👑 Confectionery Connoisseurs Since 1973 | Curated Collections Now Available
  • Follow us :

Privacy Policy

Our Privacy Policy

Candy Empire Pte Ltd

Candy Empire Pte Ltd (“we”, “us”, “our”) operates the e-commerce platform available at candyempire.com (“Site”). This Privacy Policy explains how we collect, use, disclose, and protect your Personal Data when you make purchases through our Site.

By using our Site, you agree to the terms of this Privacy Policy.


1. Personal Data We Collect

We only collect Personal Data that is required to process your e-commerce transaction. When you place an order via our Site, we collect:

  • Name
  • Email address
  • Phone number
  • Billing address
  • Order details (items purchased, date, transaction information)

We do not collect:

  • Delivery addresses (all orders are store pick-up)
  • NRIC/FIN
  • Date of birth
  • Login credentials
  • Wishlist or cart history
  • Marketing subscriptions


2. Payment Information

We do not collect or store your credit/debit card details or PayNow information.

All payments are securely processed by our third-party payment provider, HitPay. When you enter your payment information, you are interacting directly with HitPay, and their privacy and security practices apply.


3. How We Use Your Personal Data

We use the Personal Data you provide solely for the following purposes:

  1. Processing and verifying your order
  2. Contacting you regarding your order or pick-up arrangement
  3. Maintaining transaction records for operational and audit purposes
  4. Meeting legal or regulatory requirements under Singapore law

 

We do not use your data for marketing, analytics, advertising, profiling, or automated decision-making.

 

4. Cookies and Tracking

Our Site may use essential cookies required for basic e-commerce functions such as processing forms or maintaining checkout integrity.

We do not use:

  • Analytics tracking (e.g., Google Analytics)
  • Advertising cookies
  • Behavioral tracking tools (e.g., Meta Pixel)


You may disable cookies through your browser, but certain core functions may not work correctly.

 

5. Disclosure of Personal Data

We may disclose your data only in the following circumstances:

a. Service Providers

To complete your transaction, necessary information may be shared with:

  • HitPay (for payment processing)

Partners are required to handle Personal Data in accordance with applicable data protection laws.

b. Legal Obligations

We may disclose Personal Data if required by law, regulation, or lawful authority.

We do not sell, rent, or exchange customer data with third parties.


6. Data Retention

Candy Empire Pte Ltd does not retain customer data beyond what is required for operational and statutory needs.

  • Transaction records are retained only for accounting, audit, and compliance requirements.
  • We do not maintain user accounts or long-term customer profiles.
  • Once data is no longer required for legal or transactional purposes, it will be
    securely deleted.

 

7. Customer Rights Under the PDPA

Since we keep only essential transaction records, the following rights apply within operational limits:

  • Access requests – You may request a copy of your transaction record.
  • Correction requests – You may request correction of inaccurate billing or contact
    details.
  • Deletion requests – Transaction data required by law cannot be deleted, but we
    will remove any optional or non-essential data when feasible.


We do not maintain marketing lists or customer accounts, so
opt-out and account deletion do not apply.

To exercise these rights, contact us at enquiries@candyempire.com.


8. Children’s Privacy

We do not knowingly collect Personal Data from children.


9. Data Security

We take reasonable measures to protect your Personal Data against:

  • Unauthorised
    access
  • Disclosure
  • Modification
  • Loss
    or misuse

Payment processing is managed securely by HitPay, which complies with industry security standards.

No method of electronic transmission is entirely secure, but we strive to protect your information in accordance with PDPA requirements.


10. Cross-Border Data Transfers

We do not intentionally transfer Personal Data outside Singapore. However, certain service providers (e.g., hosting partners) may store data on servers located overseas. These providers are required to comply with PDPA-equivalent data protection safeguards.


11. Changes to This Policy

We may update this Privacy Policy from time to time.

 

12. Contact Us

For questions about this Privacy Policy or how your data is
handled, please contact:

Candy Empire Pte Ltd
Email: enquiries@candyempire.com 

 

 

 

  • Follow us :