Your data stays protected while we shop for you

Eligibility

You must be at least 18 years old to use our services and provide personal data. We do not knowingly collect data from individuals under 18.

If we learn that we have collected personal data from a person under 18, we will delete that data promptly. If you believe a minor has provided us data, please contact us at [email protected].

Consent notice

By creating an account or placing an order, you consent to the collection and processing of your personal data for the purposes described in this policy, in accordance with the Singapore Personal Data Protection Act (PDPA).

You may withdraw consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and we may retain data required by law even after consent is withdrawn.

Information we collect

We only ask for details that let us source, pay for, and deliver your orders safely.

• Account data: your name, email, phone number, delivery addresses, and login details.
• Order data: links you submit, quotes we build, invoices, payments, and shipment tracking updates.
• Conversation history: chats or calls with our concierge team over email, phone, WhatsApp, or web forms.
• Technical data: device info, IP address, browser details, and analytics events from browsing or signing in.

How we use your information

We rely on personal data to run our platform, assist with orders, and meet our legal duties.

• Build quotes, buy products on your behalf, clear customs, and deliver parcels to the right person.
• Send service alerts—quote updates, payment reminders, shipment milestones—and reply to support questions.
• Improve the site by reviewing aggregated usage trends and keeping systems reliable.
• Detect fraud, resolve disputes, and follow audit or regulatory rules in our operating markets.

Legal basis for processing

We process your information under one or more of these legal grounds:

• Contract performance when we prepare quotes, collect payments, and hand over goods.
• Legitimate interest for customer support, analytics, and service improvements that respect your rights.
• Legal obligations covering tax, customs declarations, anti-money-laundering, and accounting rules, including Singapore PDPA obligations.
• Consent when you opt into marketing updates or turn on extras like saved addresses.

Data sharing and disclosure

We never sell your data. We only share it with partners who help deliver your order or keep the platform running.

• Logistics and customs teams that handle pickup, import clearance, and doorstep delivery.
• Payment processors and banks that accept transfers, verify transactions, and issue receipts.
• Technology vendors that host our infrastructure, analytics, email, or customer support tools.
• Government agencies when the law, a court order, or safety concerns require it.

Data retention

We keep information only while needed to run the service or meet legal and operational requirements.

Most account and order records stay on file for up to seven years to comply with Singapore PDPA requirements and applicable tax, customs, and financial regulations.

Your rights and choices

Email [email protected] to exercise any of these rights:

• Access, correct, or update the personal data tied to your account.
• Ask us to delete your account and personal data, minus records we must retain for compliance.
• Opt out of marketing or withdraw consent you gave earlier.
• Request a portable copy of the data you shared with us.

Cookies and tracking

We use essential cookies to keep you signed in and maintain your session. These are necessary for the platform to function and cannot be disabled.

We also use analytics cookies to understand how visitors use our site. You may opt out of non-essential cookies through your browser settings or by contacting us. We do not use cookies for third-party advertising.

International data transfers

Because we source from the U.S., India, and other markets, your data might be processed in multiple countries.

Our partners follow contractual safeguards and security standards so your data stays protected wherever it travels.

Data security

We use administrative, technical, and physical safeguards to stop loss, misuse, or unauthorised access.

That includes encrypted storage, limited staff access, regular security reviews, and multi-factor authentication for internal tools.

Data breach notification

In the event of a notifiable data breach, we will notify the Personal Data Protection Commission (PDPC) and affected individuals within 3 calendar days of our assessment, as required under the PDPA.

Notification will include the nature of the breach, data affected, and steps we are taking to contain and remediate the incident.

Changes to this policy

We update this policy when regulations, services, or data practices change. We'll refresh the date above and, when needed, notify you via email or dashboard alerts.