At pawter haus ("we", "us", or "our"), we are committed to protecting the privacy and security of our customers. This Privacy Policy outlines how we collect, use, and safeguard your personal data in compliance with the Singapore Personal Data Protection Act 2012 (PDPA). By using our website and services, you consent to the practices described in this policy.
1. Personal Data We Collect
We collect information that identifies you or can be linked to you ("Personal Data"). This includes:
- Identity & Contact Data: Name, shipping/billing address, email address, and phone number.
- Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
- Technical & Usage Data: IP address, browser type, time zone settings, and information about how you use our website (via cookies and pixels).
- Marketing Data: Your preferences for receiving marketing communications and your communication preferences.
2. How We Collect Your Data
- Direct Interaction: You provide data when you create an account, place an order, or contact us.
- Deemed Consent: By voluntarily providing your Personal Data to us for a specified purpose (e.g., placing an order), you consent to our collection, use, and disclosure of that data for that purpose and directly related purposes such as order fulfilment, delivery, and customer service.
- Automated Technologies: We use Shopify-powered cookies and tracking tools to collect technical data.
3. Purpose of Collection and Use
We use your Personal Data to:
- Perform our contract with you (process and deliver your orders).
- Manage our relationship with you (customer support).
- Protect our business (fraud detection and security).
- Deliver relevant website content and advertisements to you.
- Comply with legal or regulatory obligations in Singapore.
We may also process your Personal Data where we have a legitimate interest in doing so (e.g., improving our services, analysing website usage) and your interests do not override this interest.
4. Disclosure of Personal Data
We do not sell your Personal Data. We may share your data with:
- Service Providers: Such as Shopify (e-commerce platform and hosting), payment processors (Stripe, PayPal), email service providers, and delivery couriers.
- International Data Transfers: Your Personal Data may be transferred to and stored on servers located outside Singapore, including in the United States and Canada, where our service providers (Shopify, Stripe, PayPal) operate. We ensure these transfers comply with PDPA standards by using providers who maintain adequate data protection standards or by obtaining your consent where required.
- Business Transitions: If pawter haus is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred as a business asset.
- Legal Authorities: When required by Singapore law or to respond to lawful requests.
5. Security and "No Perfect Security" Waiver
We implement reasonable security arrangements to prevent unauthorized access or disclosure as required by the PDPA. However:
Note: We implement industry-standard security measures including encryption, secure servers, and regular security assessments to protect your Personal Data. However, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach, we will notify affected individuals and the PDPC as required by law.
6. Data Retention
We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (e.g., for tax purposes).
Typical retention periods include:
- Order and transaction records: 7 years (tax and accounting requirements)
- Marketing communications data: Until you unsubscribe or request deletion
- Website analytics data: Up to 24 months
7. Your Rights
Under the PDPA, you have the right to:
- Access & Correction: Request a copy of your Personal Data or ask us to correct inaccuracies.
- Withdrawal of Consent: You may withdraw your consent for marketing or data processing at any time. Please note that withdrawing consent for essential data may prevent us from fulfilling your orders. To withdraw consent, email us at hello@pawterhaus.com with 'Withdraw Consent' in the subject line, specifying which types of data processing you wish to opt out of.
- Accuracy: You are responsible for ensuring the data you provide is accurate and complete.
8. Governing Law
This Privacy Policy and your use of this website shall be governed in all respects by the laws of Singapore. You agree to submit to the non-exclusive jurisdiction of the Singapore courts.
9. Contact Our Data Protection Officer (DPO)
For any questions regarding this policy or to exercise your rights, please contact our designated DPO:
- Data Protection Officer Email: hello@pawterhaus.com
- Address: 6 Eu Tong Sen Street, Unit 12-08, Singapore, 059817
We will respond to your requests within 30 days of receipt. If we require more time, we will notify you of the extension and reasons.