Privacy Policy

1. Who we are

Olibaby.sg is a sole-proprietorship based in Singapore that crafts handmade heirloom keepsakes from your baby's clothing. References to “we”, “us”, or “our” in this policy refer to Olibaby.sg.

We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

2. What data we collect

When you place an order we collect:

• Full name — to address correspondence and label your order
• Email address — to send order confirmation and updates
• Phone number (optional) — for delivery coordination
• Delivery address — to ship your keepsake to you
• Order notes / special requests — to fulfil your customisation preferences

We do not collect payment card details. Payments are made via PayNow, a bank-to-bank transfer system operated by your own bank.

3. Why we collect it

We use your personal data solely to:

• Process and fulfil your order
• Contact you about your order status or delivery
• Resolve any issues with your order
• Comply with legal or regulatory obligations

We do not use your data for marketing, profiling, or any purpose beyond fulfilling your order unless we have your explicit consent.

4. Who we share it with

We do not sell, rent, or share your personal data with any third parties for their own purposes.

Your order data is stored securely on Supabase (hosted on AWS infrastructure in Singapore or the nearest available region). Supabase processes data only on our behalf and under strict confidentiality obligations.

We may disclose your data if required to do so by Singapore law or a valid legal order.

5. How long we keep it

We retain order records (including personal data) for 3 years from the date of your order. This period covers our obligations under Singapore's business record-keeping requirements. After this period, your order data is permanently deleted from our systems.

6. How we protect it

• All data is transmitted over HTTPS (TLS encryption)
• Database access is restricted by row-level security policies
• Only authorised Olibaby personnel can access order details
• We never store payment credentials

7. Your rights

Under the PDPA you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate personal data
• Withdraw consent and request deletion of your data (subject to our legal retention obligations)

To exercise any of these rights, email us at hello@olibaby.sg with your name and order number. We will respond within 10 business days.

8. Cookies

We use a single session cookie to keep you logged in if you are an admin user. We do not use advertising, analytics, or tracking cookies. No third-party scripts are loaded on this site.

9. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will always reflect the latest version. Continued use of our website after an update constitutes acceptance of the revised policy.

10. Contact

For any privacy-related questions or requests, please contact us at hello@olibaby.sg.

If you are unsatisfied with our response you may contact the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.