Privacy Policy

Information you provide

When you create an account, place an order, or contact us, we collect your name, email address, phone number, shipping address, and payment information. For sellers, we additionally collect identity verification documents as required by applicable law.

Information collected automatically

We collect browsing data, device information, IP address, and cookie data when you visit our website. This helps us improve our platform and provide a personalised experience.

Information from third parties

We may receive information from payment processors, identity verification services, and social login providers (if you choose to sign in with a third-party account).

To fulfil orders

We use your information to process payments, arrange shipping, provide authentication services, and communicate order updates.

To improve our platform

Aggregated and anonymised data helps us understand how our platform is used and make improvements. We use analytics tools that comply with Singapore's PDPA.

Marketing communications

With your consent, we may send you newsletters, product recommendations, and promotional offers. You can unsubscribe at any time via the link in any email.

Legal obligations

We may use or disclose your information where required by law, court order, or governmental authority.

Service providers

We share data with trusted third-party service providers including Shopify (e-commerce platform), payment processors, logistics partners, and authentication verification services. These parties are contractually bound to protect your data.

We do not sell your data

Chitose does not sell, rent, or trade your personal information to third parties for their marketing purposes.

Business transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

Account data

We retain your account data for as long as your account is active or as needed to provide services. You may request deletion of your account at any time.

Transaction records

Order and transaction records are retained for 7 years as required by Singapore financial regulations.

Authentication records

Authentication certificates and associated records are retained indefinitely as part of the item's provenance history.

Access and correction

You have the right to access the personal data we hold about you and to request corrections to any inaccuracies. Log in to your account or contact us at privacy@chitose.sg.

Data portability

You may request a copy of your personal data in a structured, machine-readable format.

Withdrawal of consent

Where we process data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

Complaints

If you believe we have not handled your data appropriately, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.

Essential cookies

Required for the website to function, including shopping cart and session management. Cannot be disabled.

Analytics cookies

Help us understand how visitors use our site. You may opt out via your browser settings or our cookie preference centre.

Marketing cookies

Used to deliver relevant advertisements. You may opt out at any time via the cookie preference centre.

Technical safeguards

We use SSL/TLS encryption, secure payment processing (PCI DSS compliant via Shopify Payments), and access controls to protect your data.

Data breach notification

In the unlikely event of a data breach affecting your personal data, we will notify you and the PDPC within the timeframes required by law.

Data Protection Officer

For any privacy-related enquiries, please contact our Data Protection Officer at privacy@chitose.sg or via our Contact Us page. We aim to respond within 5 business days.