PRIVACY TERMS

1. INTRODUCTION AND DATA CONTROLLER

This Privacy Policy outlines how personal data is processed when collected through the website www.rootcradlehome.com (the “Website”). The data controller responsible for your personal data under the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Personal Data Protection Act 2012 of Singapore (PDPA) is PLANT FOLKS PTE. LTD., a corporate entity registered in Singapore with company registration number 202325493D, located at 291 Joo Chiat Road, #05-01, JK Centre, Singapore 427543 (referred to as “we”, “us”, or “our”).

2. LEGAL BASIS FOR PROCESSING

We process personal data relying on the following lawful bases:

Contractual Necessity: To handle, process, and fulfil your product orders.
Legal Obligation: To comply with statutory legal obligations under Singapore and European commercial, tax, and corporate regulations.
Legitimate Interests: To manage client relationships and respond to direct inquiries.

3. PERSONAL DATA WE COLLECT

When you interact with our Website or make a purchase, we collect necessary transactional information, including:

Identity Details: First name and surname.
Contact Details: Email address and telephone number.
Order Details: Delivery address, billing address, and records of items purchased.
Connection Identifiers: IP address, browser information, and device identifiers collected via cookies.

4. PAYMENT PROCESSING BY STRIPE

All payment transactions performed on our Website are processed directly by Stripe, our appointed payment service handler. During the checkout process, your financial details are submitted directly into Stripe’s system. We do not store, view, or retain your full credit card numbers or other primary payment instrument details on our servers. Stripe manages and processes this information independently in compliance with their own privacy policies and international regulatory frameworks.

5. DATA RETENTION PERIODS

We retain personal data only for the duration required to achieve the purposes defined in this policy, in strict alignment with Singapore and European statutory requirements:

Transactional and Financial Records: Invoices, client names, contact details, and purchase history are retained for a statutory period of 7 years to satisfy local and European tax law and corporate accounting requirements.
General Correspondence: Communication records and customer service inquiries are retained for a period of up to 2 years from the date of the last interaction.
Connection Logs: Network connection logs and analytics data are retained for a maximum of 12 months.

6. INTERNATIONAL DATA TRANSFERS

As our operations are established in Singapore and we serve clients within the European region, your personal data will be transferred outside the European Economic Area (EEA) to Singapore. We utilise appropriate legal instruments, such as Standard Contractual Clauses approved by the European Commission, to maintain data protection standards equivalent to those established under European regulations.

7. DATA PROTECTION MEASURES

We maintain standard administrative and operational protocols intended to protect personal data against accidental loss, alteration, or unauthorised access. Please be advised that no system of transmission over the internet or method of digital storage can be classified as completely infallible, and we do not state that data transmissions possess absolute protection against all vulnerabilities.