Privacy

What we collect

When you sign in, we receive from Telegram:

• Your Telegram ID
• Your display name and username, if you have one

When you register or check out, you give us:

• Your full name, mobile number and email
• Your delivery address
• Your birthday, if you choose to add it

Payment screenshots you upload are held by Telegram and referenced by us. We never see or store card or bank credentials.

Why we collect it

To take payment, source your items, deliver them, and message you about the order. Your birthday is used only for the birthday voucher.

We also record which pages you visit while signed in, so we can see where the shop is confusing and fix it.

Who we share it with

Your delivery address goes to the courier handling your parcel. Nothing else is shared, sold or rented, and we do not run advertising that profiles you.

Our infrastructure providers process data on our behalf: Supabase hosts the database, Railway runs the servers, and Telegram carries messages and stored images.

Cookies and analytics

On the web we set one session cookie so you stay signed in. It is required; without it you cannot check out.

We also use Google Analytics on the website to understand how people find us. It sets its own cookies and records pages viewed, roughly where in the world you are, and what kind of device you used. Inside the Telegram mini-app neither the session cookie nor analytics applies.

How long we keep it

Order records are kept for seven years, which is what Singapore tax law requires of us. Sign-in sessions expire after 30 days. Everything else is kept until you ask us to remove it.

Your rights under the PDPA

You can ask what we hold about you, ask us to correct it, or ask us to delete it. We will action it within 30 days, or tell you why we cannot: an order we are legally required to keep a record of, for instance.

Message @aceapparel_sg on Telegram to make a request.