Legal

Privacy Policy

Privacy Policy

Dr.Strips+ ("Dr.Strips+", "we", "us", or "our") operates the website drstrips.sg (the "Site") and sells Dr.Strips+ Sleep and related products. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under Singapore's Personal Data Protection Act 2012 ("PDPA"). By using the Site or placing an order with us, you agree to the practices described in this Privacy Policy.

1. Personal Data We Collect

We collect personal data in the following categories:

  • Contact and identity details — such as your name, email address, phone number, and delivery/billing address, which you provide when creating an account, placing an order, subscribing to our newsletter, or contacting our support team.
  • Order and payment details — such as your order history, items purchased, order value, and payment confirmation. Actual card and payment credential data is collected and processed through Shopify's secure payment infrastructure and its payment processors; we do not store your full card details on our own systems.
  • Device and usage data — such as your IP address, browser type, device identifiers, pages viewed, and general browsing behaviour on the Site, collected automatically through cookies and similar technologies (see our Cookie Policy for more detail).
  • Marketing preferences — such as whether you have opted in to receive email or SMS marketing, and your engagement with those communications (e.g. opens and clicks).
  • Communications — records of your correspondence with our customer support team, including any health-related context you voluntarily share with us in order to receive support (for example, describing an adverse reaction), which we treat with particular care.

2. How We Use Your Personal Data

We use your personal data for purposes including:

  • Processing, fulfilling, and delivering your orders, including sharing necessary details with our courier and delivery partners;
  • Processing payments and refunds, and preventing and detecting fraud;
  • Creating and managing your customer account, including any subscription orders;
  • Responding to customer support enquiries, including questions about our products, orders, and our 30-night guarantee;
  • Sending you order confirmations, shipping updates, and other transactional communications;
  • With your consent, sending marketing communications about new products, promotions, and offers via email or SMS;
  • Improving the Site, our products, and our customer experience through analytics; and
  • Complying with our legal and regulatory obligations, including obligations relating to consumer protection and the sale of health supplements in Singapore.

Legal Bases for Processing

Under the PDPA, we rely on the following bases to collect, use, and disclose your personal data:

  • Consent — for example, when you opt in to marketing communications, or when we ask for your consent to use non-essential cookies;
  • Deemed consent — for example, where you voluntarily provide personal data to us for a reasonable purpose, such as providing your address so we can deliver your order;
  • Legitimate interests — for example, to detect and prevent fraud or to improve our services, where this does not override your interests; and
  • Legal or contractual necessity — for example, to fulfil an order you have placed with us, or to comply with applicable law.

3. Who We Share Your Personal Data With

We do not sell your personal data. We may share personal data with the following categories of third parties, strictly as needed to operate the Site and fulfil our obligations to you:

  • Shopify Inc., our e-commerce platform provider, and its sub-processors, who host the Site, manage checkout, and store order data on our behalf;
  • Payment processors integrated with Shopify's checkout (for example, credit card, PayNow, or digital wallet processors), who handle payment transactions securely;
  • Delivery and courier partners, who require your name, address, and contact number to deliver your order;
  • Email and SMS marketing platforms, which we may use to send you newsletters and promotional messages if you have opted in; and
  • Professional advisers, regulators, or authorities, where required by law or to protect our legal rights.

Each of these third parties is only given access to the personal data reasonably necessary for them to perform their function, and we take reasonable steps to ensure they handle your data securely and in accordance with applicable law.

4. Cookies and Tracking

We use cookies and similar technologies to operate the Site (for example, to keep items in your cart and process checkout) and may use additional cookies for analytics and marketing purposes. For full details on the types of cookies we use, why we use them, and how you can control them, please see our Cookie Policy.

5. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. For example, order and transaction records are typically retained for the period required under Singapore tax and accounting rules, after which they are securely deleted or anonymised. If you close your account or ask us to delete your data, we will do so unless we are legally required or permitted to retain it.

6. Your Rights Under the PDPA

Subject to certain exceptions under the PDPA, you have the right to:

  • Access the personal data we hold about you;
  • Correct any inaccurate or incomplete personal data;
  • Withdraw your consent to our collection, use, or disclosure of your personal data at any time (for example, unsubscribing from marketing emails or SMS) — note that withdrawing consent for certain data may affect our ability to provide you with products or services; and
  • Request deletion of your personal data, subject to our legal retention obligations.

If you no longer wish to receive marketing phone calls or SMS from us, you may also register your number with Singapore's Do Not Call (DNC) Registry at dnc.gov.sg, in addition to opting out directly with us.

To exercise any of these rights, please contact us at support@drstrips.sg. We will respond within a reasonable time in accordance with the PDPA.

7. Children's Privacy

The Site is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us at support@drstrips.sg and we will take reasonable steps to delete that data.

8. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including relying on Shopify's platform-level security infrastructure for hosting, checkout, and payment processing. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Because we use Shopify's global infrastructure, your personal data may be stored or processed on servers located outside Singapore. Where this occurs, we take reasonable steps to ensure that any overseas recipient provides a standard of protection comparable to that required under the PDPA.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:

Email: support@drstrips.sg