This notice explains how Crafted Confections processes personal data through its website and related order or enquiry handling. It follows the data lifecycle from collection to use, disclosure, retention, and deletion, and it is intended for visitors, customers, and subscription users in Singapore.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
We may collect your name, email address, phone number if provided, inquiry message, order specifications, event date or collection preferences, and allergen information that you choose to share. We also process limited technical data such as server request metadata and browser or device information when you use the website.
Most personal data comes from contact forms, email, phone calls, and scheduled consultations. Technical data is generated automatically when the site is accessed, and order-related details may be recorded when you review assortments, confirm production schedules, or arrange collection or delivery.
The site uses essential cookies needed for operation and cookies that store privacy preferences. We do not confirm analytics or marketing cookies as active on the current site configuration.
We use cookies for essential site operation and to remember privacy preferences. You can manage cookies through your browser settings, and where the site offers a preference control, you may change your selection there. Disabling essential cookies may affect basic site functions.
We use personal data to respond to enquiries, confirm order details, manage collection or delivery arrangements, handle subscription administration, provide storage and serving guidance, maintain website security, and support technical delivery of the site. Where allergen information is provided, it is used only to review the specific order and current handling context.
We may share personal data with service providers that support website delivery, contact handling, technical maintenance, or other operational tasks. Any such recipient is expected to use the data only for the assigned purpose and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data where required by law, court order, or a lawful request from a public authority. Disclosure may also occur where needed to establish, exercise, or defend legal claims, or to protect the security and integrity of the website and our records.
Subject to applicable law, you may ask us to access, correct, or update your personal data, and you may object to or limit certain processing where a valid basis exists. We may need to verify your identity and assess whether a request can be fulfilled in full or in part.
To make a privacy request, use one of the contact channels listed in this notice and describe the data or issue involved. We will review the request, confirm what information is needed, and respond within a reasonable timeframe under applicable Singapore law.
We keep personal data only for as long as it is needed to respond to enquiries, manage orders or subscriptions, maintain security, meet recordkeeping obligations, or resolve disputes. When the relevant purpose ends, data is deleted, anonymised, or otherwise removed from active use according to our lifecycle review process.
If we make a material update, we will revise the notice on the website and may use a reasonable service channel to draw attention to the change where appropriate. The updated version applies from the stated effective date.
