Privacy Policy

Effective Date: 28 Sep 2026

Estorya Counseling Pte Ltd ("Estorya Counseling", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, protect and retain personal data when you visit or use our website and Shopify online store, place an order, contact us, arrange delivery or self-pickup, or otherwise interact with us.

This Privacy Policy is intended to comply with the applicable requirements of Singapore's Personal Data Protection Act 2012 (PDPA).

Estorya Counseling Pte Ltd
UEN: 202532812E
Address: 114 Lavender Street, #02-53, CT Hub 2, Singapore 338729
Email: hello@estoryacounseling.com
Phone: +65 8826 3806

For privacy or personal data enquiries, please contact us using the details above.

Depending on how you interact with our online store, we may collect the following personal data:

Contact and Customer

Information

• Full name 
• Email address 
• Mobile or telephone number 
• Billing address 
• Delivery address 
• Other information you provide when contacting us 

Order and Transaction

Information

• Products purchased 
• Order number 
• Order date and time 
• Order value 
• Delivery or self-pickup information 
• Payment status 
• Transaction-related information

Payments are processed through Shopify and/or third-party payment service providers.

Depending on the payment method used, payment providers may collect and process payment information required to complete the transaction.

We generally do not receive or store your complete credit or debit card number.

Shopify provides payment processing and related security measures for Shopify stores, including fraud detection and security technologies such as 3D Secure where applicable.

When you visit our website, certain
information may be collected automatically, including:

• IP address; 
• Browser type; 
• Device type; 
• Operating system; 
• Website pages visited; 
• Referring website; 
• Date and time of access; 
• Website activity; and 
• Cookie and similar technology information.

We may collect personal data when you:

• Visit or browse our website; 
• Create or use an online customer account; 
• Place an order; 
• Make a payment; 
• Request delivery; 
• Select self-pickup; 
• Contact us by email, telephone, WhatsApp or other communication channels; 
• Subscribe to our marketing communications; 
• Submit a review or feedback; 
• Participate in a promotion or campaign; 
• Contact our customer service team; or 
• Otherwise provide information to us voluntarily. 

We may also receive relevant information from service providers involved in processing your order, payment, delivery or other services.

We may collect, use and disclose your personal data for purposes including:

Order and Fulfilment

• Processing and fulfilling your orders; 
• Confirming your purchases; 
• Processing payments; 
• Arranging delivery; 
• Managing self-pickup orders; 
• Sending order and delivery notifications; 
• Providing customer support; and 
• Handling returns, replacements or product-related enquiries. 

Business Operations

• Managing our online store; 
• Maintaining customer records; 
• Managing accounts and transactions; 
• Improving our products and services; 
• Monitoring website performance; 
• Preventing fraud and unauthorised transactions; 
• Resolving disputes; and 
• Maintaining appropriate business and accounting records. 

Communications

We may use your contact information to communicate with you regarding:

• Your orders; 
• Payments; 
• Delivery; 
• Self-pickup; 
• Customer service enquiries; 
• Product-related matters; and 
• Important changes to our services or policies. 

Marketing

Where permitted under applicable law and where the necessary consent has been obtained, we may use your personal data to send information about:

• New products; 
• Promotions; 
• Special offers; 
• Events; 
• Marketing campaigns; and 
• Other products or services that may be relevant to you. 

You may opt out of marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

We will continue to send necessary transactional or service-related communications even if you opt out of marketing communications.

The PDPA requires organisations to notify individuals of the purposes for which personal data is collected, used or disclosed and generally to obtain consent where required, subject to applicable exceptions.

We may disclose relevant personal data to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These may include:

Shopify

Our online store is operated using Shopify.

Shopify may process customer information in connection with store operations, checkout, orders, payments and related services. Shopify's terms state that merchants remain responsible for their stores and customer transactions, while Shopify processes customer personal data under its applicable privacy and data-processing terms. 

Payment Providers

We may disclose relevant information to payment processors and financial institutions to process and verify payments and prevent fraudulent transactions.

Delivery Providers

We may provide your name, telephone number, delivery address and relevant order information to delivery providers for the purpose of fulfilling your order.

Technology and Service Providers

We may use third-party providers for services such as:

• Website hosting; 
• E-commerce services; 
• Email communications; 
• Customer relationship management; 
• Analytics; 
• Marketing; 
• IT support; 
• Cloud storage; and 
• Cybersecurity. 

Such providers may process personal data on our behalf or provide services necessary to operate our business.

Legal and Regulatory Authorities

We may disclose personal data where required or permitted by applicable law, regulation, court order or governmental authority.

Some of our service providers, including technology and e-commerce providers, may process or store personal data outside Singapore.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the transferred personal data receives a standard of protection comparable to that required under the Singapore PDPA, in accordance with applicable requirements.

The PDPA's transfer limitation obligation requires organisations to ensure an appropriate standard of protection when transferring personal data overseas. 

Our website may use cookies and similar technologies to:

• Enable essential website functions; 
• Remember shopping cart and checkout information; 
• Understand how visitors use our website; 
• Improve website performance; 
• Maintain security; 
• Analyse website traffic; and 
• Support marketing and advertising activities where applicable. 

You may adjust your browser settings to manage or restrict cookies.

Please note that disabling certain cookies may affect the functionality of our website or checkout process.

Shopify also uses cookies and similar technologies in connection with its platform and consumer services. 

We take reasonable security measures to protect personal data in our possession or under our control against:

• Unauthorised access; 
• Unauthorised collection; 
• Unauthorised use; 
• Unauthorised disclosure; 
• Unauthorised copying; 
• Modification; and 
• Loss or similar risks. 

However, no electronic transmission or storage system can be guaranteed to be completely secure.

The PDPA requires organisations to make reasonable security arrangements to protect personal data in their possession or under their control.

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected or for
legitimate business, accounting, legal, regulatory or dispute-resolution purposes.

When personal data is no longer required for business or legal purposes, we will take reasonable steps to delete, destroy or anonymise it, where appropriate.

The PDPA includes a retention limitation obligation requiring organisations to stop retaining personal data when it is no longer necessary for a business or legal purpose.

You may request access to personal data that we hold about you and, where applicable, information about how your personal data has been used or disclosed during the preceding year.

You may also request correction of inaccurate or incomplete personal data held by us.

Requests should be submitted to:

Email: hello@estoryacounseling.com

We may need to verify your identity before processing an access or correction request.

Certain requests may be subject to applicable legal exceptions, requirements or limitations.

The PDPA provides for access and correction rights subject to applicable conditions and exceptions.

Where we rely on your consent to collect, use or disclose your personal data, you may withdraw your consent by contacting us at:

hello@estoryacounseling.com

Please note that withdrawing consent may affect our ability to provide certain products, services or features to you.

For example, if you withdraw consent for the use of information necessary to fulfil an order, we may not be able to process or deliver that order.

We will explain the likely consequences of withdrawing consent where appropriate.

You may choose not to receive promotional or marketing communications from us.

You can unsubscribe using the unsubscribe instructions included in our marketing emails or contact:

hello@estoryacounseling.com

Opting out of marketing communications will not affect necessary communications relating to existing orders, transactions, payments, delivery, self-pickup or customer service.

We take reasonable steps to ensure that personal data collected and used by us is reasonably accurate and complete, particularly where the information is likely to be used to make a decision affecting you or disclosed to another organisation.

You should notify us if any personal information provided to us changes or is inaccurate.

Our online store is not specifically directed at children.

We do not knowingly collect personal data from children for purposes that are not appropriate under applicable law.

If you believe that a child has provided personal data to us without appropriate consent, please contact us at:

hello@estoryacounseling.com

Our website may contain links to third-party websites, applications or services.

These third parties operate independently and may have their own privacy policies.

We are not responsible for the privacy practices, security or content of third-party websites or services.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

If we become aware of a data breach involving personal data, we will assess the incident and take appropriate steps in
accordance with applicable Singapore law.

Where notification is required, we will notify the relevant authorities and/or affected individuals within the applicable
timeframe.

Singapore's PDPA contains data-breach notification requirements for breaches that meet the relevant criteria, including breaches likely to result in significant harm or of significant scale.

Estorya Counseling Pte Ltd has designated a person responsible for data protection matters.

Data Protection Officer (DPO)
Estorya Counseling Pte Ltd
Email: hello@estoryacounseling.com
Phone: +65 8826 3806
Address: 114 Lavender Street, #02-53, CT Hub 2, Singapore 338729

For any questions, requests or complaints relating to personal data protection, please contact our DPO using the details above.

We may update this Privacy Policy from time to time to reflect changes to:

• Our business practices; 
• Our online store; 
• Technology and service providers; 
• Applicable laws and regulations; or 
• Our data protection practices. 

The latest version will be published on our website with the updated effective date.

We encourage you to review this Privacy Policy periodically.

If you have any questions regarding this
Privacy Policy or how we handle your personal data, please contact:

EstoryaCounseling Pte Ltd 
UEN: 202532812E 
114 Lavender Street, #02-53, CT Hub 2, Singapore 338729 
Email: hello@estoryacounseling.com 
Phone: +65 8826 3806