1. Introduction

Welcome to www.canvasstorewell.com (operated by Canvasstorewell, located at 4 Changi South Lane, #01-01 Nan Wah Building, Singapore 486127). We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, purchase our plain canvas storage bins, or interact with us.

This policy complies with the Personal Data Protection Act (PDPA) of Singapore and the General Data Protection Regulation (GDPR) of the European Union.

  1. Data Controller

The data controller responsible for your personal data collected via www.canvasstorewell.com is Canvasstorewell. If you have any questions regarding this Privacy Policy or our data practices, you can contact us at:

Email: canvas@canvasstorewell.com

Phone: +65 8818 8582

Address: 4 Changi South Lane, #01-01 Nan Wah Building, Singapore 486127

  1. Information We Collect

We collect personal data to provide and improve our services. The types of data we may collect include:

Identity and Contact Data: Name, billing address, shipping address, email address, and telephone number.

Transaction Data: Details regarding payments to and from you, and details of products you have purchased from us.

Technical and Usage Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform on our website.

  1. How We Process and Share Your Data

We process your personal data based on the necessity to perform our contract with you (fulfilling your orders), compliance with legal obligations, and our legitimate business interests.

Payment Processing via Stripe
To process your payments securely, we share your payment information with our third-party payment processor, Stripe. Stripe collects, uses, and processes your information, including payment card details, in accordance with their respective privacy policies. We do not store full credit card details on our servers.

  1. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Transaction and Tax Records: In compliance with applicable legal and financial regulations in Singapore and Europe, transaction records, invoices, and associated customer data are retained for a period of 7 years following the completion of the relevant transaction.

Account and Marketing Data: Personal data processed for customer service inquiries or general browsing data is retained only for as long as necessary to fulfill operational needs or until you request deletion, subject to statutory retention limits.

  1. Your Legal Rights

Depending on your jurisdiction (including the EU under the GDPR and Singapore under the PDPA), you have specific rights regarding your personal data:

Right of Access: You have the right to request copies of your personal data.

Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.

Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us at canvas@canvasstorewell.com.

  1. International Data Transfers

As our operations are based in Singapore and we serve customers in Europe, your personal data may be transferred to, stored, and processed in a country outside your country of residence. We ensure that appropriate safeguards are implemented to protect your data in accordance with GDPR and PDPA standards.

  1. Data Security

We implement organizational, physical, and technical security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

  1. Changes to This Privacy Policy
    We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. The updated version will be indicated by an updated “Effective Date” at the top of this page.