Privacy Policy

1. Introduction

This Privacy Policy outlines how Le Petit Depot Pte. Ltd. ("Le Petit Depot", "we", "us", or "our") collects, uses, discloses, and protects your personal data in compliance with the Singapore Personal Data Protection Act 2012 (PDPA), as amended, and other relevant regulations. We are committed to safeguarding your personal data and ensuring transparency in our data practices.

2. Scope

This Privacy Policy applies to all personal data collected, used, or disclosed by Le Petit Depot through our e-commerce website (www.lepetitdepot.com), mobile applications, or other related services. It does not apply to data collected by third-party websites or services linked to our platform, which have their own privacy policies.

3. Definition of Personal Data

Under the PDPA, personal data refers to any data, whether true or not, about an individual who can be identified from that data or from that data in combination with other information to which we have or are likely to have access. Examples include your name, address, email address, phone number, and other identifiers.

4. Collection of Personal Data

We collect personal data when you interact with our services, including but not limited to:

  • Registration: When you create an account on our website, we collect your first name, last name, email address, phone number, and delivery address.
  • Purchases: When you place an order, we collect payment information (e.g., credit card details processed via secure payment gateways) and billing/shipping details.
  • Browsing: We may collect data about your interactions with our website, such as IP address, browser type, and pages visited, through cookies and similar technologies (see Section 11).
  • Communication: When you contact us via email, phone, or forms, we collect the information you provide, such as your name and query details.
  • Voluntary Submission: When you participate in surveys, promotions, or provide feedback.

We only collect personal data with your knowledge and consent, unless an exception under the PDPA applies (e.g., for legitimate interests or contractual necessity).

5. Purposes of Collection, Use, and Disclosure

We collect, use, and disclose your personal data for the following purposes, subject to your consent or as permitted by law:

a. To process and fulfill your orders, including delivery of goods and services.

b. To provide customer support and respond to your inquiries or complaints.

c. To send you notices, updates, promotions, and marketing materials related to our goods and services or those of selected third-party partners, provided you have not opted out (see Section 10).

d. To conduct research, surveys, and analysis to improve our products, services, and customer experience.

e. To comply with legal obligations, such as tax or regulatory requirements.

f. To prevent fraud, enhance security, and protect our platform and users.

g. For other purposes for which we have obtained your consent or as permitted under the PDPA (e.g., deemed consent by contractual necessity).

We will notify you of the specific purposes for which your personal data is collected at or before the time of collection, in accordance with the Notification Obligation.

6. Consent

We will obtain your clear and unambiguous consent before collecting, using, or disclosing your personal data, unless an exception under the PDPA applies. Consent may be obtained through:

  • Explicit agreement (e.g., ticking a consent box during registration).
  • Deemed consent (e.g., when you voluntarily provide personal data for a transaction, and it is reasonable to assume consent).
  • Notification with an opportunity to opt out (e.g., for certain business improvement purposes).

You may withdraw your consent at any time by:

  • Deleting your account via “My Account > Personal Information” on our website.
  • Unsubscribing from marketing communications using the “Unsubscribe” link in emails or SMS.

Withdrawing consent may affect our ability to provide certain services (e.g., order fulfillment). We will inform you of the consequences of withdrawal where applicable.

7. Disclosure of Personal Data

We may disclose your personal data to:

  • Service Providers: Third-party vendors (e.g., payment processors, logistics providers) who process data on our behalf, subject to contractual obligations to comply with PDPA standards.
  • Business Partners: Selected partners for marketing purposes, only with your consent or where you have not opted out.
  • Legal Authorities: When required by law, court order, or to comply with regulatory obligations.
  • Successors: In the event of a merger, acquisition, or sale of assets, subject to equivalent data protection standards.

We will ensure that any disclosure is limited to what is necessary and complies with the Purpose Limitation Obligation.

8. Transfer of Personal Data Overseas

If we transfer your personal data outside Singapore (e.g., to cloud service providers), we will ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to the PDPA, in accordance with the Transfer Limitation Obligation. This may include:

  • Entering into data transfer agreements.
  • Verifying the recipient’s compliance with equivalent data protection laws.
  • Obtaining your consent for the transfer, subject to prescribed conditions.

9. Data Protection and Security

We implement reasonable technical, physical, and organizational measures to protect your personal data from unauthorized access, use, disclosure, or loss, in compliance with the Protection Obligation. These measures include:

  • Encryption of sensitive data (e.g., payment information).
  • Secure servers and firewalls to protect our systems.
  • Access controls to limit data access to authorized personnel only.
  • Regular security audits and updates.

Despite our efforts, no system is completely secure. In the event of a notifiable data breach (i.e., one likely to cause significant harm or affecting 500 or more individuals), we will:

  • Notify the Personal Data Protection Commission (PDPC) within 3 calendar days of assessing the breach.
  • Notify affected individuals as soon as practicable, in accordance with the Data Breach Notification Obligation.

10. Do Not Call (DNC) Registry

We comply with the PDPA’s Do Not Call (DNC) Registry provisions. If your Singapore telephone number is registered with the DNC Registry, we will not send you marketing messages via voice calls, SMS, or fax unless:

  • You have provided clear and unambiguous consent.
  • We have an ongoing relationship with you, and you have not opted out.

You can opt out of marketing communications at any time by:

  • Clicking the “Unsubscribe” link in our emails or SMS.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze usage, and deliver personalized content. Cookies may collect personal data, such as your IP address or browsing behavior.

You can manage cookies by:

  • Adjusting your browser settings to block or limit cookies.
  • Installing browser add-ons to block unnecessary cookies.
  • Opting out of interest-based advertising via our cookie consent banner.

For more details, please refer to our Cookie Policy on our website.

12. Access and Correction Rights

Under the PDPA, you have the right to:

  • Access: Request access to your personal data in our possession or control, including information about how it has been used or disclosed within the past year.
  • Correction: Request correction of any errors or omissions in your personal data.

To exercise these rights, please contact us at customerservice@phoonhuat.com . We will respond as soon as practicable, subject to reasonable fees for processing access requests. We may refuse requests under certain circumstances, such as when the request is malicious or would reveal another individual’s personal data.

13. Retention of Personal Data

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal or business requirements, in accordance with the Retention Limitation Obligation. Once the data is no longer needed, we will securely delete or anonymize it.

14. Accountability and Transparency

We are committed to being accountable for our data practices, as required by the Accountability Obligation. We have:

  • Appointed a Data Protection Officer (DPO) to oversee PDPA compliance.
  • Made this Privacy Policy and our data protection practices publicly available.
  • Established processes to handle complaints and inquiries.

15. Complaints and Inquiries

If you have any questions, concerns, or complaints about our handling of your personal data, please contact us at:

Email: customerservice@phoonhuat.com,

Address: Le Petit Depot Pte. Ltd., 231A Pandan Loop, Singapore 128419, Singapore

We will investigate and respond to complaints promptly. You may also lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe your personal data has been mishandled.

16. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the “Last Updated” date. We encourage you to review this policy periodically.

17. Governing Law

This Privacy Policy is governed by the laws of Singapore. Any disputes arising from this policy will be subject to the jurisdiction of the Singapore courts.

Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at customerservice@phoonhuat.com,