Privacy Policy

Effective date: 1 Sept 2025
Brand: Maison Noël Christmas Cookies by CNY Goodies Singapore Pte. Ltd. (“Maison Noël”, “we”, “us”, “our”)
Site: christmascookies.sg

What this policy covers

This notice explains what personal data we collect, how we use it, who we share it with, how we protect it, and your choices—consistent with Singapore’s PDPA.

Data we collect

  • Identity & contact: name, email, phone, billing/shipping address, company (if any).

  • Order & payment: items purchased, delivery instructions, transaction references (we do not store full card numbers).

  • Communications: emails/WhatsApp and support messages.

  • Technical: IP address, device/browser, pages viewed, cookies/IDs.

  • Marketing preferences: consent, unsubscribes, campaign interactions.

How we use your data

  • Fulfil orders: process payment, bake/pack, deliver, send invoices.

  • Support: verify identity, resolve issues, handle returns/replacements.

  • Improve & secure: diagnose errors, prevent fraud/abuse, enhance UX.

  • Marketing (opt-in/legitimate interests): seasonal offers, product updates—you can opt out anytime.

  • Legal compliance: accounting, tax, regulatory requests.

Legal bases

  • Contract: to supply goods/services you purchase.

  • Consent: for optional marketing/cookies beyond essential.

  • Legitimate interests: service improvement and security.

  • Legal obligations: record-keeping and compliance.

Cookies & similar tech

We use cookies to keep carts working, remember preferences, and understand site usage.

  • Essential: checkout, authentication, security.

  • Analytics: aggregated insights on performance and content.

  • Marketing: measure ads/retarget (when enabled).
    Control cookies via your browser and our banner (disabling essentials may affect checkout).

Sharing your data (processors)

We share data only as needed to run the business:

  • Payments: PCI-compliant gateways (e.g., Stripe/PayPal/PayNow provider).

  • Delivery & logistics: couriers/last-mile partners.

  • IT & communications: hosting/CDN, email/SMS, analytics, error tracking, support desk.
    All partners are bound by confidentiality and data-processing terms.

International transfers

If partners or servers are located overseas, we use contractual safeguards to ensure comparable protection to the PDPA.

Data security

We use HTTPS/TLS, access controls, least-privilege permissions, and routine patching. No method is 100% secure, but we continuously improve our safeguards.

Data retention

  • Orders/invoices: retained for legally required periods.

  • Support threads: kept for service history, then deleted or anonymised.

  • Marketing data: retained until you opt out or after reasonable inactivity.

Your rights

Subject to applicable law, you may access, correct, and request deletion of your personal data; and withdraw consent to marketing at any time. We aim to respond within 30 days.

Children’s data

Our site is for general audiences. We do not knowingly collect data from children under 13 without parental consent.

Marketing preferences

Control how we contact you:

  • Click Unsubscribe in emails.

  • Reply STOP on WhatsApp/SMS or message us to opt out.

  • Update preferences by contacting us.

Contact our Data Protection Officer

  • WhatsApp: +65 8890 9055

  • Email (DPO): hello@christmascookies.sg

  • Mailing: Maison Noël, 5 Pereira Road, Asiawide Industrial Building #04-01, Singapore 368025
    Include your order number (if any) and what you’d like us to do (access/correct/delete/withdraw).

Updates to this policy

We may update this page to reflect changes in law or our services. The latest version (date above) applies from publication.