us, contact us by email, SMS or WhatsApp, join our affiliate programme, or otherwise deal with us.
Our store is hosted by Shopify. Shopify processes your personal information both to provide services to us directly and to provide Enhanced Services (Shopify Network Intelligence), which use customer data across multiple merchants to detect fraud, improve advertising and optimise how online stores run. Section 8 explains your choices about that.
We may update this policy. When we do, we will post the new version here and change the date above. If a change materially affects how we use your information, we will tell you by email or by a notice on the site before it takes effect.
2. What we collect
Information you give us directly. Your name, email address, phone number, billing and shipping addresses; your order and payment confirmation details; what you view, add to cart or save; and whatever you write to us at hello@wearematre.com, by SMS or on WhatsApp.
Information about your health and wellbeing that you choose to share. If you take our quiz, ask us a product question, or tell us about your situation, you may share information about sleep, energy, stress, mood, pregnancy or postnatal recovery, diet, supplement intake, health goals and medical conditions. In the EU, UK and some other places this counts as a special category of personal information and gets extra protection. We only collect it when you volunteer it, we use it only to recommend products and answer you, and you can ask us to delete it at any time by emailing dpo@wearematre.com. We do not use your health and wellbeing information to target advertising at you, and we do not share it with advertising platforms.
Information we collect automatically. Device and browser information, IP address, pages viewed, and how you arrived at the site, through cookies and similar technologies.
Information we receive from others. Order and fraud signals from Shopify; payment confirmation and billing address from our payment processors; engagement data from our email and messaging tools, including whether you opened an email and which links you clicked; and referral data from our affiliate programme.
Some features need this information. If you would rather not give it, parts of the service may not work for you.
3. Cookies and the tools we use
We use cookies and similar technologies to run the shop, understand how the site is used, and make sure orders and affiliate commissions are credited correctly. Our store is hosted and operated on Shopify.
We work with the following kinds of provider, all bound by contract to use your information only as we instruct.
|
Category |
What they do |
|---|---|
|
E-commerce platform |
Hosts the store, checkout and customer accounts (Shopify) |
|
Payment processing |
Takes payment and confirms it; we never see full card numbers |
|
Courier and fulfilment |
Delivers your order; receives name, address and phone number |
|
Email and messaging |
Sends the emails and messages you asked for, and measures them |
|
Reviews |
Collects and displays product reviews you choose to leave |
|
Subscription |
Manages your subscription schedules |
|
Affiliate |
Credits referrals and applies discount codes |
|
Analytics and advertising |
Measures site and campaign performance, and shows our ads |
|
Backup and IT support |
Keeps secure copies of store data and keeps the site running |
Most browsers accept cookies by default. You can block or delete them in your browser settings, though this may affect how the site works. You can also change your choices at any time using the cookie settings link in our footer.
4. Why we use it, and our legal basis
Where the GDPR or UK GDPR applies to you, this is the basis on which we process your information.
|
What we do |
Why |
Legal basis |
|---|---|---|
|
Take payment, fulfil and ship your order, manage your account and subscription, handle returns |
To give you what you bought |
Performance of a contract |
|
Answer your emails and WhatsApp messages |
To support you |
Performance of a contract, or our legitimate interest in running a responsive business |
|
Recommend products from your quiz answers |
To make the recommendation useful |
Your explicit consent |
|
Send you marketing emails, SMS or WhatsApp messages |
To tell you about products and offers |
Your consent, which you can withdraw at any time |
|
Detect and prevent fraud and misuse |
To protect you and us |
Our legitimate interest in security |
|
Measure how the site and our campaigns perform |
To improve what we sell and how we sell it |
Our legitimate interest, or your consent where cookies require it |
|
Keep order and tax records |
Because Singapore law requires it |
Legal obligation |
In plain terms : performance of a contract means we need it to do what you paid for. Legitimate interest means we have a sensible business reason and have checked it does not override your rights. Consent means you said yes and can say no later. Legal obligation means we have no choice.
5. Who we share it with
We share personal information with the categories of provider listed in section 3; with contractors and freelancers working for us, under written agreements that include confidentiality obligations; and with professional advisers, who are bound by a duty of confidentiality. We share with legal authorities where the law requires it, and with a buyer or successor if we are ever involved in a merger, acquisition or sale of assets.
Our service providers are bound by contract to use your information only for the purposes we instruct, and not for their own. We do not allow them to sell it.
We do not use or disclose health, wellbeing or other sensitive personal information to infer characteristics about you, and we do not share it with advertising platforms.
We also will not treat you differently on the basis of a guess we could make about your health or life stage from what you have bought. We do not build audiences or segments from inferred pregnancy, postnatal or menopause status, whether that inference would come from your quiz answers or from your purchase history.
6. Marketing, WhatsApp and SMS
You will only receive marketing from us if you asked for it. Every email has an unsubscribe link. To stop SMS or WhatsApp messages, reply STOP to any message, and we will unsubscribe your number.
If you are in Singapore, we check numbers against the Do Not Call Registry before sending marketing messages, unless you have given us clear and unambiguous consent in writing to receive them.
Unsubscribing from marketing does not stop transactional messages - order confirmations, shipping updates and subscription notices - because those are part of the service you bought.
7. Subscriptions and our referral programme
If you subscribe, we keep your order schedule, the payment method token held by our processor, and your delivery preferences for as long as your subscription is active, and afterwards on the basis set out in section 9. You can pause, reschedule, change or cancel at any time in your account.
If you join our affiliate or refer-a-friend programme, or buy on a subscribe-and-save price, you can leave at any time by emailing hello@wearematre.com, and you keep everything you have already bought.
8. Shopify Enhanced Services and advertising
Some of your information may be used by Shopify together with information from other merchants to detect fraud, improve advertising and provide analytics.
We also use advertising and analytics pixels - currently Meta and Google Analytics - which set cookies and allow those platforms to measure our campaigns and show you our ads. Quiz answers and any health or life-stage information you share with us are never passed to these platforms, and we do not build advertising audiences from them.
If you are in a US state with privacy legislation, you have the right to opt out of your information being shared for targeted advertising. You can email dpo@wearematre.com. If your browser sends a Global Privacy Control signal, we treat that as a valid opt-out request for that browser and device.
If you are in the EU, UK or Switzerland, we use your information for personalised advertising only with your consent, and you can withdraw it at any time through your cookie preferences or Shopify's Privacy Portal.
9. How long we keep it
We keep personal information for as long as we need it, and then stop. How long that is depends on what the information is for.
-
Order and tax records : seven years, because Singapore tax law requires it.
-
Account and customer records : for as long as you have an account with us, and while we may still need the record to handle a return, a guarantee claim or a dispute. This includes your subscription schedule, your delivery preferences, and the payment method token held by our processor.
-
Marketing consent and contact details : until you withdraw consent, after which we keep a minimal suppression record so we do not contact you again by mistake.
-
Quiz answers and health information : while your account is active and we may still use it to help you. We delete it sooner if you ask.
-
Customer support correspondence : while it may still be needed to resolve or reopen your issue.
-
Affiliate and referral records : for the life of the affiliate relationship, then seven years for tax.
Where we no longer need information but cannot delete it immediately, we put it beyond use.
10. Security and data breaches
We take reasonable technical and organisational steps to protect your personal information, but no system is perfectly secure. Please do not send sensitive details, such as full payment card numbers, by email, SMS or WhatsApp.
If a data breach occurs that is likely to result in significant harm to you, or that meets the notifiable thresholds under Singapore's Personal Data Protection Act, we will notify the Personal Data Protection Commission and affected individuals as the law requires, and as promptly as the investigation allows. Where the GDPR or UK GDPR applies, we will notify the relevant supervisory authority within 72 hours where required.
11. Your rights
Depending on where you live, you can ask us to : give you access to the information we hold about you; correct it; delete it; give you a portable copy; restrict or object to how we use it; withdraw consent you previously gave; and appeal if we refuse.
To exercise any of these, email dpo@wearematre.com. We will respond within 30 days, and we will tell you if we need longer. We may ask you to verify your identity first. Making a request costs nothing and does not require you to create an account, and we will not treat you differently for making one.
If you are unhappy with how we have handled your information, please tell us first at dpo@wearematre.com. If we cannot resolve it, you can complain to your local data protection authority - in Singapore the Personal Data Protection Commission, in the UK the Information Commissioner's Office, and in the EU your national supervisory authority.
In the United States there is no single national authority. If you are in California you can complain to the California Privacy Protection Agency or the California Attorney General; in other states with privacy legislation, to your state Attorney General.
12. Children
Our site is not intended for anyone under 18, and we do not knowingly collect personal information from children under 13 in the US or under 16 in the EU, EEA and UK. If you are a parent or guardian and believe your child has given us information, email dpo@wearematre.com and we will delete it.
As at the date of this policy, we have no actual knowledge that we sell or share the personal information of anyone under 18.
13. Sending information overseas
We are based in Singapore and our service providers are located in several countries, including the United States. When we transfer your personal information out of Singapore, we take reasonable steps to ensure the recipient is bound to a standard of protection comparable to the Personal Data Protection Act, usually through contractual terms.
For transfers out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses and, where relevant, the UK International Data Transfer Addendum, or on an adequacy decision.
14. Reviews, links and medical content
If you post a review or other content publicly, others can see it and we cannot control who uses it.
Our site links to other websites whose privacy practices are not ours. Please read their policies before sharing information with them.
Information on our site, including anything our quiz recommends, is for general information only. It is not medical advice and is not a substitute for talking to a doctor, pharmacist or other qualified health professional, particularly if you are pregnant, breastfeeding, taking medication or managing a health condition.
15. Contact us
General enquiries : hello@wearematre.com
Data Protection Officer and privacy requests : dpo@wearematre.com