1.       Collection of Personal Data

“Personal Data” means information relating to an identified or identifiable individual. Depending on how you interact with the Services, we collect the information described below. We only collect Personal Data that is necessary for the purposes described in this Privacy Policy.

1.1.     Personal Data You Provide

 

Payment credentials entered at checkout are processed by the payment service providers involved in the transaction. We receive payment-related information needed to manage your order, including the payment method, transaction reference, payment amount and status, and, where applicable, limited card information such as the card brand and masked card number. Through this checkout process, your full payment card number and card security code are not made available to us, and we do not store these details in our own systems.

Where information is required to process an order, deliver a product or respond to a request, we identify it when collecting it. If you do not provide the required information, we may be unable to provide that particular service. Optional information and marketing choices are identified separately.

1.2.     Personal Data Collected Automatically

When you visit the Website, we may receive your IP address, browser and device information, network information, pages or products viewed, shopping-cart activity, timestamps, referring pages, and security or error logs. Cookies and similar technologies may also record your choices and interactions. Their use is described in Section 8.

1.3.     Personal Data From Third Parties

We may receive Personal Data from payment providers, delivery and fulfilment providers, customer-support or repair providers, and the technology providers that support the Website. This may include payment confirmations, delivery updates, return or repair information, and information needed to maintain the security and functionality of the Services. We do not receive your third-party account passwords.

We use information from these sources with the information you provide to process orders, provide support and maintain the Services. Where a third party independently determines how it uses your Personal Data, its own privacy notice will also apply.

2.       Purposes and Legal Bases

We use Personal Data to provide the Services, respond to enquiries, manage purchases and after-sales support, protect security and comply with applicable obligations. Where the GDPR or UK GDPR applies, the following bases apply to the relevant processing. Swiss processing is subject to applicable Swiss data protection requirements.

Where required by applicable law, we may ask for separate consent for specific optional processing activities. You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

3.       Shopify and the Online Store

The Website uses Shopify to support store operation, order management, payment support, fraud prevention and related website services. Depending on the features you use, Shopify processes contact, account, transaction, communication, device and usage information necessary for those services.

For processing performed on our behalf to provide the store services, Shopify acts as a processor under the applicable data processing terms. Shopify may also act as a separate controller for certain Enhanced Services. If you use services such as Shop or Shop Pay, Shopify processes information for its own consumer relationship as described in its Consumer Privacy Policy.

If Shopify Network Intelligence is enabled, Shopify can combine customer information from this store with information from other merchants to support Enhanced Services, including personalisation and advertising-related features, subject to applicable choices and legal requirements.

For Shopify’s own consumer processing and privacy choices, please refer to its Consumer Privacy Policy (https://www.shopify.com/legal/privacy/consumers) and Privacy Portal (https://privacy.shopify.com/). Requests concerning our processing may be sent to us using the contact details in Section 13.

Shopify and the payment and other providers used by the store may process information in different countries. Storage locations described in group policies for other websites, apps or systems do not automatically apply to information processed through Shopify. Section 5 explains international transfers.

4.       Disclosure of Personal Data

We may disclose your Personal Data to the following categories of recipients, as applicable and where necessary to operate our business, provide our products and services, and comply with applicable laws.

4.1.     Service Providers and Other Recipients

These include Shopify and other hosting or IT providers; payment providers; order fulfilment, logistics and delivery providers; customer-service, repair and technical-support providers; and professional advisers. Analytics, email or advertising providers are included only where the relevant services are used and the applicable requirements are met.

Providers acting as processors are authorised to use Personal Data only as necessary to provide services to us and are required to protect it in accordance with applicable confidentiality, security and data protection obligations. Providers acting as independent controllers are responsible for their own processing, as described in their privacy notices.

4.2.     Group Companies

Where group companies assist with order administration, customer support, technical services or other purposes described in this Privacy Policy, access is limited to the information needed for their role.

4.3.     Corporate Transactions and Legal Requirements

We may disclose or transfer your Personal Data in connection with a corporate transaction, such as a merger, sale of assets, restructuring, financing, or acquisition of all or part of our business, subject to applicable data protection requirements.

We may disclose Personal Data where we reasonably believe such disclosure is necessary to comply with applicable laws, regulations, court orders or legal processes, to respond to lawful requests from government or regulatory authorities, to enforce our terms and policies, to detect, prevent or investigate fraud, security incidents or other unlawful activity, or to protect the rights, property or safety of us, our customers, or others.

5.       International Transfers of Personal Data

Some of our affiliates and service providers, including hosting, customer-support and other technology providers, may be located or operate outside your country. Your Personal Data may therefore be held or accessed in multiple countries.

When Personal Data is transferred outside the EEA, the United Kingdom or Switzerland, we apply the transfer requirements of the law relevant to that transfer. Where applicable, these may include an adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, and Swiss adaptations. Additional safeguards are applied where necessary.

If you would like further information about the safeguards applicable to a particular transfer, or wish to obtain a copy of the relevant safeguards subject to lawful redactions, please contact us using Section 13.

6.       Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes in this Privacy Policy, including providing the Services, complying with legal and tax obligations, resolving disputes, and enforcing our agreements.

In determining how long to retain Personal Data, we consider whether we have an ongoing relationship with you; whether the information is needed for an order, customer support or another stated purpose; applicable legal, tax, accounting or regulatory retention requirements; and relevant limitation periods.

When Personal Data is no longer required, we delete it or anonymise it so that an individual can no longer reasonably be identified. Where deletion from backups must follow a secure backup cycle, we restrict access and use pending deletion. We may retain information that remains necessary for a lawful obligation or legal claim, and limited suppression records needed to respect a marketing opt-out.

7.       Protection of Personal Data

We implement reasonable technical and organisational measures designed to protect Personal Data from misuse, interference and loss, and from unauthorised access, modification or disclosure. Measures may include encryption in transit, access controls, logging and monitoring, staff training and vendor security requirements.

While we take reasonable steps to protect your Personal Data, no method of transmission over the internet or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security. This does not limit our obligations under applicable data protection law.

Where you use an account, we recommend that you keep your credentials confidential, use a strong and unique password where passwords are supported, and log out after using shared or public devices. If you have questions or concerns about the security of your Personal Data, please contact us using Section 13.

8.       Cookies and Marketing Choices

Cookies are small text files placed on your browser or device when you visit the Website. Similar technologies may include local storage, tags, scripts and pixels. These technologies may recognise your browser, device or interaction with the Services.

We use strictly necessary technologies to operate and secure the Website. Where applicable law requires consent, optional analytics, advertising or similar technologies are activated only after you have given that consent. You may refuse or withdraw consent through the “Manage preferences” option in the cookie banner.

Details of the technologies used, their providers, purposes and lifetimes are available in details of the cookies used by Shopify to operate our store, including their purposes and lifetimes, are available in the Shopify Cookie Policy (https://www.shopify.com/sg/legal/cookies). Browser settings may provide additional controls. Disabling strictly necessary technologies may affect website functionality.

Where we offer promotional emails or messages, we obtain consent where required and provide an unsubscribe or other opt-out method. You can object to direct marketing at any time. Essential order, safety or service messages may still be sent where needed for their stated purpose and supported by an appropriate legal basis.

9.       Your Privacy Rights

Subject to applicable legal conditions and exceptions, you may have the following rights in relation to your Personal Data. For individuals whose processing is subject to the GDPR or UK GDPR, these include:

You have the right to object to direct marketing at any time and for any reason, including related profiling. If you object, we will stop processing your Personal Data for those purposes.

Where applicable, you also have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects. Swiss data protection law provides rights including access, correction and, where its conditions are met, data portability and remedies concerning unlawful processing. The availability of each right depends on the applicable law.

9.1.     Exercising Your Rights

To exercise a right, please contact us using Section 13. We may request information reasonably necessary to verify your identity and understand your request. We will respond within the time period required by applicable law. If we cannot fulfil your request, we will explain the reasons and available complaint options where required.

If you withdraw consent, we stop the processing based on that consent. We may continue separate processing supported by another lawful basis, such as retaining legally required transaction records, where that purpose and basis have been explained to you. If you ask us to delete information needed for a particular service, we will explain any resulting limitation. Your request does not remove statutory rights relating to a purchase.

9.2.     Complaints

You may raise a concern with us without prejudice to your right to contact the relevant authority. In the EEA, you may complain to a supervisory authority, in particular in the country of your habitual residence, place of work or alleged infringement. In the United Kingdom, you may contact the Information Commissioner’s Office. In Switzerland, you may contact the Federal Data Protection and Information Commissioner and exercise available legal remedies.

Authority information: EEA supervisory authorities; UK Information Commissioner’s Office; Swiss Federal Data Protection and Information Commissioner.

10.    Children’s Privacy

The Services are directed to adult customers. We do not knowingly solicit or proactively collect Personal Data from children. If we become aware that we have collected a child’s Personal Data without the authorisation required by applicable law, we will take reasonable steps to delete it as soon as practicable. Parents or legal guardians may contact us using Section 13.

11.    Third Party Websites and Services

The Website may contain links to websites or services that are not owned or controlled by us. Their privacy practices are described in their own notices, which we encourage you to review. This does not exclude our responsibility for processing for which we are responsible, including disclosures that we make to those providers.

12.    Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top. Where changes are material, we will take reasonable steps to notify you in accordance with applicable law. This may include notice by email, a prominent website notice, or another appropriate method. Where a change requires consent or another specific legal step, we will complete that step before the relevant processing begins.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your Personal Data.

13.    Contact Us

If you have questions or comments regarding this Privacy Policy, or wish to exercise your privacy rights, please contact us using the details below.