- Introduction
This Privacy Policy outlines how solidblackout.com collects, uses, shares, and protects personal data when you visit our website, interact with our services, or purchase our solid blackout curtains. We are committed to safeguarding your privacy in compliance with the Personal Data Protection Act (PDPA) of Singapore and the General Data Protection Regulation (GDPR) of the European Union.
By accessing our website and utilizing our services, you acknowledge the collection and processing of your personal information as described in this policy.
- Data We Collect
We collect personal data necessary for order fulfillment, customer support, and website functionality. This includes:
Identity and Contact Data: Full name, shipping address, billing address, email address, and telephone number.
Transaction Data: Details regarding products purchased and order history.
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform metadata.
- Payment Processing via Stripe
To ensure secure transactions, financial processing is handled by our third-party payment gateway, Stripe.
When you purchase from solidblackout.com, your payment details (such as credit or debit card numbers) are collected, processed, and stored directly by Stripe in compliance with Payment Card Industry Data Security Standards (PCI-DSS).
We do not store or have direct access to your complete credit card information on our servers.
For further details regarding how Stripe handles your personal data, please refer to the Stripe Privacy Policy available at stripe.com.
- Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements:
Transactional and Order Data: Retained for a minimum of 7 years in accordance with Singapore tax and corporate accounting regulations, and applicable European statutory financial retention periods.
Customer Account and Communication Data: Retained for the duration of your active account relationship or up to 5 years following your last interaction, unless an earlier deletion is requested and permitted by law.
Technical and Analytics Data: Retained for a maximum period of 24 months, after which logs are anonymized or securely deleted.
- Your Legal Rights (GDPR & PDPA)
Depending on your jurisdiction, you hold specific rights regarding your personal information:
Right of Access: You may request confirmation of whether we process your data and obtain a copy of your personal records.
Right to Rectification: You can request the correction of inaccurate or incomplete personal data.
Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
Right to Restriction and Objection: You have the right to restrict or object to the processing of your data under specific conditions.
Right to Data Portability: You may request the transfer of your data to another organization in a structured, commonly used format.
To exercise any of these rights, please contact our data controller team at merchandiser@solidblackout.com
- Data Security Measures
We implement technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, disclosure, or alteration. Access to personal data is restricted to authorized personnel and trusted service providers bound by strict confidentiality obligations.
- International Data Transfers
As solidblackout.com is based in Singapore and serves customers across Europe, your personal data may be transferred to, stored, and processed in Singapore or other jurisdictions outside the European Economic Area (EEA). We ensure that any international transfer of personal data complies with applicable European data protection standards and Singapore legal frameworks through appropriate contractual safeguards.
- Changes to This Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time to reflect changes in legal requirements or business practices. The updated version will be posted on this page with an updated effective date. Continued use of our website constitutes your acceptance of the revised terms.