Your data, kept quietly

House of Vibhavari is a registered Singapore business and complies with the Personal Data Protection Act (PDPA) 2012. This is a plain account of what we hold and why.

What we collect

• From customers— name, email, billing & shipping address, phone number, and payment-card details (the latter processed by Stripe and HitPay; we never see the card number).
• From newsletter subscribers — email address and the date you joined.
• From the website — basic analytics (page views, referrer, country). [TO BE COMPLETED — confirm analytics provider]

What we do with it

• Fulfil and ship your order; handle returns and exchanges.
• Tell you about your specific order (dispatch, delivery, follow-up).
• Tell you about new drops and seasonal collections — but only if you've opted in. We don't buy lists and we don't email anyone we haven't spoken to first.
• Comply with Singapore tax and accounting law.

Who we share it with

Our processors are: [TO BE COMPLETED — confirm list] Stripe (payments), HitPay (PayNow, GrabPay), our courier (shipping labels), our email-sending service, and our analytics provider. Each is bound by its own contract.

Where it lives

Our database is hosted in Singapore. Backups are encrypted at rest. Processor data may be stored in jurisdictions with PDPA-equivalent protection.

How long we keep it

Order data is kept for seven years (Singapore tax records). Newsletter emails are kept until you unsubscribe. Anonymous analytics is kept indefinitely.

Your rights

Under PDPA you may request access to your data, ask us to correct it, or ask us to delete it (subject to legal retention obligations). Write to hello@houseofvibhavari.com with the subject “PDPA request.”

Cookies

[TO BE COMPLETED — cookie banner decision] We use a small number of first-party cookies for cart state. Third-party cookies (analytics) are loaded only after consent if applicable.

Contact

Data Protection Officer · hello@houseofvibhavari.com
Singapore.