Privacy Policy
Last updated: 15 January 2026 · Singapore PDPA
Tangled Monk operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you visit, use, or make a purchase or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Personal Data We Collect
We may collect or process the following categories of personal information, depending on how you interact with the Services:
- Contact details (name, email, phone number, billing/shipping address)
- Transaction and order information (items purchased, returns/exchanges, payment confirmation)
- Account information (if you create an account)
- Communications with us (support requests, messages)
- Device/usage information (IP address, browser, interactions), including cookies
Sources of Personal Data
We may collect personal data:
- Directly from you (checkout, account creation, enquiries, visit or use of the Services)
- Automatically through the Services (cookies and similar technologies)
- From service providers (payment processors, delivery partners, analytics)
- From partners where you consent or where permitted by law
How We Use Personal Data
We use personal data to:
- Fulfil orders, process payments, and arrange delivery
- Provide customer support and manage accounts
- Improve our Services and shopping experience
- Send transactional updates (order confirmations, shipping updates)
- Send marketing communications where you have consented
- Prevent fraud and maintain security
- Comply with legal obligations
Marketing, DNC & Unsubscribe
If you opt in, we may send marketing communications by email, SMS, phone call, or messaging platforms.
Email: Marketing emails will include an unsubscribe option in compliance with Singapore's Spam Control requirements.
SMS/Calls/WhatsApp: For Singapore-registered numbers, we will only send marketing messages with clear consent and in compliance with Singapore's Do Not Call (DNC) requirements.
You may opt out of marketing at any time. We may still send non-promotional messages about your orders or account.
Disclosure of Personal Data
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, including:
- With Shopify, vendors and third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping)
- With business and marketing partners to provide advertising services based on your online activity
- When you direct or consent to our disclosure of certain information to third parties
- With our affiliates or within our corporate group
- In connection with a business transaction, to comply with legal obligations, or to enforce applicable terms of service
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify as well as third parties located in countries other than where you reside.
To learn more about how Shopify uses your personal information and your rights, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.
Third Party Websites & Links
The Services may provide links to websites or platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of such links does not imply any endorsement of the content or their owners or operators.
Children's Data
The Services are not intended to be used by children. We do not knowingly collect personal information about children under the age of majority. If you are the parent or guardian of a child who has provided us with their personal information, please contact us to request deletion.
Security & Retention
No security measures are perfect or impenetrable. We recommend you do not use unsecure channels to communicate sensitive or confidential information to us.
We retain personal data only as long as necessary for business, legal, or operational purposes — including to maintain your account, provide Services, comply with legal obligations, or resolve disputes.
Your Rights & Choices
Depending on where you live, you may have the following rights in relation to your personal information:
- Right to Access / Know — request access to personal information we hold about you
- Right to Delete — request deletion of personal information we maintain about you
- Right to Correct — request correction of inaccurate personal information
- Right of Portability — receive a copy of your personal information and request transfer to a third party
- Marketing Preferences — opt out of promotional emails at any time via the unsubscribe option
To exercise any of these rights, contact us using the details below or visit privacy.shopify.com.
Complaints
If you have complaints about how we process your personal information, please contact us using the details below. You may also have the right to lodge a complaint with your local data protection authority.
International Transfers
Our service providers (including Shopify) may process data outside Singapore. Where personal data is transferred overseas, we take reasonable steps to ensure it is protected to a standard comparable to Singapore's PDPA.
Where data is transferred outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses.
Your PDPA Rights
You may request access to or correction of your personal data, or withdraw consent, by contacting us. We may need to verify your identity before processing requests.
Data Protection Officer (DPO)
For PDPA-related queries or requests, contact our Data Protection Officer:
Cookies
We use cookies and similar technologies to operate the website, remember preferences, and understand site usage. You can control cookies through your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this website and update the "Last updated" date.
Contact
For privacy questions, contact us at studio@tangledmonk.com or:
- Trading name: Tangled Monk Pte. Ltd.
- UEN: 202530509M
- Address: 170B Joo Chiat Road, Level 3, Singapore 427441
- Email: studio@tangledmonk.com
- Phone/WhatsApp: +65 9772 1902
What we collect, and why
What personal data do you collect about me?
Depending on how you use the site, we may collect or process your contact details (name, email, phone number, billing and shipping address), transaction and order information (items purchased, returns and exchanges, payment confirmation), account information if you create an account, your communications with us such as support requests and messages, and device and usage information such as IP address, browser and interactions, including through cookies.
Where does that data come from?
Four places. Directly from you, at checkout, when you create an account, or when you send an enquiry; automatically through the site, via cookies and similar technologies; from our service providers, including payment processors, delivery partners and analytics providers; and from partners, where you have consented or where the law permits it.
What do you use my data for?
To fulfil orders, process payments and arrange delivery; to provide customer support and manage accounts; to improve the site and the shopping experience; to send transactional updates such as order confirmations and shipping updates; to send marketing communications where you have consented; to prevent fraud and maintain security; and to comply with our legal obligations.
Do you use cookies, and can I turn them off?
Yes, we use cookies and similar technologies to operate the website, remember your preferences and understand how the site is used. You can control cookies through your browser settings.
How long do you keep my data?
Only as long as necessary for business, legal or operational purposes — to maintain your account, provide the Services, meet legal obligations, or resolve a dispute.
Marketing and messages
Will you send me marketing messages?
Only if you opt in. Where you have consented, we may send marketing by email, SMS, phone call or messaging platforms. For Singapore-registered numbers, we only send marketing messages with clear consent and in line with Singapore's Do Not Call requirements.
How do I stop marketing messages?
You can opt out at any time. Every marketing email carries an unsubscribe option, in compliance with Singapore's Spam Control requirements, and you can also write to studio@tangledmonk.com. We may still send you non-promotional messages about your orders or your account.
Who sees my data
Who do you share my data with?
With Shopify, and with vendors and third parties who perform services on our behalf — IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping. We may also share data with business and marketing partners to provide advertising based on your online activity, with anyone you direct or consent to, with our affiliates, and where required in connection with a business transaction, to comply with legal obligations, or to enforce our terms.
Does Shopify get my data?
Yes. The site is hosted by Shopify, which collects and processes information about your access to and use of it, and information you submit may be transmitted to and shared with Shopify and with third parties located in countries other than where you live. Shopify's own Consumer Privacy Policy and its Privacy Portal set out how it uses your data and what rights you have with it.
Is my data sent outside Singapore?
It can be. Our service providers, including Shopify, may process data outside Singapore. Where personal data is transferred overseas we take reasonable steps to ensure it is protected to a standard comparable to Singapore's PDPA, and where data leaves the European Economic Area or the United Kingdom we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses.
Do you store my card details?
Payments are handled by payment processors rather than by us; what we hold is your transaction and order information, including confirmation that payment was made. No security measures are perfect or impenetrable, so please do not use unsecure channels to send us sensitive or confidential information.
Your rights
What rights do I have over my data?
Depending on where you live, you may have the right to access or know what personal information we hold about you, the right to have it deleted, the right to have inaccurate information corrected, the right of portability — a copy of your data, or its transfer to a third party — and the right to opt out of promotional email at any time.
How do I request access to, correction of, or deletion of my data?
Write to studio@tangledmonk.com, or contact our Data Protection Officer at karan@tangledmonk.com for anything PDPA-related. You can also make a request through Shopify's Privacy Portal at privacy.shopify.com. We may need to verify your identity before we process a request.
Can I withdraw my consent?
Yes. You may request access to or correction of your personal data, or withdraw your consent, by contacting us. As above, we may need to verify your identity first.
What if I am not happy with how you have handled my data?
Tell us first — email studio@tangledmonk.com, or our Data Protection Officer at karan@tangledmonk.com. You may also have the right to lodge a complaint with your local data protection authority.
The policy itself
Can children use the site?
The Services are not intended to be used by children, and we do not knowingly collect personal information about anyone under the age of majority. If you are the parent or guardian of a child who has given us their personal information, contact us and we will delete it.
When was this policy last updated, and does it change?
The policy was last updated on 15 January 2026 and is written to Singapore's PDPA. We may update it from time to time to reflect changes in our practices or for operational, legal or regulatory reasons; when we do, the revised policy is posted here and the “Last updated” date changes with it.
Who do I contact about privacy?
Email studio@tangledmonk.com for privacy questions, or karan@tangledmonk.com for our Data Protection Officer. The registered details are Tangled Monk Pte. Ltd., UEN 202530509M, 170B Joo Chiat Road, Level 3, Singapore 427441, phone and WhatsApp +65 9772 1902.
