Sweet Sprinkles Singapore (UEN 201734079R001) ("we", "us") respects your privacy. This policy explains what personal data we collect when you use www.sweetsprinkles.sg or order from us, why we collect it, and the choices you have. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).
What we collect
- Order details: your name, email address, phone number, delivery address (for deliveries), your chosen pickup or delivery date and time, and any note you add to your order, such as a message for a cake.
- Payment details: you pay by PayNow from your own banking app. We never see your bank login or card details. Our bank statement shows us the payer's name, the amount and the reference you enter, which we use to match your payment to your order.
- Enquiries: whatever you choose to tell us when you contact us by WhatsApp, phone or email.
- Technical data: to stop abuse of checkout, we briefly keep a scrambled (hashed) form of your IP address. If you accept analytics cookies, Google Analytics also collects information about your device and the pages you visit.
How we use it
- To prepare, deliver or hand over your order, and to contact you about it.
- To verify your payment and process any refund.
- To answer your enquiries.
- To keep the website secure and prevent fraudulent orders.
- To keep business and accounting records required by law.
- With your consent, to understand how visitors use the website so we can improve it.
We do not sell your personal data. We do not send you marketing messages unless you have agreed to receive them, and we respect the Do Not Call Registry.
Consent
By placing an order or contacting us, you consent to us using your personal data for the purposes above. You may withdraw your consent at any time by contacting us. We will then stop using your data for that purpose, although we may be unable to fulfil an order that depends on it.
Cookies
Cookies are small files stored by your browser. We use essential cookies for the website to work. Analytics cookies are used only if you choose Accept all in our cookie banner.
| Name | Purpose | Type | Kept for |
|---|---|---|---|
ss_cart_native | Remembers your shopping cart. | Essential | 30 days |
ss_cookie_consent | Remembers your cookie choice (stored in your browser, not sent to us). | Essential | Until you clear it |
ss_admin | Keeps our staff signed in to the shop admin. | Essential (staff only) | 7 days |
_ga, _ga_* | Google Analytics: counts visits and shows which pages are used. | Analytics (only with consent) | Up to 2 years |
Our location page shows an embedded Google Map. Google may set its own cookies when that map loads; see Google's privacy policy for details.
You can change your choice at any time: . You can also block or delete cookies in your browser settings, but the cart will not work without essential cookies.
Who we share it with
We share personal data only as needed to run our shop, with:
- service providers that host our website and store our data, including our website host, database provider and a security service that limits repeated checkout attempts;
- Google, for website analytics if you have accepted analytics cookies;
- whoever delivers your order, who receives your name, phone number and address;
- authorities, where the law requires it.
Some of these providers may process data outside Singapore. When that happens, we take steps to ensure your data receives protection comparable to the PDPA.
How long we keep it
We keep order records for as long as we need them for the purposes above and to meet legal and tax record-keeping requirements, generally five years. Shopping carts expire after 30 days, and the checkout abuse-prevention data expires within hours. When we no longer need personal data, we delete it or make it anonymous.
How we protect it
The website uses encrypted (HTTPS) connections. Only authorised staff can see order details, and each order's status page is available only through a private link. If a data breach occurs that must be reported, we will notify the Personal Data Protection Commission (PDPC) and affected customers as the PDPA requires.
Your rights
You can ask us to:
- tell you what personal data we hold about you and how it has been used in the past year;
- correct personal data that is wrong or incomplete;
- stop using your personal data for a purpose you previously agreed to.
We will respond within 30 days. If we need longer, we will tell you when to expect our answer. We may charge a reasonable fee for an access request, and will tell you the fee before we proceed.
Contact our Data Protection Officer
For questions, requests or complaints about your personal data, contact:
Data Protection Officer, Sweet Sprinkles Singapore (UEN 201734079R001)
321 Alexandra Road, #01-11, Alexandra Central Mall, Singapore 159971
Email: enquiry@sweetsprinkles.sg
Phone: +65 8120 2075
If you are not satisfied with our response, you may contact the PDPC at www.pdpc.gov.sg.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.