Privacy Policy

Last updated: September 8, 2026

Museum Gift Shop (“Museum Gift Shop”, “we”, “us”, or “our”) operates this website and online store, including all related content, features, products, services, and tools (collectively, the “Services”).

We respect your privacy and are committed to protecting your personal information in accordance with applicable laws, including the Personal Data Protection Act 2012 (“PDPA”) of Singapore.

This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you visit our website, use our Services, place an order, make a purchase, or otherwise communicate with us.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.


Personal Information We Collect

When you visit or use our Services, we may collect information that identifies you or can reasonably be associated with you.

Information You Provide to Us

When you place or attempt to place an order, create an account, contact us, or otherwise interact with our Services, we may collect:

  • Your name
  • Billing and shipping address
  • Email address
  • Telephone number
  • Order and transaction details, including products purchased, returned, exchanged, or cancelled
  • Payment and billing information necessary to process your transaction
  • Account information, where applicable
  • Information you provide when communicating with us, such as through customer service enquiries
  • Any other information you voluntarily provide to us

Payment information may be processed by Shopify and our payment service providers. We do not generally retain complete payment card information ourselves.

Information Collected Automatically

When you visit our website, certain information may be collected automatically from your device, browser, or network connection, including:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Time zone
  • Referring website or source
  • Pages and products you view
  • How you interact with our website
  • Other technical and usage information

We may collect this information using cookies, pixels, tags, log files, and similar technologies.

Cookies

Cookies are small data files stored on your device that help us operate and improve our website, remember your preferences, understand how visitors use our Services, and provide relevant functionality.

Some cookies are necessary for the operation of our website, including functions such as shopping carts, checkout, security, and account functionality. Other cookies may be used for analytics, personalisation, or marketing purposes, depending on the services and settings we use.

You may be able to manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services.


How We Use Your Personal Information

We may collect, use, and disclose your personal information for purposes that are reasonable and appropriate in the circumstances, including to:

  • Process and fulfil your orders and transactions
  • Process payments and arrange shipping and delivery
  • Send order confirmations, shipping updates, and other transaction-related communications
  • Provide customer support and respond to enquiries
  • Manage customer accounts, where applicable
  • Process returns, exchanges, refunds, and other transactions
  • Maintain and improve our website, products, and Services
  • Understand how customers use our website and improve the shopping experience
  • Detect, investigate, and prevent fraud, security incidents, and other potentially harmful or unlawful activity
  • Protect the security and integrity of our Services
  • Send marketing and promotional communications where permitted and, where required, with your consent
  • Comply with applicable laws, regulations, legal processes, or requests from government or regulatory authorities
  • Establish, exercise, or defend our legal rights

Where we rely on your consent to collect, use, or disclose your personal information, you may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.


Sharing Your Personal Information

We do not sell your personal information.

We may disclose your personal information to third parties where reasonably necessary to operate our business, provide our Services, fulfil the purposes described in this Privacy Policy, or where otherwise permitted or required by law.

These third parties may include:

Shopify

Our online store is powered by Shopify. Shopify provides the technology and infrastructure that enables us to operate our online store, process transactions, manage orders, and provide related Services.

Information submitted through our website may be processed by Shopify and its service providers. Shopify may process personal information in countries outside Singapore in accordance with its own privacy practices and applicable agreements.

You can learn more about how Shopify handles personal information in its Shopify Privacy Policy.

Payment, Shipping, and Service Providers

We may share relevant personal information with third-party service providers who help us operate our business, including providers involved in:

  • Payment processing
  • Shipping and delivery
  • Order fulfilment
  • Website hosting and technology
  • Data storage
  • Analytics
  • Customer support
  • Marketing and communications
  • Security and fraud prevention

These providers may only receive information reasonably necessary to provide the relevant services.

Legal and Regulatory Requirements

We may disclose personal information where reasonably necessary to comply with applicable laws, regulations, legal proceedings, court orders, or lawful requests from government or regulatory authorities, or to protect our rights, property, Services, customers, or other persons.

Business Transactions

If Museum Gift Shop is involved in a merger, acquisition, restructuring, sale of assets, bankruptcy, or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable privacy laws.


Marketing and Communications

Where permitted by law, we may use your personal information to send you information about products, events, promotions, or other Museum Gift Shop activities that may be relevant to you.

You may unsubscribe from promotional email communications at any time by using the unsubscribe link provided in our emails.

Even if you opt out of promotional communications, we may continue to send you non-promotional communications relating to your orders, transactions, account, or other Services.


Analytics and Personalisation

We may use analytics and similar technologies to understand how visitors use our website, measure website performance, and improve our Services.

Where we use third-party analytics, advertising, or personalisation services, those providers may collect information about your interaction with our website in accordance with their own privacy policies and applicable settings.

The specific technologies and services we use may change from time to time as we update and improve our Services.


International Transfers

Some of our service providers, including Shopify and other technology, payment, analytics, shipping, or hosting providers, may process or store personal information outside Singapore.

Where we transfer personal information outside Singapore, we will take steps required under applicable law to ensure that the recipient provides a standard of protection for the personal information transferred that is comparable to the protection required under Singapore's PDPA.


Data Security

We take reasonable steps to protect personal information in our possession or under our control from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.

However, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee the absolute security of information transmitted to or through our Services.


Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing our Services, processing transactions, complying with legal, regulatory, tax, or accounting requirements, resolving disputes, preventing fraud, and enforcing our agreements and policies.

When personal information is no longer reasonably required for these purposes, we will take reasonable steps to delete, destroy, or anonymise it in accordance with applicable law.


Your Rights and Choices

Depending on the circumstances and applicable law, you may have rights in relation to your personal information, including the right to:

  • Request access to personal information that we hold about you
  • Request information about how your personal information has been used or disclosed, where applicable
  • Request correction of inaccurate or incomplete personal information
  • Withdraw consent to our collection, use, or disclosure of your personal information, subject to applicable legal or contractual restrictions
  • Unsubscribe from promotional communications
  • Exercise any other rights available to you under applicable law

If you wish to exercise your rights, please contact us using the details provided in the Contact Us section below.

We may need to verify your identity before processing certain requests. This is to protect your personal information and ensure that we do not disclose information to an unauthorised person.

We will respond to requests within the timeframes required by applicable law. Certain requests may be subject to exceptions or limitations under the PDPA or other applicable laws.


Children's Data

Our Services are not intended for children, and we do not knowingly collect personal information from children where doing so is prohibited by applicable law.

If you believe that a child has provided us with personal information, please contact us using the details below. Where required by applicable law, we will take reasonable steps to delete the information.


Third-Party Websites and Services

Our Services may contain links to websites, applications, or services operated by third parties.

If you follow a link to a third-party website, you should review that third party's privacy policy and terms of use. We are not responsible for the privacy, security, content, or practices of third-party websites or services that we do not control.


Complaints

If you have concerns or complaints about how we collect, use, disclose, or protect your personal information, please contact us using the details below.

We will review and respond to your concerns in accordance with our obligations under applicable law.

You may also have the right to lodge a complaint with the relevant data protection authority, including the Personal Data Protection Commission of Singapore (PDPC).


Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, Services, technology, or legal and regulatory requirements.

When we make changes, we will post the updated Privacy Policy on this page and update the “Last updated” date above.


Contact Us

If you have questions about this Privacy Policy, wish to request access to or correction of your personal information, withdraw consent, or raise a privacy-related concern, please contact us at:

Museum Gift Shop
Email: sales@museum-giftshop.com