1. IMPRINT & DATA CONTROLLER IDENTIFICATION

This Privacy Policy governs the processing of personal data collected through the website www.swipeanddust.com (hereinafter referred to as the “Website”).

Brand & Data Controller: swipeanddust
Website: https://www.swipeanddust.com
Contact Email: campaign@swipeanddust.com
Target Audience & Jurisdiction: Operations are headquartered in Singapore, serving customers located within the European Union (EU), the European Economic Area (EEA), the United Kingdom (UK), and internationally.

For the purposes of the General Data Protection Regulation (GDPR) (EU) 2016/679, the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Singapore Personal Data Protection Act 2012 (PDPA), swipeanddust operates as the Data Controller responsible for the collection, usage, processing, and protection of your personal information.

—

2. LEGAL BASIS AND OBJECTIVES OF DATA PROCESSING

swipeanddust processes personal data in strict compliance with applicable data protection laws. Processing activities are conducted based on the following legal grounds:

1. Performance of a Contract (Art. 6(1)(b) GDPR): To fulfill online transactions, process purchases, arrange delivery of household utility products, handle customer service queries, and manage order-related communications.
2. Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To comply with statutory tax laws, accounting regulations, financial reporting standards, and mandatory statutory record-keeping rules under Singaporean and European law.
3. Legitimate Interests (Art. 6(1)(f) GDPR): To detect, prevent, and mitigate fraud, preserve technical system stability, protect legal rights, and ensure overall operational integrity.
4. Consent (Art. 6(1)(a) GDPR): Where explicit consent has been granted for specific non-essential processing, such as direct marketing communications or performance analytical cookies. Consent may be revoked at any time.

—

3. CATEGORIES OF PERSONAL DATA COLLECTED

Depending on your interaction with the Website, swipeanddust collects and processes the following categories of information:

Identity & Contact Information: First name, last name, primary email address, postal shipping address, billing address, and contact telephone number.
Transaction & Order Records: Details of products ordered, order history, transaction timestamps, delivery status, and correspondence related to customer inquiries.
Technical & Usage Data: IP address, browser type and version, language preferences, operating system, network connection type, and log data collected automatically during site visits.
Payment-Related Metadata: Data required to confirm order processing status (handled directly by our payment processor, as detailed in Section 4).

—

4. PAYMENT PROCESSING AND FINANCIAL DATA

Order transactions executed on www.swipeanddust.com are handled securely through third-party payment integration infrastructure.

Payment Processor: Payment processing functionality on this site is provided by Stripe.
Data Transmission: When an order is placed, your payment credentials and transaction details are transmitted directly to Stripe via end-to-end encrypted protocols.
Storage Limitations: swipeanddust does not collect, store, view, or process raw payment card numbers, card verification values (CVV/CVC), or bank account security credentials on internal systems. Payment processing, fraud evaluation, and authentication are performed directly by Stripe under their privacy policies and security frameworks.

—

5. INTERNATIONAL DATA TRANSFERS

As swipeanddust operates out of Singapore and serves customers in the European Union, the EEA, and the United Kingdom, personal data collected from individuals in Europe will be transferred to and processed in locations outside the European Economic Area.

To ensure an adequate level of protection for transferred data, swipeanddust relies on standard legal mechanisms, including:
Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46(2)(c) GDPR.
Equivalent transferring mechanisms under the UK GDPR and the Singapore Personal Data Protection Act.
Contractual safeguards implemented by international infrastructure service providers (including cloud hosting and payment processing providers).

—

6. DATA RETENTION PERIODS

swipeanddust retains personal data only for as long as necessary to fulfill the operational purposes for which it was collected, or to satisfy applicable legal, statutory, tax, or accounting requirements.

Order and Transaction Records: Retained for up to 7 (seven) years following completion of the transaction to comply with statutory accounting and tax obligations under Singapore legal standards and international trade regulations.
Customer Support Records: Retained for up to 2 (two) years from the resolution of the inquiry to maintain service continuity and legal defense records.
Account and Profile Information: Retained for the duration of the active customer relation, or until account deletion is requested, subject to overriding statutory record-keeping duties.
Technical Server Logs: Retained for a maximum period of 6 (six) months for security monitoring and system performance audit purposes, after which data is purged or fully anonymised.

Upon the expiration of applicable retention periods, personal data is securely destroyed, deleted, or permanently anonymised in compliance with European and local privacy laws.

—

7. DATA SUBJECT RIGHTS

Under European data protection laws (GDPR/UK GDPR) and Singaporean PDPA regulations, individuals residing in covered jurisdictions possess specific statutory rights regarding their personal data:

Right of Access (Art. 15 GDPR): The right to request confirmation of whether personal data is being processed, and to receive a copy of such data.
Right to Rectification (Art. 16 GDPR): The right to request the correction of inaccurate or incomplete personal information.
Right to Erasure / “Right to be Forgotten” (Art. 17 GDPR): The right to request deletion of personal data when processing is no longer necessary, or where consent has been withdrawn, provided no legal obligation requires retention.
Right to Restriction of Processing (Art. 18 GDPR): The right to restrict processing under specific legal conditions.
Right to Data Portability (Art. 20 GDPR): The right to receive personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21 GDPR): The right to object to processing based on legitimate interests or direct marketing activities.
Right to Withdraw Consent: Where processing relies on consent, you maintain the right to withdraw that consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the Data Controller directly via email at campaign@swipeanddust.com.

European residents also maintain the legal right to lodge a complaint with their local supervisory data protection authority if they consider that processing of their personal data infringes applicable laws.

—

8. INFORMATION SECURITY MEASURES

swipeanddust implements technical, administrative, and organizational measures engineered to protect personal data against unauthorized access, loss, alteration, or disclosure. Communications with www.swipeanddust.com utilize Transport Layer Security (TLS/SSL) encryption. Access to stored administrative data is restricted strictly to authorized operational personnel on a need-to-know basis.

—

9. THIRD-PARTY DATA RECIPIENTS

In order to conduct business and deliver ordered items, swipeanddust shares necessary data strictly with defined categories of third-party processors:

Payment Service Providers: Stripe, for transaction authentication and processing.
Logistics and Shipping Partners: Postal and courier delivery networks tasked with carrying out physical order delivery.
Technical Infrastructure Providers: Secure cloud hosting, domain administration, and network security providers.

All third-party service providers are contractually required to maintain data confidentiality, implement appropriate security standards, and process personal data strictly in accordance with swipeanddust’s explicit instructions.

—

10. COOKIES AND TRACKING TECHNOLOGIES

The Website uses standard cookies and browser storage technologies to maintain essential site functionality, store user navigation choices, and facilitate checkout operations. Non-essential cookies used for audience measurements or targeted optimization operate only upon explicit opt-in consent gathered via the Website cookie management banner. Users may modify browser settings at any time to refuse or disable cookies, though certain interactive website features may be impacted.

—

11. AMENDMENTS TO THIS POLICY

swipeanddust reserves the right to update or modify this Privacy Policy at any time to reflect operational changes, contractual adjustments, or regulatory updates. Any updates will be published directly on this page with a revised “Last Updated” date.

—

12. CONTACT INFORMATION

For questions, requests regarding your personal data rights, or matters relating to this policy, please direct inquiries to:

swipeanddust
Email: campaign@swipeanddust.com
Website: www.swipeanddust.com