Privacy Policy

ARAJLL PRIVATE LIMITED ("ARAJLL", "we", "us") operates arajll.com and its related services (the "Services"). This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit or shop with us, subscribe to our emails, or contact us. We comply with Singapore's Personal Data Protection Act 2012 ("PDPA").

1. Personal data we collect

• Contact details: name, email address, phone number, billing and delivery addresses.
• Order information: items purchased, order history, delivery and return details, and communications about your orders.
• Payment information: payments are processed by our payment providers. We do not store full card numbers.
• Account information: if you create an account, your login details and preferences.
• Marketing preferences: whether you have subscribed to our emails, and how you interact with them (for example, opens and clicks).
• Device and usage information: IP address, browser and device type, pages viewed, and similar information collected through cookies and similar technologies.
• Communications: messages you send us by email.

2. How we collect it

• Directly from you, when you place an order, subscribe, create an account or contact us.
• Automatically, when you use the Services.
• From service providers acting on our behalf, such as payment and delivery partners.

3. How we use it

• To process and deliver orders, take payment, and handle returns, refunds and customer service.
• To send service messages about your order or account.
• To send marketing emails, only where you have subscribed. You can unsubscribe at any time using the link in any email.
• To operate, secure and improve the Services, and to prevent fraud.
• To comply with legal obligations and enforce our terms.

4. Consent and withdrawing consent

• Where we rely on your consent, you may withdraw it at any time by contacting us (see section 12) or by using the unsubscribe link in our emails.
• We will tell you the likely consequences of withdrawal. For example, we cannot fulfil an order without a delivery address.
• We will then stop collecting, using or disclosing your personal data for that purpose, unless the law permits otherwise.

5. Who we share it with

We share personal data only as needed for the purposes above, with:

• Shopify, which hosts our online store and processes orders and payments.
• Payment providers, which process card and other payments.
• Klaviyo, which sends our marketing emails to subscribers.
• Easyship and our courier partners, which arrange and carry out delivery of your orders.
• Google Workspace, which provides our customer email (hello@arajll.com).
• Professional advisers, and authorities where required by law.

We do not sell your personal data.

6. Relationship with Shopify

• Our store is hosted by Shopify, which processes personal data to provide and improve its services.
• Shopify may also use certain information from your interactions with our store and other merchants to provide enhanced features. For these purposes, Shopify is responsible for that processing.
• Learn more in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

7. Transfers outside Singapore

• Some of our service providers store or process data outside Singapore (for example, in the United States). This includes Shopify, Klaviyo and Google.
• When personal data is transferred overseas, we take appropriate steps to ensure it receives a standard of protection comparable to that under the PDPA, for example through the provider's contractual commitments.
• Where data is transferred from the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as Standard Contractual Clauses.

8. Protection and retention

• We use reasonable security arrangements to protect personal data. However, no method of transmission or storage is completely secure.
• We keep personal data only as long as needed for the purposes for which it was collected, or as required for legal, accounting or tax purposes, and then delete or anonymise it.

9. Data breaches

If a data breach occurs that is likely to result in significant harm to you, or is of a significant scale, we will notify the Personal Data Protection Commission and, where required, affected individuals, in accordance with the PDPA.

10. Your rights: access and correction

• You may ask for access to the personal data we hold about you and for information about how it has been used or disclosed in the past year. You may also ask us to correct inaccurate data.
• We will respond as soon as reasonably possible, and generally within 30 days. If we need more time, we will tell you when you can expect a response.
• A reasonable fee may apply to access requests. We will tell you in advance.
• Depending on where you live, you may have additional rights under local law.

11. Marketing to Singapore telephone numbers

We do not currently send marketing by text message or phone call. If we do in future, we will comply with the PDPA's Do Not Call provisions.

12. Contact us

For questions about this policy or your personal data, email hello@arajll.com or write to ARAJLL PRIVATE LIMITED, 7 Temasek Boulevard, #12-07 Suntec Tower One, Singapore 038987.

13. Data Protection Officer

We have appointed a Data Protection Officer to oversee our compliance with the PDPA. You can contact our Data Protection Officer at hello@arajll.com, marked "Attn: Data Protection Officer", or by post to the address above.

14. Children

Our Services are not directed at children, and we do not knowingly collect personal data from children.

15. Third-party links

Our Services may link to third-party websites and platforms, such as Instagram. Their privacy practices are their own responsibility.

16. Changes

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the "Last updated" date.