Last Updated: October 1, 2025

Welcome to A Lil Thyme. This Privacy Policy outlines how we collect, use, and protect your personal data in compliance with the Personal Data Protection Act (PDPA) of Singapore. A Lil Thyme Pte. Ltd., a company registered in Singapore with UEN No. 202536455R, (hereinafter referred to as "A Lil Thyme," "we," "us," or "our") operates this store and website. By using our website and services, you consent to the collection, use, and disclosure of your personal data as described in this policy.

1. What Personal Data We Collect

We collect personal data that is reasonably necessary to provide our services and manage our business. The types of data we collect include:

• Identity & Contact Data: Name, billing and delivery addresses, email address, phone number, and we may collect government-issued identification data for verification purposes (e.g., ID number, photo of the physical card).
• Financial Data: Payment details (e.g., credit card information). Please note that this data is processed by our secure third-party payment gateways, and we do not store full credit card information on our servers.
• Transaction Data: Details about payments to and from you, and other details of products you have rented from us.
• Technical Data: Internet Protocol (IP) address, browser type, location, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website and services.

2. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

• Direct Interactions: You provide your personal data directly to us when you make an order, create an account, subscribe to our newsletter, or contact us.
• Automated Technologies or Interactions: As you interact with our website, we may automatically collect technical data about your equipment and browsing actions. We collect this data by using cookies and other similar technologies.
• From Other Third Parties: We may receive data from our partners or other trusted third parties, such as when you use third-party login integrations.

3. Purposes for Data Collection, Use, and Disclosure

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose. The primary purposes for collecting your data are:

• To process and fulfill your rental orders.
• To manage your account and our relationship with you.
• To notify you about changes to our services or terms.
• To improve our products, services, and website.
• For marketing and promotional communications (if you have given your explicit consent).

We may disclose your personal data to trusted third parties to perform services on our behalf, such as:

• Shopify: To process your order and power our website.
• Payment Processors: To process your payment securely.
• Delivery Partners: To deliver and collect your rental items.
• Laundry Partners: To perform collection, cleaning, and maintenance of rental items.
• IT Service Providers: For website hosting and maintenance.

These third parties are bound by strict confidentiality obligations and are only permitted to use your data for the purposes for which it was shared.

4. Cookies and Tracking Technologies

Cookies are small text files placed on your device to collect standard internet log information and visitor behavior information. When you visit our website, we may collect information from you automatically through cookies or similar technologies.

We use cookies for the following purposes:

• Essential Website Functionality: To make our website work correctly, for example, to keep you logged into your account or to remember items in your shopping cart.
• Analytics: To understand how you use our website, including which pages you visit and how long you stay on them, to help us improve our website's performance and design.
• Marketing & Advertising: To deliver relevant advertisements to you and track the effectiveness of our marketing campaigns.

You can set your browser not to accept cookies, and you can remove cookies from your browser. However, please note that some of our website features may not function as a result.

5. Relationship with Shopify

Our store is hosted on Shopify, which provides us with the e-commerce platform that allows us to sell our products and services to you. Your data is collected and processed by Shopify in order to provide and improve their services. As our service provider, Shopify processes personal information on our behalf.

Please be aware that some of your personal data may be transferred, stored, and processed outside of Singapore by Shopify and its service providers. We ensure that any transfer of your personal data outside of Singapore is to a jurisdiction with legally binding obligations on the recipient to protect the data to a standard comparable to the PDPA. For transfers to Shopify, we rely on their internal binding policies and their commitment to providing comparable protection.

For more information on how Shopify collects, uses, and protects your personal data, you can view their privacy policy here: https://www.shopify.com/legal/privacy/customers

6. Data Protection and Security

We have implemented reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We also limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know. Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security of your data.

7. Data Retention

We will retain your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by law (such as for tax and legal purposes, which is typically seven years). We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that the purpose for which the data was collected is no longer being served by its retention.

8. Your Rights

Under the PDPA, you have the right to:

• Withdraw Consent: You can withdraw your consent for the collection, use, or disclosure of your personal data at any time.
• Access & Correction: You have the right to request access to the personal data we hold about you and to request correction of any inaccurate data.
• Erasure: You can ask us to delete your personal data.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided below.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. We will post the revised policy on our website and update the "Last Updated" date at the top of the document.

10. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact our Data Protection Officer at:

A Lil Thyme
Email: info@alilthyme.com