Privacy Policy | XXSCAM

1. Data Collection

We may collect the following personal data: - Name and contact details (email address, phone number) - Delivery address - Payment information (securely processed by Stripe — we do not store credit card numbers) - Account information (email address, encrypted password) - Browsing and purchase history - Device and browser information

2. Data Usage

We use your personal data for the following purposes: - Processing and fulfilling orders - Providing customer service - Sending order status notifications - Sending promotional materials and newsletters (with your consent) - Improving our services and user experience - Preventing fraud and ensuring platform security - Complying with legal requirements under Singapore law

3. Data Sharing

We do not sell your personal data. We may share your data with third parties in the following circumstances: - Payment processor (Stripe) for payment processing - Logistics companies for delivery arrangements within Singapore - Email service provider (Brevo) for sending notifications - When required by Singapore law or law enforcement

4. Cookie Usage

The Platform uses cookies and similar technologies to: - Maintain your login session - Remember your preferences - Analyse website usage (Google Analytics) - Provide a more personalised experience You can manage or disable cookies in your browser settings, though this may affect some functionality.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted transmission (SSL/TLS), secure server environments and access controls, in accordance with the PDPA's data protection obligations. However, internet transmission is not absolutely secure, and we cannot guarantee the absolute security of data transmission.

6. User Rights

Under Singapore's Personal Data Protection Act 2012 (PDPA) and applicable privacy laws, you have the right to: - Access the personal data we hold about you (PDPA Access Obligation) - Request correction of inaccurate personal data (PDPA Correction Obligation) - Withdraw consent for collection, use or disclosure of your personal data (PDPA Consent Obligation) - Request deletion of your account and associated data - Opt out of receiving promotional materials (PDPA Do Not Call provisions) To exercise any of these rights under the PDPA, please contact our Data Protection Officer at the email below. We will respond to your request within 30 days as required by the PDPC.