1. Data Controller

Hangandshut operates www.hangandshut.com and acts as the data controller for personal data collected through this website. This policy explains how we collect, use, retain and disclose personal data in connection with our products and services.

Brand: Hangandshut
Email: control@hangandshut.com
Registered Business Address: [XXX]
Telephone: [XXX]

2. Information We Collect

We may collect the following information when you use our website or place an order:

  • Name, email address, telephone number and billing or delivery address.
  • Order details, transaction references and payment status.
  • Correspondence submitted through our customer service channels.
  • Website usage information, including IP address, browser information and cookie preferences, where applicable.

3. How We Use Personal Data

We process personal data for the following purposes:

  • Processing orders and arranging delivery.
  • Handling payments, refunds and order-related enquiries.
  • Providing customer service and sending relevant order notifications.
  • Maintaining accounting records and meeting applicable legal obligations.
  • Managing website operations, identifying irregular activity and improving the customer experience.
  • Sending promotional communications where permitted by applicable law and, where required, with your consent.

We process personal data on appropriate legal grounds, including contractual necessity, legal obligations, legitimate interests and consent, as applicable.

4. Payment Processing

Payments on our website are processed by Stripe, which acts as a payment service provider. Stripe processes relevant payment and transaction information to facilitate payments, help prevent unauthorised transactions and fulfil its applicable legal obligations.

Depending on the payment service and processing activity, Stripe may act as a data processor or an independent data controller. Payment information is handled in accordance with Stripe’s applicable privacy terms.

We may receive transaction confirmations, payment status and related references needed to administer orders. We do not require customers to provide their payment card details directly through our customer service channels.

5. Disclosure of Personal Data

We may share relevant personal data with service providers where necessary to operate our business, including:

  • Stripe for payment processing.
  • Delivery providers for order fulfilment.
  • Website hosting, maintenance and customer service providers.
  • Accountants, professional advisers and public authorities where required by law.

Such information is limited to what is reasonably necessary for the relevant purpose. We do not sell personal data to third parties.

6. International Data Transfers

Personal data may be processed in Singapore, the European Economic Area or other countries where our service providers operate.

Where applicable, international transfers are carried out in accordance with relevant data protection requirements, including appropriate safeguards under the General Data Protection Regulation (GDPR) and Singapore’s Personal Data Protection Act 2012 (PDPA).

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal and accounting requirements.

  • Order and accounting records: generally up to seven years after the relevant transaction, where required for accounting, tax, record-keeping or legal purposes.
  • Customer service correspondence: generally up to 24 months after the enquiry is resolved, unless a longer period is necessary to address an ongoing matter or meet legal obligations.
  • Marketing preferences: until consent is withdrawn or the data is no longer needed for the relevant purpose, subject to applicable legal requirements.
  • Website and cookie data: according to the applicable cookie lifespan and the purposes for which the data is collected.

Where personal data is no longer required, we will delete it or anonymise it where appropriate, unless further retention is legally required.

8. Cookies

Our website may use essential cookies to support basic website functions and remember relevant preferences. Other cookies, including analytics or advertising cookies where used, are activated in accordance with applicable consent requirements.

You may manage your cookie preferences through the website’s cookie settings and adjust your browser settings. Disabling certain cookies may affect some website functions.

9. Data Protection

We apply appropriate organisational and operational measures to protect personal data against unauthorised access, disclosure, alteration or loss. Access to personal data is limited to those who need it for legitimate business purposes.

No personal data should be submitted through public messages or ordinary customer service channels unless it is necessary for the enquiry.

10. Your Privacy Rights

Subject to applicable law, individuals in the European Economic Area may have the right to request access to, correction of, erasure of or restriction of their personal data, object to certain processing, request data portability, and withdraw consent where processing relies on consent.

Individuals may also have rights to access and correct personal data under Singapore’s PDPA.

Requests may be submitted to control@hangandshut.com. We may request reasonable information to verify the identity of the requester before responding. Certain records may need to be retained where the law requires it.

Where applicable, individuals may lodge a complaint with their relevant data protection supervisory authority.

11. Changes to This Policy

We may update this Privacy Policy when our business practices or applicable legal requirements change. The latest version will be published on this page with its updated revision date.

12. Contact

For questions about this Privacy Policy or the handling of personal data, please contact:

Hangandshut
Email: control@hangandshut.com
Telephone: [XXX]
Registered Business Address: [XXX]