Privacy Policy
- Data Controller and Overview
This Privacy Policy governs the processing of personal data by www.feedandtrot.com (operating as Feedandtrot), acting as the primary Data Controller. We are committed to processing personal information transparently, lawfully, and securely in accordance with applicable data protection laws, including the Singapore Personal Data Protection Act 2012 (PDPA) and the Regulation (EU) 2016/679 (European Union General Data Protection Regulation / EU GDPR).
For any inquiries regarding this policy or the processing of your personal information, please contact our Data Protection Officer at:
Brand Name: Feedandtrot
Website: www.feedandtrot.com
Address: 30 Shaw Road, #01-06, Roche Building, Singapore 367957
Telephone: +65 6742 2912
Email: dispatch@feedandtrot.com
- Legal Grounds and Categories of Personal Data Collected
We collect and process personal data strictly necessary for the performance of sales contracts, compliance with legal obligations, and the fulfillment of legitimate commercial operational interest.
The categories of data collected include:
Identity and Contact Information: Full name, billing address, dispatch delivery address, contact telephone number, and email address.
Transaction and Order Details: Records of purchased physical pet goods, order references, delivery histories, and customer service correspondence.
Technical and Usage Data: IP address, browser type, network identifiers, and session interaction records collected through essential site functionalities.
- Payment Processing and Third-Party Disclosure
We do not directly store or process sensitive cardholder account details on our servers.
All financial transactions, credit/debit card processing, and checkout fraud prevention mechanisms are managed through our authorized primary payment service provider, Stripe. When an order is placed on www.feedandtrot.com, payment credentials are provided directly to Stripe via encrypted protocols.
Stripe processes card details, carries out payment verification, and performs fraud monitoring in accordance with strict global security standards (PCI-DSS) and their respective privacy documentation.
We share customer data only with trusted categories of third-party service providers strictly necessary to complete your transactions and maintain commercial operations:
Logistics and Dispatch Partners: Express postal and courier services for order fulfillment and physical delivery.
Technical Infrastructure Providers: Website hosting, database management, and operational IT infrastructure providers.
Payment Service Providers: Payment handling and fraud prevention services managed via Stripe.
- Data Retention Periods
In compliance with European and Singaporean legal requirements, personal data is retained only for as long as necessary to fulfill the specific purposes for which it was collected, including satisfying statutory accounting, tax, and legal liability requirements.
Specific data retention thresholds are defined as follows:
Transaction and Invoicing Records: Retained for up to seven (7) years following completion of an order to comply with Singapore corporate tax regulations (Inland Revenue Authority of Singapore) and European commercial accounting requirements.
Customer Inquiry and Support Records: Retained for up to twenty-four (24) months from the date of final resolution to manage customer service inquiries and order inquiries.
Technical Logs and Essential Session Data: Retained for a maximum of ninety (90) days, after which data is purged or anonymized.
Upon the expiration of applicable retention periods, personal data is permanently deleted, overwritten, or rendered irreversibly anonymized.
- International Data Transfers
As Feedandtrot operates from Singapore and serves customers within Europe, personal data provided during checkout or technical interaction may be transferred across international borders.
All cross-border data transfers from the European Economic Area (EEA) or Singapore to international processing locations are performed under appropriate transfer mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent regulatory safeguards under the Singapore PDPA, ensuring an adequate level of data protection.
- Data Security Safeguards
We implement administrative, technical, and physical safeguards appropriate to the risk involved to preserve the confidentiality, integrity, and availability of personal information. Communications between your browser and www.feedandtrot.com utilize Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption protocols.
While continuous administrative and technical measures are taken to defend data assets against unauthorized access, loss, or alteration, no electronic transmission or digital storage method can be considered completely immune to security incidents; operational controls are maintained to mitigate risks proportionally.
- Rights of Data Subjects (EU GDPR and Singapore PDPA)
Depending on your legal jurisdiction (including European Union member states and Singapore), you possess statutory rights regarding your personal information held by www.feedandtrot.com:
Right of Access: You may request confirmation as to whether your personal data is being processed and obtain a copy of the personal information held.
Right to Rectification: You may request correction of incomplete or inaccurate personal details.
Right to Erasure (“Right to be Forgotten”): You may request deletion of personal data where processing is no longer required by law or necessary for operational contract performance.
Right to Restriction of Processing: You may request the suspension of data processing under specific statutory criteria.
Right to Data Portability: You may request the transmission of structured transaction data to another controller where technically feasible.
Right to Object: You may object to data processing activities grounded strictly in legitimate commercial interests.
To exercise any of these rights, please contact dispatch@feedandtrot.com. Requests will be verified and addressed within the mandatory statutory timeframe (within thirty (30) calendar days under GDPR or thirty (30) days under the Singapore PDPA).
- Direct Marketing and Communications
We send operational order notifications, shipping updates, and administrative receipts essential to your purchase. Promotional newsletters or optional direct marketing communications are distributed only where explicit, opt-in consent has been provided during site interaction. You may revoke consent for non-essential marketing emails at any time by clicking the unsubscribe link contained within such emails or by contacting us directly. - Updates to This Privacy Policy
We reserve the right to revise this Privacy Policy periodically to reflect operational changes, contractual adjustments, or legal/regulatory updates. Continued use of www.feedandtrot.com following updates indicates acknowledgement of the revised policy terms.