Personal Data Privacy Policy

My Curious Child LLP (UEN: T22LL1190F) Last updated: [23 Aug 2026]

My Curious Child LLP ("My Curious Child", "we", "us", "our") operates www.mycuriouschild.com (the "Site") and sells the Curious Little Critters Maths Adventures storybooks, Play & Learn activity books, and related products. This Policy explains how we collect, use, disclose, and protect your personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").

By using this Site, submitting a form, or making a purchase, you acknowledge that you have read and understood this Policy. If you do not agree, please do not provide your personal data to us.

1. Data Protection Officer

We have appointed a Data Protection Officer ("DPO") to oversee compliance with the PDPA. If you have any questions, concerns, or requests regarding your personal data, please contact:

Data Protection Officer My Curious Child LLP Name: Han Jiamin

Email: jiamin@mycuriouschild.net

We aim to respond to all requests within 30 calendar days.

2. Personal Data We Collect

Depending on how you interact with the Site, we may collect the following categories of personal data.

Identity and contact data, such as your name, email address, and phone number. Order and delivery data, including your billing address, shipping/delivery address, order history, and any delivery instructions you provide. Payment data — payment is processed by Shopify Payments, Stripe, and/or PayNow, and we do not store your full card number on our servers; this is handled directly by our payment processors. Account information, such as your username, password, and account preferences, if you create an account. Marketing preference data, such as your email opt-in status, content or product interests, and engagement with our newsletter. Technical and usage data, including your IP address, browser type, device information, pages viewed, and referral source, collected via cookies and analytics tools. And correspondence data — records of enquiries, customer service messages, and feedback you send us.

We do not knowingly collect NRIC numbers, and we do not use NRIC for identity verification or authentication purposes.

3. How We Collect Your Data

  • Directly from you — when you create an account, place an order, subscribe to our mailing list (e.g. our Early Maths Guide), or contact us.
  • Automatically — through cookies and similar tracking technologies when you browse the Site (see Section 8).
  • From our service providers — such as Shopify (our e-commerce platform) and our payment processors, in connection with processing your order.

4. Purposes for Which We Use Your Data

We collect, use, and disclose your personal data only for purposes you have been informed of and, where required, have consented to, including to:

  1. Process, fulfil, and deliver your orders;
  2. Create and manage your customer account;
  3. Respond to enquiries and provide customer support;
  4. Send order confirmations, shipping updates, and service-related communications;
  5. Send marketing communications and promotional content, where you have opted in — you may withdraw this consent at any time (see Section 8);
  6. Improve the Site, our products, and customer experience, including through analytics;
  7. Detect, prevent, and investigate fraud or misuse of the Site;
  8. Comply with legal and regulatory obligations (e.g. accounting and tax record-keeping requirements under Singapore law).

We will not use your personal data for a new purpose that is materially different from those stated above without obtaining your fresh consent, unless permitted or required by law.

5. Consent and Withdrawal

Where consent is the basis for our processing (e.g. marketing emails), it is obtained through clear opt-in action — such as ticking an unchecked checkbox or submitting a sign-up form. We do not use pre-ticked boxes.

You may withdraw your consent at any time by:

  • Clicking "unsubscribe" in any marketing email; or
  • Emailing our DPO at jiamin@mycuriouschild.net

Please note that withdrawing consent for certain purposes (e.g. delivery address for an order in progress) may affect our ability to fulfil that order or provide certain services. We will inform you of the likely consequences before processing your withdrawal.

Withdrawing marketing consent does not affect transactional communications necessary to complete a purchase you have already made (e.g. order and shipping updates).

6. Disclosure of Personal Data to Third Parties

We disclose personal data only as necessary to the following categories of recipients, all of whom are contractually and/or legally required to protect your data to a standard comparable to the PDPA:

  • Shopify Inc. — our e-commerce platform provider, which hosts the Site and processes order data.
  • Stripe / PayNow — payment processing.
  • Delivery and courier partners — to fulfil shipping of your order, within Singapore and, where applicable, overseas.
  • Google (Google Analytics) and Meta Platforms (Meta Pixel) — website analytics and advertising measurement (see Section 7).
  • Popular Book Company and other authorised retail/licensing partners — only where relevant to fulfilling a transaction made through their channel, not our own Site orders.
  • Professional advisors, auditors, or regulators, where required by law.

We do not sell your personal data to third parties.

7. Relationship with Shopify

The Site is hosted by Shopify, which collects and processes personal data about your access to and use of the Site in order to provide and improve the Site for us. Information you submit through the Site is transmitted to and shared with Shopify, and with third parties Shopify engages, which may be located in countries other than where you reside. To learn more about how Shopify uses your personal data and any rights you may have in relation to Shopify's own processing, visit Shopify's Consumer Privacy Policy at privacy.shopify.com/en.

8. Cookies and Tracking Technologies

The Site uses cookies and similar technologies, including Google Analytics and Meta Pixel, to understand how visitors use the Site and to measure the performance of our marketing.

  • Essential cookies are required for the Site to function (e.g. shopping cart, checkout) and cannot be disabled.
  • Analytics and advertising cookies (Google Analytics, Meta Pixel) collect data such as pages visited, time on site, and interactions, which may be linked to an identifiable individual. These are used to improve the Site and to measure and personalise marketing.

When you first visit the Site, a cookie consent banner allows you to accept or reject non-essential cookies before they are set. You can change your preferences at any time through the cookie settings link on the Site, or by managing cookies through your browser settings. Disabling cookies may affect Site functionality.

9. Overseas Transfer of Personal Data

Some of our service providers (including Shopify, Google, Meta, and Stripe) may store or process personal data on servers located outside Singapore. Where we transfer personal data overseas, we take contractually reasonable steps to ensure the recipient provides a standard of protection comparable to the PDPA, as required under Section 26 of the PDPA.

If we transfer personal data belonging to residents of the European Economic Area or the United Kingdom outside those regions, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses (or the equivalent UK mechanism), unless the transfer is to a country already recognised as providing an adequate level of protection.

Where you provide us with a delivery address outside Singapore for international shipping, your name, address, and contact details will necessarily be transferred to our courier partners in the destination country to complete delivery.

9. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law, including:

  • Order and transaction records: retained for at least 5 years from the relevant Year of Assessment, as legally required under Singapore's Income Tax Act, GST Act (where applicable), and accounting record-keeping obligations applying to businesses. This is a separate statutory requirement, not a PDPA-specific rule — the PDPA's own retention rules permit us to keep data for as long as needed to satisfy it.
  • Marketing/mailing list data: retained until you withdraw consent or unsubscribe, or after a period of sustained inactivity, whichever is earlier.
  • Customer account data: retained for as long as your account remains active, plus a reasonable period thereafter.

When personal data is no longer needed for any of the above purposes, we will securely delete or anonymise it.

10. Protection of Personal Data

We implement reasonable administrative, technical, and physical security measures to protect personal data against unauthorised access, collection, use, disclosure, or similar risks, including restricting access to personal data to authorised personnel and relying on the security infrastructure of our reputable service providers (Shopify, Stripe).

No method of transmission or storage is 100% secure. In the event of a data breach that is likely to result in significant harm, we will assess and notify the Personal Data Protection Commission (PDPC) and affected individuals as required under the PDPA's mandatory breach notification obligation.

11. Your Rights and Choices

You have the right to:

  • Access the personal data we hold about you, and information on how it has been used or disclosed within the past year;
  • Correct any error or omission in your personal data;
  • Delete personal data we hold about you, subject to legal retention requirements described in Section 10;
  • Manage your marketing preferences — you may opt out of promotional emails at any time using the unsubscribe link. We may still send non-promotional emails, such as order or account updates.

If you reside in the EEA or UK, and subject to exceptions and limitations under local law, you may additionally have the right to:

  • Object to or restrict our processing of your personal data for certain purposes;
  • Withdraw consent at any time where we rely on consent as the basis for processing;
  • Data portability — receive a copy of your personal data in a portable format, in certain circumstances;
  • Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact our DPO at enquiries@mycuriouschild.net. We may need to verify your identity before processing your request, and may charge a reasonable fee for access requests where permitted by law. You may designate an authorised agent to make a request on your behalf, subject to proof of authorisation. We will not discriminate against you for exercising any of these rights.

If you are in Singapore, you may also lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg if you believe your data has been mishandled.

12. Security of Your Information

We implement reasonable administrative, technical, and physical security measures to protect personal data against unauthorised access, collection, use, disclosure, or similar risks, including restricting access to personal data to authorised personnel and relying on the security infrastructure of our reputable service providers (Shopify, Stripe).

No method of transmission or storage is completely secure, and we cannot guarantee perfect security. We recommend you do not use unsecure channels to send us sensitive information. In the event of a data breach that is likely to result in significant harm, we will assess and notify the Personal Data Protection Commission (PDPC) and affected individuals as required under the PDPA's mandatory breach notification obligation.

13. Children's Privacy

Our products are designed for young children, but our Site and mailing list are directed at parents, guardians, and educators, who must be at least 18 years old to make a purchase or subscribe. We do not knowingly collect personal data directly from children through the Site. If you believe a child has provided us with personal data without parental consent, please contact our DPO so we can remove it.

14. Third-Party Links

The Site may contain links to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of these third parties. We encourage you to review their privacy policies before providing any personal data.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Material changes affecting how we use your data will be communicated to you where required.

16. Contact Us

For any questions, feedback, or requests relating to this Policy or your personal data:

My Curious Child LLP Attn: Data Protection Officer Name: Han Jiamin

Email: jiamin@mycuriouschild.net