Personal Data Privacy Policy

My Curious Child LLP (UEN: T22LL1190F) Last updated: [23 Aug 2026]

My Curious Child LLP ("My Curious Child", "we", "us", "our") operates www.mycuriouschild.com (the "Site") and sells the Curious Little Critters Maths Adventures storybooks, Play & Learn activity books, and related products. This Policy explains how we collect, use, disclose, and protect your personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").

By using this Site, submitting a form, or making a purchase, you acknowledge that you have read and understood this Policy. If you do not agree, please do not provide your personal data to us.

1. Data Protection Officer

We have appointed a Data Protection Officer ("DPO") to oversee compliance with the PDPA. If you have any questions, concerns, or requests regarding your personal data, please contact:

Data Protection Officer My Curious Child LLP Name: Han Jiamin

Email: jiamin@mycuriouschild.net

We aim to respond to all requests within 30 calendar days.

2. Personal Data We Collect

Depending on how you interact with the Site, we may collect the following categories of personal data.

Identity and contact data, such as your name, email address, and phone number. Order and delivery data, including your billing address, shipping/delivery address, order history, and any delivery instructions you provide. Payment data — payment is processed by Shopify Payments, Stripe, and/or PayNow, and we do not store your full card number on our servers; this is handled directly by our payment processors. Marketing preference data, such as your email opt-in status, content or product interests, and engagement with our newsletter. Technical and usage data, including your IP address, browser type, device information, pages viewed, and referral source, collected via cookies and analytics tools. And correspondence data — records of enquiries, customer service messages, and feedback you send us.

We do not knowingly collect NRIC numbers, and we do not use NRIC for identity verification or authentication purposes.

3. How We Collect Your Data

  • Directly from you — when you create an account, place an order, subscribe to our mailing list (e.g. our "5 Maths Moments" printable), or contact us.
  • Automatically — through cookies and similar tracking technologies when you browse the Site (see Section 7).
  • From our service providers — such as Shopify (our e-commerce platform) and our payment processors, in connection with processing your order.

4. Purposes for Which We Use Your Data

We collect, use, and disclose your personal data only for purposes you have been informed of and, where required, have consented to, including to:

  1. Process, fulfil, and deliver your orders;
  2. Create and manage your customer account;
  3. Respond to enquiries and provide customer support;
  4. Send order confirmations, shipping updates, and service-related communications;
  5. Send marketing communications and promotional content, where you have opted in — you may withdraw this consent at any time (see Section 8);
  6. Improve the Site, our products, and customer experience, including through analytics;
  7. Detect, prevent, and investigate fraud or misuse of the Site;
  8. Comply with legal and regulatory obligations (e.g. accounting and tax record-keeping requirements under Singapore law).

We will not use your personal data for a new purpose that is materially different from those stated above without obtaining your fresh consent, unless permitted or required by law.

5. Consent and Withdrawal

Where consent is the basis for our processing (e.g. marketing emails), it is obtained through clear opt-in action — such as ticking an unchecked checkbox or submitting a sign-up form. We do not use pre-ticked boxes.

You may withdraw your consent at any time by:

  • Clicking "unsubscribe" in any marketing email; or
  • Emailing our DPO at jiamin@mycuriouschild.net

Please note that withdrawing consent for certain purposes (e.g. delivery address for an order in progress) may affect our ability to fulfil that order or provide certain services. We will inform you of the likely consequences before processing your withdrawal.

Withdrawing marketing consent does not affect transactional communications necessary to complete a purchase you have already made (e.g. order and shipping updates).

6. Disclosure of Personal Data to Third Parties

We disclose personal data only as necessary to the following categories of recipients, all of whom are contractually and/or legally required to protect your data to a standard comparable to the PDPA:

  • Shopify Inc. — our e-commerce platform provider, which hosts the Site and processes order data.
  • Stripe / PayNow — payment processing.
  • Delivery and courier partners — to fulfil shipping of your order, within Singapore and, where applicable, overseas.
  • Google (Google Analytics) and Meta Platforms (Meta Pixel) — website analytics and advertising measurement (see Section 7).
  • Popular Book Company and other authorised retail/licensing partners — only where relevant to fulfilling a transaction made through their channel, not our own Site orders.
  • Professional advisors, auditors, or regulators, where required by law.

We do not sell your personal data to third parties.

7. Cookies and Tracking Technologies

The Site uses cookies and similar technologies, including Google Analytics and Meta Pixel, to understand how visitors use the Site and to measure the performance of our marketing.

  • Essential cookies are required for the Site to function (e.g. shopping cart, checkout) and cannot be disabled.
  • Analytics and advertising cookies (Google Analytics, Meta Pixel) collect data such as pages visited, time on site, and interactions, which may be linked to an identifiable individual. These are used to improve the Site and to measure and personalise marketing.

When you first visit the Site, a cookie consent banner allows you to accept or reject non-essential cookies before they are set. You can change your preferences at any time through the cookie settings link on the Site, or by managing cookies through your browser settings. Disabling cookies may affect Site functionality.

8. Overseas Transfer of Personal Data

Some of our service providers (including Shopify, Google, Meta, and Stripe) may store or process personal data on servers located outside Singapore. Where we transfer personal data overseas, we take contractually reasonable steps to ensure the recipient provides a standard of protection comparable to the PDPA, as required under Section 26 of the PDPA.

Where you provide us with a delivery address outside Singapore for international shipping, your name, address, and contact details will necessarily be transferred to our courier partners in the destination country to complete delivery.

9. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law, including:

  • Order and transaction records: retained for at least 5 years from the relevant Year of Assessment, as legally required under Singapore's Income Tax Act, GST Act (where applicable), and accounting record-keeping obligations applying to businesses. This is a separate statutory requirement, not a PDPA-specific rule — the PDPA's own retention rules permit us to keep data for as long as needed to satisfy it.
  • Marketing/mailing list data: retained until you withdraw consent or unsubscribe, or after a period of sustained inactivity, whichever is earlier.
  • Customer account data: retained for as long as your account remains active, plus a reasonable period thereafter.

When personal data is no longer needed for any of the above purposes, we will securely delete or anonymise it.

10. Protection of Personal Data

We implement reasonable administrative, technical, and physical security measures to protect personal data against unauthorised access, collection, use, disclosure, or similar risks, including restricting access to personal data to authorised personnel and relying on the security infrastructure of our reputable service providers (Shopify, Stripe).

No method of transmission or storage is 100% secure. In the event of a data breach that is likely to result in significant harm, we will assess and notify the Personal Data Protection Commission (PDPC) and affected individuals as required under the PDPA's mandatory breach notification obligation.

11. Access and Correction

You have the right to:

  • Request access to the personal data we hold about you, and information on how it has been used or disclosed within the past year;
  • Request correction of any error or omission in your personal data.

To make a request, contact our DPO at [INSERT DPO EMAIL]. We may verify your identity before processing your request and may charge a reasonable fee for access requests, as permitted under the PDPA.

12. Children's Privacy

Our products are designed for young children, but our Site and mailing list are directed at parents, guardians, and educators, who must be at least 18 years old to make a purchase or subscribe. We do not knowingly collect personal data directly from children through the Site. If you believe a child has provided us with personal data without parental consent, please contact our DPO so we can remove it.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Material changes affecting how we use your data will be communicated to you where required.

14. Contact Us

For any questions, feedback, or requests relating to this Policy or your personal data:

My Curious Child LLP Attn: Data Protection Officer Name: Han Jiamin

Email: jiamin@mycuriouschild.net