Privacy notice

We only collect what we need to send your order and run the shop, and we never sell your data. This notice explains what Pat That Phat Cat collects, why, who helps us process it and how long we keep it, in line with Singapore's Personal Data Protection Act (PDPA).

Who is responsible for your data?

Pat That Phat Cat, a small online shop in Singapore. Our data protection contact is [email protected]. Write to that address for any question or request about your personal data.

What do we collect and why?

• Orders: at checkout we collect your name, email address and delivery address. We use them to process your payment, pack and post your order, send your receipt and order emails (a short thank-you, and an "on its way" email with your tracking number; no ads), and help if something goes wrong.
• Payments: your card details go straight to Stripe. We never see or store your full card number.
• Meow Mail: if you sign up for our newsletter, we keep your email address to send you cat updates, new drops, booth dates and your discount code. We only do this with your consent.
• Visits: we keep anonymous visit counts, such as which pages are viewed, which site a visitor came from, their country and whether it was a phone or a computer, so we know what people like. No cookies are used for this and no IP addresses are stored.
• Doodle likes: a like on the doodle wall is stored with a scrambled daily code instead of your name or your actual IP address, so each person can only like a doodle once a day.
• Messages: if you email us or send a DM, we keep the conversation so we can help you.

Who else handles your data?

We use a few trusted services to run the shop. Each only gets what it needs:

• Stripe: takes payments and checks for fraud.
• SingPost: gets the name and address on your parcel and, for overseas orders, the customs declaration. The post office in your country delivers it.
• MailerLite: sends Meow Mail.
• MailerSend: sends our order emails, the thank-you after you order and the "on its way" email when it ships. It's MailerLite's service for order emails. Buying from us never adds you to Meow Mail.
• Cloudflare: hosts the website and the shop database, and protects it from attacks.
• Google: runs our email inbox, and Google sign-in is used only by the shop owner to log in to the shop's dashboard. Our pages also load their fonts from Google Fonts, so Google sees your IP address and browser when a page loads. Customers never sign in with Google.

We never sell or rent your personal data to anyone.

Does your data leave Singapore?

Yes, some of it. Stripe, MailerLite, MailerSend, Cloudflare and Google may store or process data outside Singapore. We rely on their contractual protections so that your data is looked after to a similar standard as in Singapore.

How long do we keep it?

• Order records are kept as long as Singapore tax and accounting rules require.
• Your Meow Mail email address is kept until you unsubscribe.
• Messages are kept until they're no longer needed to help you.
• Visit counts are anonymous, so they can't be linked back to you.

Do we use cookies?

We don't use advertising or tracking cookies. Your cart, the doodles you liked and whether you've seen the Meow Mail pop-up are saved in your own browser on your device, and we can't see them.

At checkout, Stripe sets its own cookies to prevent fraud. Our host Cloudflare may set strictly necessary security cookies.

What are your rights?

• You can ask to access the personal data we hold about you, and how it has been used.
• You can ask us to correct it if it's wrong.
• You can ask us to delete it. We'll delete what we can, but we have to keep order records the law requires.
• You can withdraw your consent to Meow Mail at any time: use the unsubscribe link in any email, or write to us.

Send any request to our data protection contact at [email protected]. We reply within 2 working days and will tell you if we need anything to confirm it's you.

Will this notice change?

If how we handle data changes, we'll update this page and the last updated date shown on it.