Privacy Policy

 

SECTION 1 - WHAT DO WE DO WITH YOUR INFORMATION?

 

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, phone number, address and email address. We only collect the minimum necessary personal information required to complete the transaction, and will not collect irrelevant information without your permission.

 

When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. The collected IP address will only be used to optimize website performance, improve user experience and prevent network security risks, and will not be used to identify your personal identity independently.

 

Email marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates. You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of the email, and we will stop sending marketing information to you within 10 working days after receiving your unsubscribe request. For Singapore users, if you receive marketing calls/SMS from us, you can opt out by replying "STOP" to the SMS or notifying us via support.petessentialsg@gmail.com; we will comply with the Singapore Do Not Call (DNC) Registry requirements and will not send marketing messages to registered users.

 

SECTION 2 - CONSENT

 

How do you get my consent?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. This implied consent is only valid for the specific transaction purpose, and we will not use your personal information for other purposes without obtaining your additional explicit consent.

 

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say no. Your explicit consent will be obtained through clear pop-ups, checkboxes or other distinguishable forms, and you can clearly know the scope and purpose of information use before giving consent.

 

How do I withdraw my consent?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at support.petessentialsg@gmail.com. We will process your consent withdrawal request within 15 working days and confirm the completion of the withdrawal to you via email or other contact methods you provided. Withdrawing consent will not affect the legality of information collection, use and disclosure that has been completed before the withdrawal.

 

SECTION 3 - DISCLOSURE

 

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service. In addition, we may also disclose your personal information to our affiliated companies or trusted third-party service providers who assist us in providing services (such as logistics companies, payment processors), but we will sign a confidentiality agreement with them to require them to protect your personal information in accordance with this privacy policy and relevant laws and regulations, and prohibit them from using your personal information for any purpose other than providing services to us. We will not sell your personal data as defined under applicable privacy laws, nor will we disclose your personal information to third parties for their independent marketing purposes without your explicit consent.

 

SECTION 4 - SHOPIFY

 

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Shopify Inc. acts as a data processor on our behalf for the personal information we collect, and we have entered into a valid data processing agreement with Shopify Inc. in accordance with applicable data protection laws to regulate the processing activities of personal information and ensure that your personal information is protected in accordance with applicable laws and regulations and this Privacy Policy.

 

Your data is stored through Shopif’s data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall. Shopify Inc. will take appropriate technical and organizational security measures to protect your data, and its data processing activities comply with the Payment Card Industry Data Security Standard (PCI-DSS) and other relevant international data security and privacy protection standards. For more detailed information on Shopify’s data protection measures and privacy practices, please refer to Shopify’s official privacy policy updated on March 2, 2026: https://www.shopify.com/legal/privacy.

 

Payment:

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. We will not store your complete credit card information or any other sensitive payment data, and all payment-related data will be exclusively processed and stored by Shopify’s authorized payment gateways that strictly comply with PCI-DSS standards to ensure the absolute security of your payment information.

 

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. We regularly review and supervise the compliance status of Shopify and its authorized payment gateways to ensure that they continue to meet the latest PCI-DSS standards and effectively protect your payment information from unauthorized access, use or disclosure.

 

SECTION 5 - THIRD-PARTY SERVICES

 

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. The third-party service providers we cooperate with include but are not limited to: logistics and fulfillment companies (for order delivery services), payment processors (for payment transaction processing), email service providers (for sending transaction notifications and marketing emails with your consent), and data analysis service providers (for optimizing website operation and user experience). We will only provide the minimum necessary personal information to these third parties to ensure they can perform their designated services, and will not provide any irrelevant personal information.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. We will select third-party service providers with good data protection capabilities and a good reputation, and supervise them to ensure that their processing of your personal information complies with relevant laws and regulations and this privacy policy.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. If you have any questions about the privacy policies of third-party service providers, you can contact us for relevant contact information of the third party.

 In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. Before transmitting your personal information to a third party located in another jurisdiction, we will take appropriate measures to ensure that the third party provides a level of data protection equivalent to that required by the applicable laws of your jurisdiction, such as signing standard data transfer agreements in accordance with the General Data Protection Regulation (GDPR) (if applicable). For cross-border data transfers to Shopify’s affiliated entities in Canada, the United States and Singapore, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and comply with the cross-border data transfer notification requirements under the Singapore PDPA.

 

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service. We are not responsible for the privacy practices and content of third-party websites or applications, and you should carefully read the privacy policies of third parties before providing personal information to them.

 

Links：

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements. The links on our website are only for your convenience, and including links does not mean that we endorse the privacy practices or content of these third-party websites.

 

SECTION 6 - SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. These precautions include but are not limited to: setting up access control mechanisms to limit employee access to personal information; regularly conducting network security scans and vulnerability tests; training employees on data protection knowledge to enhance their awareness of data security; and establishing a data backup mechanism to prevent data loss.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. In the event of a data security breach that may affect your personal information, we will promptly notify you in accordance with applicable laws and regulations, take remedial measures to reduce the impact of the breach, and report to the relevant regulatory authorities if necessary.

 

SECTION 7 - COOKIES

 

Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not. We use cookies in accordance with relevant laws and regulations (such as the EU ePrivacy Directive). Cookies are divided into necessary cookies and non-necessary cookies. Necessary cookies are essential for the normal operation of the website and cannot be disabled; non-necessary cookies (such as analytical cookies) can be disabled by you at any time. We do not use any third-party cookies other than the native Shopify cookies listed above.

 

_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc). Necessary cookie, cannot be disabled.

_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits. Non-necessary analytical cookie, can be disabled.

_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer. Non-necessary analytical cookie, can be disabled.

cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart. Necessary cookie, cannot be disabled.

_secure_session_id, unique token, sessional. Necessary cookie, cannot be disabled.

storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access. Necessary cookie, cannot be disabled.

 

You can disable non-necessary cookies through your browser settings (the specific operation method varies by browser, and you can refer to the help documentation of your browser). Disabling non-necessary cookies will not affect your normal use of the website’s basic functions, but may affect your user experience (such as not being able to remember your browsing preferences). We will not use cookies to collect personal information beyond the scope stated in this policy.

We may also use Google Analytics cookies for traffic analysis; you can opt out via https://tools.google.com/dlpage/gaoptout.

 

SECTION 8 - AGE OF CONSENT

 

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site. We do not intentionally collect personal information from minors under the age of majority. If we learn that we have collected personal information from a minor without the consent of their legal guardian, we will promptly delete the relevant information. If you are a legal guardian and find that your minor dependent has provided personal information to us, please contact us at support.petessentialsg@gmail.com to request the deletion of the information.

 

SECTION 9 - CHANGES TO THIS PRIVACY POLICY

 

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. Material changes include but are not limited to: changes in the scope of personal information collected, changes in the purpose of use, changes in the way of disclosure, and changes in data security measures. We will also notify you of material changes via email or pop-up window on the website (if you have provided your email address).

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you. Before transferring your personal information to the new owner, we will ensure that the new owner will abide by this privacy policy and relevant laws and regulations to protect your personal information, and we will notify you of the transfer in advance and obtain your consent if required by law.

 

SECTION 10 - DATA RETENTION

 

We will retain your personal information only for the period necessary to achieve the purposes stated in this privacy policy or as required by applicable laws and regulations. Specifically: (1) Transaction-related information (such as name, phone number, address, order information) will be retained for 3 years after the completion of the transaction to handle after-sales disputes, comply with tax and accounting regulations; (2) Marketing-related information (such as email address) will be retained until you withdraw your consent or request deletion; (3) Browser and IP address information will be retained for 6 months and then anonymized (anonymized information cannot be used to identify your personal identity); (4) If you request to delete your personal information or withdraw your consent, we will delete or anonymize your information within the specified time limit, except for the information that needs to be retained in accordance with laws and regulations.

 

SECTION 11 - YOUR DATA RIGHTS

 

In accordance with applicable laws and regulations (such as GDPR, Singapore PDPA), you have the following rights regarding your personal information: (1) Right of access: You can request to obtain a copy of the personal information we hold about you; (2) Right of correction: You can request us to correct inaccurate or incomplete personal information; (3) Right of deletion (right to be forgotten): You can request us to delete your personal information if it is no longer necessary for the stated purposes or if you withdraw your consent; (4) Right to restrict processing: You can request us to restrict the processing of your personal information in specific circumstances; (5) Right to data portability: You can request us to provide your personal information in a structured, commonly used and machine-readable format, or transfer it to another data processor. To exercise the above rights, please contact us at support.petessentialsg@gmail.com, and we will process your request within the time limit required by law. We may verify your identity to ensure the security of your personal information.

 

SECTION 12 - GOVERNING LAW

 

This Privacy Policy is governed by and shall be construed in accordance with Singapore law, without giving effect to any principles of conflicts of law. By accessing and/or using the Sites and providing personal data or information requested, you agree to submit to the exclusive jurisdiction of the Singapore courts.

 

QUESTIONS AND CONTACT INFORMATION

 

If you have any questions, comments or requests regarding this privacy policy or the collection, use and disclosure of your personal information, please contact us through the following channels: Email: support.petessentialsg@gmail.com; Response time: We will reply to your inquiry within 15 working days. In addition, if you believe that we have violated relevant laws and regulations in processing your personal information, you have the right to complain to the relevant regulatory authorities in your jurisdiction.