Privacy policy
Draft for review. This document must be checked before sales begin.
1. Who we are
This Site is run by [SELLER / BUSINESS NAME], [ADDRESS], New Zealand. We follow the Personal Data Protection Act 2012 (PDPA) of Singapore.
Data Protection Officer: you can contact our Data Protection Officer at [email protected].
2. What we collect and why
| Data | Purpose |
|---|---|
| Email address, payment reference, the Pack bought, amount paid | To complete your purchase and send your access link |
| Transaction records | Accounting and tax records |
| Emails you send us | To answer questions and handle complaints and refunds |
| IP address and technical request data | To keep the Site secure and working |
By buying a Pack you consent to us using your data for these purposes. We do not see your card details: the payment provider handles them. We do not sell your personal data and we do not send marketing emails unless you have agreed to receive them.
3. Who we share data with
- Stripe (payments),
- Cloudflare, Inc. (hosting and security),
- Resend, Inc. (sending emails).
These providers may store or process data outside Singapore, including in the United States and New Zealand. Where we transfer personal data out of Singapore, we take steps to make sure it receives a standard of protection comparable to the PDPA, for example through the providers' contractual data protection terms.
4. How long we keep data
Transaction records are kept for as long as tax and accounting rules require. Data needed to provide access and handle complaints is kept until it is no longer needed for that purpose. Emails are kept until the matter is closed.
5. Your rights
You can ask to access the personal data we hold about you, ask us to correct it, and withdraw your consent to our use of it (withdrawing consent may mean we can no longer provide your access link). Email our Data Protection Officer at [email protected]. You can also contact the Personal Data Protection Commission (PDPC) of Singapore.
6. Security and data breaches
We use reasonable security arrangements to protect personal data. If a data breach is likely to cause you significant harm, we will notify you and the PDPC as the PDPA requires.
7. Cookies and browser storage
The Site uses only essential browser storage (localStorage), for example to remember your cookie choice and your confirmation before purchase.
We do not currently use analytics or advertising tools. If that changes, we will ask for your permission before anything is loaded.
8. Changes
We will post any changes to this policy on this page.