Confirm your business practices, return conditions, providers, data-protection contact and applicable legal obligations before live sales. This template is not legal advice.
About this notice
TestingFukai is responsible for explaining how personal data is handled through testingfukai.com. This draft is structured for Singapore’s Personal Data Protection Act (PDPA). Before publication, appoint and identify the organisation’s data-protection contact and verify the purposes, providers and practices below.
Information and purposes
We may receive names, email and phone details, account information, delivery addresses, order records, booking choices, delivery-term agreements, enquiries and warranty registrations. Use this information to respond, process purchases, fulfil delivery and support customers. State any additional real purpose when collecting data; avoid requesting information unrelated to the service.
Consent and choices
Explain the purposes of collection and obtain consent or use another basis permitted by the PDPA where applicable. Do not make unnecessary marketing consent a condition of an order. Contact the data-protection representative to withdraw consent, subject to applicable legal and operational limits; explain how this may affect an outstanding service.
Providers and overseas processing
Share relevant information only with providers needed for the stated purposes, such as hosting, payment and delivery services. Before launch, list the actual providers, data handled and countries involved. Overseas transfers require applicable safeguards under the PDPA. Payment handling depends on the enabled provider; do not promise that no payment data ever reaches the site without checking its integration.
Cookies and marketing
The store may use cookies needed for accounts and shopping sessions. Identify analytics, advertising tools and marketing channels actually used, and explain controls before enabling them. This theme does not establish that every installed plugin has the same cookie or consent behaviour.
Protection, retention and incidents
Maintain reasonable security arrangements and limit access to people who need the data. Retain records only while needed for business or legal purposes, then delete or anonymise them appropriately. Document retention periods and breach-response procedures; assess and make notifications when the PDPA requires. No website is guaranteed to be risk-free.
Access, correction and privacy questions
Contact our designated data-protection representative through the Contact page to ask about your data, request access or correction, withdraw consent or raise a concern. We may need to verify identity and apply lawful exceptions. The owner must add a public DPO contact before launch; the general company email alone is not proof of a formal appointment.