Privacy Policy

At Chapalangs, we are committed to protecting your privacy and complying with Singapore’s Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with our website or services.

Overview

1. Who We Are

Chapalangs is a Singapore-based wellness brand focused on delivering high-quality supplements. Our website address is: https://chapalangs.com.

2. Information We Collect

We collect personal data when you:

  • Create an account
  • Make a purchase
  • Submit a contact or enquiry form
  • Leave comments or product reviews
  • Subscribe to our mailing list or marketing campaigns
  • Upload media
  • Use cookies or engage with embedded third-party content

Personal data collected may include:

  • Name, email, phone number
  • Billing and shipping address
  • Payment information (processed securely via third-party gateways)
  • Device/browser data, IP address, and site usage patterns
  • Comments, reviews, or uploaded media
  • Login credentials (hashed and stored securely)

3. Comments & Gravatar

When visitors leave comments, we collect the data in the comment form, along with the visitor’s IP address and browser user agent to aid spam detection.

An anonymised hash of your email may be sent to the Gravatar service (if you use it) to retrieve your profile image. Their privacy policy is available here: https://automattic.com/privacy/. Upon comment approval, your profile photo is publicly visible next to your comment.

4. Media Uploads

If you upload images to our site, we recommend removing EXIF GPS location data. Visitors may download and extract such data from publicly available images.

5. Cookies

We use cookies to:

  • Save your preferences
  • Simplify repeat visits
  • Enhance site performance and security

Examples:

  • If you comment, cookies may store your name, email, and website (for 1 year).
  • Login cookies last for 2 days (or 2 weeks with “Remember Me” enabled).
  • Temporary cookies test browser compatibility (discarded upon browser close).
  • Article editing sets a 1-day cookie (no personal data stored).

You may adjust cookie settings in your browser to limit or block cookies, but this may affect site functionality.

6. Embedded Content & Third-Party Tools

Articles or product pages may include embedded content (e.g. YouTube, Instagram, payment processors). Embedded content behaves as if you visited the third-party site directly.

Such platforms may:

  • Collect personal data
  • Use cookies
  • Embed tracking
  • Monitor interactions

Please refer to each third party’s privacy policy for details.

7. Who We Share Your Data With

We do not sell your data. However, we may share your personal data with:

  • Payment processors (e.g., Stripe, PayPal)
  • Shipping/delivery providers
  • Email marketing platforms (with opt-in consent)
  • IT or customer support providers under confidentiality agreements
  • Legal/regulatory authorities when required by law

For password resets, your IP address may be included in the notification email.

8. How Long We Retain Your Data

  • Comments and metadata: retained indefinitely for moderation and reply threads
  • Registered users: profile information is stored securely and editable at any time (except usernames)
  • Transaction records: retained for 7 years for accounting and legal compliance under Singapore law

9. Your Rights

Under PDPA, you may:

  • Request access to your personal data
  • Correct inaccurate or incomplete data
  • Withdraw consent for marketing or specific data use
  • Request deletion of data, subject to exceptions (e.g., legal or transactional records)

To exercise your rights, please contact us at [Insert Contact Email]. We may need to verify your identity before processing your request.

10. Data Security

We implement appropriate security measures to safeguard your data, including:

  • HTTPS encryption
  • Regular software updates
  • Secure payment processing via trusted gateways
  • Access controls and monitoring

However, no transmission over the Internet is fully secure. You share data at your own risk.

11. International Transfers

If your data is transferred or processed outside of Singapore (e.g., for third-party services or hosting), we ensure such recipients provide a standard of protection comparable to Singapore’s PDPA.

12. Contact Us

For questions, data access requests, or privacy concerns:
📧 [send email here]