Singapore's Personal Data Protection Act applies from the moment you collect a name or email. Two obligations catch small merchants out: you must appoint a Data Protection Officer and publish a way to contact them, and you must honour access and correction requests. Both are handled below.
Privacy Policy
Last updated: ▢
Haneul ("we", "us") is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").
What we collect
- Order information: name, email address, delivery address, contact number, order history
- Payment information: processed by our payment providers. We do not store your full card details.
- Site usage: IP address, browser type, device, pages viewed, referring site — collected through cookies and analytics
- Marketing: your email address if you subscribe
- Correspondence: anything you send us by email
- Reviews and photographs: where you submit them, with your consent
Why we collect it
To process and deliver your order · to handle refunds and enquiries · to send order updates · to send marketing where you have consented · to improve the site · to meet legal obligations.
Who we share it with
We do not sell your personal data. We share it only with:
- Shopify — our e-commerce platform
- ▢ — payment processing
- ▢ — delivery and fulfilment
- ▢ — email marketing
- ▢ — analytics
- Government or regulatory bodies where legally required
Overseas transfer
Some of these providers operate outside Singapore. Where personal data is transferred overseas we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA.
How long we keep it
Order records for ▢ years for accounting and tax purposes. Marketing data until you unsubscribe. Enquiries for ▢ months after resolution.
Your rights under the PDPA
You may request access to the personal data we hold about you and information on how it has been used, request correction of anything inaccurate, and withdraw consent for marketing or other optional processing at any time.
To exercise any of these, email our Data Protection Officer. We will respond within 30 days.
Data Protection Officer
▢ Name / role Email: ▢ (PDPA requires you to appoint one and make the contact details available. It can be you.)
Cookies
We use cookies to keep your cart, remember preferences and understand how the site is used. You can disable cookies in your browser, though parts of the site may stop working. ▢ (If you use advertising pixels — Meta, TikTok, Google — name them here.)
Marketing emails
We send marketing only where you have opted in. Every email carries an unsubscribe link and we honour unsubscribes promptly, in line with the Spam Control Act.
Security
We take reasonable technical and organisational measures to protect your data. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children
Our products and site are intended for adults. We do not knowingly collect personal data from anyone under 18.
Changes
We may update this policy. The current version is always on this page with its revision date.
Contact: ▢ (DPO email)