Privacy Policy

We only collect what we need to run the shop — your name, email, delivery address, and order history. We don't sell your data. Card numbers never touch our servers; Stripe handles payments. You can request a copy, correction, or deletion of your data any time.

When you browse or shop with us, we may collect:

• Account info: name, email, phone (if provided), password (hashed).
• Order info: billing & delivery address, items ordered, notes.
• Payment info: handled by Stripe — we only store the order amount and a payment reference.
• Usage info: basic anonymised analytics (page views, device type) to improve the site.
• Communications: emails you send us and our replies, for support history.

• To fulfil your orders and provide customer support.
• To send transactional emails (order confirmation, shipping updates, replies).
• To send marketing emails — only if you opted in. You can unsubscribe with one click.
• To improve the shop, prevent fraud, and meet legal/tax obligations.

We share the minimum data needed with trusted service providers:

• Stripe — payment processing.
• SingPost & courier partners — to deliver your parcel.
• Resend — to send transactional & marketing emails.
• Supabase / Vercel — secure hosting and database.

We never sell or rent your personal data to advertisers.

We use a small number of cookies and local-storage items to keep your cart, sign-in session, currency preference, and language preference. These are essential to the shop working — no advertising or cross-site tracking cookies are set by us.

You can at any time:

• Access a copy of the data we hold about you.
• Correct or update inaccurate data.
• Delete your account and personal data (we may keep order records for tax/legal reasons).
• Withdraw marketing consent.
• Port your data to another service in a machine-readable format.

Email hello@inkipinki.comwith your request and we'll respond within 30 days.

Account & order data is kept while your account is active. After deletion, we retain order records for up to 7 years for tax compliance and then permanently remove them. Marketing-only data is removed within 90 days of unsubscribe.

Passwords are hashed; sessions are signed; all data in transit uses HTTPS. We follow industry standard practices and review our security posture regularly. No system is 100% secure though, so please use a strong unique password and reach out if anything looks suspicious.

inki pinki is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have, please contact us and we'll delete it.

We may update this policy from time to time. Material changes are reflected here and on our homepage, with a refreshed "last updated" date.