Privacy Policy

Effective Date: 14 July 2026

1. Introduction and Purpose

Diaper King ("Diaper King", "we", "us" or "our") recognises the importance of protecting your personal data and is committed to handling it responsibly in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"), including its subsidiary legislation and any applicable advisory guidelines issued by the Personal Data Protection Commission ("PDPC").

This Privacy Policy explains how we collect, use, disclose, store, retain and protect your personal data when you visit or interact with our website, create an account, place an order, communicate with us, or otherwise use our products and services (collectively, the "Services").

Our Services include our Shopify-powered online store, mobile platforms, customer support channels, social media pages, promotional campaigns and any other digital services operated by Diaper King.

By accessing or using our Services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. 

2. Definition of Personal Data

For the purposes of this Privacy Policy, "Personal Data" has the meaning given under the PDPA and refers to any data, whether true or not, about an individual who can be identified:

  • From that data alone; or
  • From that data together with other information to which we have or are likely to have access.

Personal Data does not include information that has been anonymised such that an individual can no longer be identified.

3. Personal Data We Collect

Depending on how you interact with our Services, we may collect the following categories of Personal Data.

3.1 Identity and Contact Information

We may collect:

  • Full name
  • Email address
  • Mobile or telephone number
  • Residential, billing and delivery addresses
  • Account username and password 

3.2 Account and Transaction Information

When you create an account or place an order, we may collect:

  • Account registration details
  • Order history
  • Purchase records
  • Delivery preferences
  • Refund or exchange records
  • Payment confirmation details 

For security reasons, Diaper King does not collect or store your complete payment card information. Payment transactions are processed securely by our authorised third-party payment service providers.

3.3 Customer Communications

When you communicate with us, we may collect:

  • Customer enquiries
  • Emails
  • WhatsApp conversations
  • Live chat records
  • Customer service correspondence
  • Product reviews
  • Survey responses
  • Feedback submitted through our Services
  • Participation in promotions, contests or loyalty programmes

3.4 Technical and Usage Data

  • IP address
  • Browser type and device information
  • Website usage data and analytics
  • Cookies and similar tracking technologies

4. Manner of Collection

We may collect Personal Data in various ways, including when you:

  • Create a customer account;
  • Place an order through our website;
  • Subscribe to newsletters or marketing communications;
  • Contact our Customer Service team;
  • Submit enquiries through email, WhatsApp, social media or online forms;
  • Participate in surveys, promotions or competitions;
  • Leave reviews or ratings on our products;
  • Browse or interact with our website through cookies or analytics technologies.

We may also collect Personal Data from third parties where permitted by law, including but not limited to:

Shopify and related Shopify applications;

  • Payment gateway providers;
  • Logistics and courier partners;
  • Marketing and advertising platforms;
  • Analytics providers;
  • Fraud prevention and verification service providers; and
  • Other business partners involved in providing our Services.

Where Personal Data is collected from third parties, we will only do so where such collection is permitted under the PDPA or where appropriate consent has been obtained.

5. Purposes for Collection, Use and Disclosure

We collect, use and disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances, including:

5.1 Operational Purposes

  • Processing, fulfilling and delivering orders
  • Managing customer accounts
  • Processing payments, refunds and exchanges
  • Providing customer support and handling enquiries

5.2 Business Improvement and Analytics

  • Improving website functionality and user experience
  • Conducting data analysis, market research and internal reporting
  • Developing new products or services

5.3 Marketing and Communications

  • Sending promotional materials, newsletters or product updates (where consented)
  • Administering loyalty programmes and special offers
  • You may opt out of receiving marketing communications at any time by following the unsubscribe instructions or contacting us. 

5.4 Legal and Compliance Purposes

  • Preventing fraud and misuse of our Services
  • Complying with legal, regulatory or contractual obligations
  • Responding to lawful requests from authorities

6. Consent and Withdrawal of Consent

We obtain your consent before collecting, using or disclosing personal data, except where an exception under the PDPA applies.

Consent may be express or deemed, depending on the nature of the interaction. You may withdraw your consent at any time by contacting us using the details provided in Section 14.

Please note that withdrawal of consent may affect our ability to provide certain Services to you.

7. Disclosure of Personal Data

We may disclose personal data to the following categories of third parties, strictly on a need-to-know basis:

  • Payment processors and financial institutions
  • Logistics, courier and fulfilment partners
  • IT, cloud hosting and analytics service providers
  • Marketing and advertising platforms
  • Professional advisors (legal, accounting, compliance)
  • Government or regulatory authorities, where required by law

We take reasonable steps to ensure that all third parties provide a level of data protection comparable to that required under the PDPA.

8. Cross-Border Data Transfers

Your personal data may be transferred to, stored or processed outside Singapore due to the nature of cloud-based services and international service providers (including Shopify).

Where such transfers occur, we ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to the PDPA.

9. Protection and Security of Personal Data

We implement reasonable administrative, technical and physical security measures to protect personal data, including:

  • Secure servers and encrypted connections
  • Restricted access controls
  • Regular system monitoring and updates

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure.

10. Accuracy of Personal Data

We take reasonable steps to ensure that personal data collected is accurate and complete, particularly where the data is likely to be used to make decisions that affect you or to be disclosed to third parties.

You are encouraged to keep your personal data up to date.

11. Retention Limitation

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable laws (including tax and accounting obligations).

When personal data is no longer required, it will be securely deleted or anonymised.

12. Access and Correction Requests

Under the PDPA, you have the right to:

  • Request access to personal data we hold about you
  • Request correction of inaccurate or incomplete personal data

Requests must be submitted in writing and may be subject to verification of identity. We may charge a reasonable administrative fee where permitted by law.

13. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Enable essential website functionality
  • Analyse site traffic and usage patterns
  • Personalise content and advertisements

You may control cookie preferences through your browser settings or cookie consent tools on our website.

14. Data Protection Officer (DPO)

For any questions, requests or complaints relating to personal data, please contact:

Data Protection Officer
Email: hello@diaperking.com.sg

We will respond to all enquiries in accordance with PDPA requirements.

15. Updates to This Privacy Policy

We reserve the right to amend this Privacy Policy from time to time to reflect changes in legal requirements, business operations or data protection practices.

The updated version will be published on our website with the revised effective date.

We encourage you to review this Privacy Policy periodically to remain informed of any updates.