This Privacy Policy describes how showerliva (“we”, “us”, or “our”) collects, uses, retains, and protects customer personal data when you visit or make a purchase from www.showerliva.com. This policy is structured to comply strictly with applicable data protection regulations, including the European Union General Data Protection Regulation (GDPR), UK GDPR, and the Singapore Personal Data Protection Act (PDPA).
1. Data Controller
showerliva operates as the sole Data Controller responsible for your personal data. All processing activities are conducted directly under our administration and governance.
2. Personal Data We Collect
We collect essential personal data necessary to process e-commerce orders, facilitate logistics, and provide customer support, including:
- Identity & Contact Data: Full name, billing address, dispatch address, email address, and telephone number.
- Transaction Data: Details regarding items purchased, order history, shipping references, and payment status.
- Technical & Device Data: IP address, browser type, time zone setting, and operational cookies strictly necessary for website navigation and checkout functionality.
3. Payment Processing Partner
Payment processing services for showerliva are provided by Stripe. In order to complete transactions, payment information is transmitted directly and securely to Stripe via encrypted protocols. We do not store, process, or retain complete credit card numbers or cardholder security codes on our internal servers. Transaction data is handled in strict accordance with Stripe’s privacy standards and PCI-DSS compliance requirements.
4. Legal Basis & Purpose of Processing
Under GDPR, we process personal data based on the following lawful grounds:
- Contractual Performance: Processing, fulfilling, and delivering orders placed on our website, as well as providing post-purchase support.
- Legal Obligation: Maintaining accounting, tax, and audit documentation mandated by Singapore and applicable European tax authorities.
- Legitimate Interests: Protecting our store against fraudulent transactions and ensuring overall website security.
5. International Data Transfers
Because our operations are headquartered in Singapore while serving customers in Europe, your personal data will be transferred to and processed in Singapore. We ensure that appropriate legal safeguards, standard contractual clauses, or security measures are implemented to protect your personal information to the standard required by European data protection laws.
6. Data Retention Period
We retain customer personal data only for as long as necessary to fulfill the purposes for which it was collected. Order details and transactional financial records are retained for a standard statutory period of up to 7 years in compliance with Singapore financial record-keeping laws and relevant European commercial directives. Upon expiration of the mandatory retention period, personal data is permanently deleted or anonymized.
7. Data Subject Rights (GDPR & PDPA)
Customers residing in European territories and Singapore possess statutory rights regarding their personal data, including:
- The right to access, correct, or request the erasure (right to be forgotten) of your personal data.
- The right to restrict or object to certain data processing activities.
- The right to request data portability.
- The right to lodge a complaint with a local Data Protection Authority (DPA) in your EU/UK country of residence if you believe your rights have been infringed.
To exercise any of these rights, please contact us directly via our support email.
8. Data Controller Contact Information
- Data Controller: showerliva
- Website Domain: www.showerliva.com
- Support Email: [email protected]
- Telephone: +65 87978739
- Operating Address: 11 Woodlands Cl, #03-34 WOODLANDS 11, Singapore 737853