Privacy Policy

Privacy Policy

Simply Yours operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services").

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

Personal Information We Collect

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. We may collect the following categories:

• Contact details: Name, address, billing/shipping address, and email.
• Financial information: Payment card details and transaction history (processed securely via Stripe).
• Device information: IP address, browser type, and network connection.

How We Use Your Information

Depending on how you interact with us, we use your personal information to:

• Provide and improve the Services
• Fulfill orders and process payments
• Communicate with you regarding your account or marketing preferences
• Detect and prevent fraudulent activity

Security and Retention

We take reasonable precautions to protect your information. Please be aware that no security measures are perfect, and we cannot guarantee absolute security. We retain your personal information only as long as necessary to maintain your account, provide Services, or comply with legal obligations.

Your Rights and Choices

Depending on where you live, you may have the right to access, delete, or correct the personal information we hold about you. You may opt out of promotional communications at any time by using the unsubscribe link in our emails or by contacting us directly.

Singapore PDPA Compliance

Simply Yours LLP complies with the Personal Data Protection Act 2012 (PDPA) of Singapore (Cap. 26G). This section outlines our obligations and your rights under this Act.

Data We Collect via Social Login (OAuth)

When you choose to sign in using a third-party account, we receive only the data that provider shares with your consent. The following table summarises what each provider may share:

• Google: Full name, verified email address, profile photo, and language/locale preference.
• Apple: Name (shared only on first sign-in) and email address (which Apple may mask with a private relay address at your discretion).
• Facebook / Meta: Full name, email address, and profile photo. Additional data (e.g. birthday, location) is only requested if you explicitly grant it.

We do not request, store, or access your social media passwords, friend lists, posts, or any data beyond what is listed above without your additional, specific consent.

Purpose of Collection

Your personal data is collected solely for the following purposes:

• Creating and managing your Simply Yours customer account
• Processing your orders and communicating order status
• Sending promotional communications (only if you opt in)
• Improving our products and personalising your shopping experience
• Complying with applicable laws and regulations in Singapore

We will not use your personal data for any other purpose without obtaining your prior consent.

Your Rights Under the PDPA

As a data subject under the PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct any inaccurate or incomplete personal data
• Withdrawal of Consent — withdraw consent for us to collect, use, or disclose your personal data at any time, subject to legal or contractual restrictions
• Data Portability — where applicable, request your data in a machine-readable format

To exercise any of the above rights, contact our Data Protection Officer at admin@simplyyours.co. We will respond within 30 days as required by the PDPA.

Data Retention

We retain your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Active accounts: Data is retained for the duration of your account
• Inactive accounts: Data is reviewed after 3 years of inactivity and deleted unless legally required to be retained
• Transaction records: Retained for 5 years for accounting and tax compliance

Upon account deletion, your personal data will be anonymised or permanently deleted within 30 days, except where retention is required by law.

Third-Party Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted service providers (such as Stripe for payments, NinjaVan for logistics, and Google/Apple/Meta for authentication) solely to operate our Services. These providers are contractually obligated to protect your data in accordance with applicable law.

Withdrawing Consent

You may withdraw your consent to our collection and use of your personal data at any time by contacting us at admin@simplyyours.co or by deleting your account in your account settings. Please note that withdrawal of consent may affect your ability to use certain features of our Services.

Data Protection Officer

Simply Yours LLP has designated a Data Protection Officer (DPO) as required under the PDPA. For all data protection enquiries, complaints, or requests, please contact: