Privacy policy

The Little Market is operated by Little Jars Pte. Ltd. (“we”, “us”, “our”). We are committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). This policy explains what we collect, why, and your rights.

Personal data we collect

• Contact and account details: name, email address, delivery and billing address, phone number;

• Order and transaction details: items purchased, order value, and delivery information;

• Payment information: processed securely by our payment providers and Shopify; we do not store full card numbers;

• Technical and usage data: device, browser, and site activity collected through cookies and similar tools.

How we use your data, and consent

We collect, use and disclose your personal data only for purposes you would reasonably expect, and for which you have given or are deemed to have given consent, including to:

• Process, fulfil and deliver your orders;

• Provide customer service and respond to enquiries;

• Send order updates and, where you have opted in, marketing about products and promotions;

• Prevent fraud and maintain the security of our store; and

• Comply with legal and regulatory obligations.

Marketing and the Do Not Call (DNC) Registry

We send marketing messages only with your consent, and you can opt out at any time using the unsubscribe link in our emails or by emailing us. We comply with the Do Not Call provisions of the PDPA and will check the DNC Registry before sending any telemarketing messages where required.

Disclosure to third parties

We share personal data only as needed with: our e-commerce platform (Shopify), payment providers, delivery and logistics partners, and IT or marketing service providers acting on our behalf. We require them to protect your data. We may also disclose data where required by law.

Transfers outside Singapore

Some service providers (such as Shopify) may store data outside Singapore. Where this happens, we take steps so that your data receives a standard of protection comparable to the PDPA.

Protection, accuracy and retention

We put in place reasonable security measures to protect personal data against unauthorised access or loss. We keep personal data only for as long as necessary for the purposes above or as required by law, after which it is securely deleted or anonymised.

Your rights: access and correction

You may request access to the personal data we hold about you, and ask us to correct it if it is inaccurate or incomplete. We will respond to your request as soon as reasonably possible, and within 30 days where practicable. A reasonable fee may apply to an access request to cover administrative costs. You may also withdraw your consent to our use of your data, subject to legal or contractual restrictions.

Data breaches

If a data breach occurs that is likely to result in significant harm to affected individuals, or that affects 500 or more individuals, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of assessing the breach as notifiable, and will notify affected individuals as required under the PDPA.

Cookies

Our store uses cookies to keep your basket, remember preferences, and understand how the site is used. You can control cookies through your browser settings; disabling some cookies may affect how the store works.

Data Protection Officer

We have appointed a Data Protection Officer who is responsible for our PDPA compliance. To make an access or correction request, withdraw consent, or ask a question about this policy, contact:

Data Protection Officer, Little Jars Pte. Ltd. Email orders@little-jars.com, phone +65 8884 5565. Address: 6 Tagore Drive, #02-16 Tagore Building, Singapore 787623.