Privacy Policy

Tangled Monk operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you visit, use, or make a purchase or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Personal Data We Collect

We may collect or process the following categories of personal information, depending on how you interact with the Services:

• Contact details (name, email, phone number, billing/shipping address)
• Transaction and order information (items purchased, returns/exchanges, payment confirmation)
• Account information (if you create an account)
• Communications with us (support requests, messages)
• Device/usage information (IP address, browser, interactions), including cookies

Sources of Personal Data

We may collect personal data:

• Directly from you (checkout, account creation, enquiries, visit or use of the Services)
• Automatically through the Services (cookies and similar technologies)
• From service providers (payment processors, delivery partners, analytics)
• From partners where you consent or where permitted by law

How We Use Personal Data

We use personal data to:

• Fulfil orders, process payments, and arrange delivery
• Provide customer support and manage accounts
• Improve our Services and shopping experience
• Send transactional updates (order confirmations, shipping updates)
• Send marketing communications where you have consented
• Prevent fraud and maintain security
• Comply with legal obligations

Marketing, DNC & Unsubscribe

If you opt in, we may send marketing communications by email, SMS, phone call, or messaging platforms.

Email: Marketing emails will include an unsubscribe option in compliance with Singapore's Spam Control requirements.

SMS/Calls/WhatsApp: For Singapore-registered numbers, we will only send marketing messages with clear consent and in compliance with Singapore's Do Not Call (DNC) requirements.

You may opt out of marketing at any time. We may still send non-promotional messages about your orders or account.

Disclosure of Personal Data

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, including:

• With Shopify, vendors and third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping)
• With business and marketing partners to provide advertising services based on your online activity
• When you direct or consent to our disclosure of certain information to third parties
• With our affiliates or within our corporate group
• In connection with a business transaction, to comply with legal obligations, or to enforce applicable terms of service

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify as well as third parties located in countries other than where you reside.

To learn more about how Shopify uses your personal information and your rights, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

Third Party Websites & Links

The Services may provide links to websites or platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of such links does not imply any endorsement of the content or their owners or operators.

Children's Data

The Services are not intended to be used by children. We do not knowingly collect personal information about children under the age of majority. If you are the parent or guardian of a child who has provided us with their personal information, please contact us to request deletion.

Security & Retention

No security measures are perfect or impenetrable. We recommend you do not use unsecure channels to communicate sensitive or confidential information to us.

We retain personal data only as long as necessary for business, legal, or operational purposes — including to maintain your account, provide Services, comply with legal obligations, or resolve disputes.

Your Rights & Choices

Depending on where you live, you may have the following rights in relation to your personal information:

• Right to Access / Know — request access to personal information we hold about you
• Right to Delete — request deletion of personal information we maintain about you
• Right to Correct — request correction of inaccurate personal information
• Right of Portability — receive a copy of your personal information and request transfer to a third party
• Marketing Preferences — opt out of promotional emails at any time via the unsubscribe option

To exercise any of these rights, contact us using the details below or visit privacy.shopify.com.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below. You may also have the right to lodge a complaint with your local data protection authority.

International Transfers

Our service providers (including Shopify) may process data outside Singapore. Where personal data is transferred overseas, we take reasonable steps to ensure it is protected to a standard comparable to Singapore's PDPA.

Where data is transferred outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses.

Your PDPA Rights

You may request access to or correction of your personal data, or withdraw consent, by contacting us. We may need to verify your identity before processing requests.

Data Protection Officer (DPO)

For PDPA-related queries or requests, contact our Data Protection Officer:

Cookies

We use cookies and similar technologies to operate the website, remember preferences, and understand site usage. You can control cookies through your browser settings.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this website and update the "Last updated" date.

Contact

For privacy questions, contact us at studio@tangledmonk.com or:

• Trading name: Tangled Monk Pte. Ltd.
• UEN: 202530509M
• Address: 170B Joo Chiat Road, Level 3, Singapore 427441
• Email: studio@tangledmonk.com
• Phone/WhatsApp: +65 9772 1902