Privacy Policy
We collect only what we need to take your order, deliver it and look after your account. This page explains what that is, who it is shared with, and how to exercise your rights under Singapore’s Personal Data Protection Act (PDPA).
Who is responsible for your data
Soft Glow Pte. Ltd., Singapore, operates this site and is responsible for the personal data collected through it. For any privacy question or request, email sales@softglowlab.com.
What we collect
- Order details — your name, delivery address, phone number and email address, entered at checkout so we can deliver and keep you informed.
- Payment — handled entirely by Stripe. We receive confirmation that you have paid and the last few digits of your card for our records; we never see or store your full card number.
- Account details — if you create an account: your name, email, a securely hashed password (we cannot read it), or your Google account identifier if you sign in with Google. Your saved bag is stored against your account.
- Technical information — basic server logs such as IP address, browser type and pages requested, kept for security and to keep the site running.
If you check out as a guest, your bag lives only in your own browser until you pay.
How we use it
- To process, pack and deliver your order and send you the order confirmation.
- To answer your questions and handle any replacement or refund.
- To run your account and keep your bag across devices, if you choose to create one.
- To protect the site and our customers against fraud and misuse.
- To meet our legal obligations, such as keeping accounting records.
We do not send marketing emails from this site and we do not sell or rent your data to anyone.
Who we share it with
- Stripe, our payment provider, to process your payment.
- Our fulfilment warehouse and Ninja Van, who receive your name, address and phone number to pack and deliver your parcel.
- Google, only if you choose to sign in with Google. Our page fonts are also loaded from Google’s servers, which means Google receives your IP address when the page loads.
- Our hosting and database providers, who store data on our behalf in Singapore.
Each of these providers is bound to use your data only to provide their service to us. We may also disclose data where the law requires it.
Cookies
This site uses a single, essential cookie to keep you logged in and remember your bag. We do not use advertising, tracking or analytics cookies. Because the cookie is essential to the site working, no consent banner is required, and you can clear it at any time in your browser.
How long we keep it
Order records are kept for as long as Singapore tax and accounting rules require, currently five years. Account details are kept until you ask us to close your account. Server logs are kept for a short period and then deleted.
Your rights
Under the PDPA you can ask us for a copy of the personal data we hold about you, ask us to correct it, or withdraw your consent to our using it (bearing in mind we may then be unable to complete an order). You can also ask us to close your account and delete the data we are not legally required to keep. Email sales@softglowlab.com and we will respond within 30 days.
Security
The site is served over HTTPS, passwords are stored hashed, and access to customer data is limited to what each part of our system needs. No system is perfectly secure, so please contact us right away if you believe your account has been accessed without permission.
Children
This site is intended for adults. We do not knowingly collect data from anyone under 18.
Changes to this policy
If we change how we handle your data we will update this page and the date at the top. Significant changes will be highlighted on the site.