Skip to content

Privacy policy

HINOKII PTE. LTD. ("HINOKII", "we", "us") is a company incorporated in Singapore. This policy explains what personal data we collect, why we collect it, and what you can ask us to do with it. It is written to meet our obligations under the Personal Data Protection Act 2012 of Singapore ("PDPA").

1. What we collect

Most of the personal data we hold belongs to people acting for a company rather than for themselves. We collect:

  • Contact details — name, work email address, telephone number, company name and job title, when you request a quotation, place an order or write to us.
  • Order and delivery details — billing and delivery addresses, order history, and the name and number of the person receiving a delivery.
  • Artwork you send us — logo files and brand guidelines, which may contain the names and contact details of your own colleagues.
  • Recipient lists — where you ask us to deliver gifts to individuals directly, the names, addresses and contact numbers you provide for them.
  • Payment details — handled by our payment processor. We do not store full card numbers on our own systems.
  • Website data — pages viewed, device and browser type, and approximate location derived from your IP address, collected through cookies (see section 9).

2. Why we collect it

We use personal data to prepare quotations, produce and deliver orders, arrange decoration and packaging with our suppliers, raise invoices and collect payment, answer questions, handle defects and returns, keep accounting and tax records as the law requires, and improve how the website works. Where you have agreed to it, we also use your contact details to tell you about our own products and seasonal availability.

3. Consent, and how to withdraw it

We collect and use personal data with your consent, or where the PDPA permits us to do so without it — for example to fulfil an order you have placed, or where the law requires us to keep a record.

You may withdraw consent for any purpose at any time by writing to sales@hinokii.sg. We will act on the request within a reasonable time and tell you what the consequences are. Withdrawing consent for us to use your contact details for marketing will not affect an order already in progress; withdrawing consent for us to process an order may mean we cannot complete it.

4. Recipient data you give us

If you give us the personal data of other people — your employees, your clients, or the recipients of a gift — you confirm that you are entitled to give it to us for that purpose, and that those people know their data is being used to arrange a delivery. We use recipient data only to make the delivery and then hold it no longer than we need to.

5. Who we share it with

We disclose personal data only where it is needed to do the work, and only to:

  • Decorators, printers and packaging suppliers, to produce your order.
  • Couriers and delivery partners, to deliver it.
  • Our payment processor and bank, to take payment.
  • Shopify, which hosts this website and our order records.
  • Our accountants and auditors, and any authority we are legally required to answer to.

We do not sell personal data, and we do not pass your contact details to other companies for their own marketing.

6. Data held outside Singapore

Some of the services we rely on store data outside Singapore. Shopify, which runs this website and holds our order records, processes data on servers located outside Singapore. Where we transfer personal data overseas we take reasonable steps to satisfy ourselves that the recipient is bound to a standard of protection comparable to the PDPA, as section 26 of the Act requires.

7. How long we keep it

We keep personal data only as long as there is a business or legal reason to. Quotation enquiries that do not become orders are deleted within twelve months. Order and accounting records are kept for five years, which is the period Singapore tax law requires. Recipient delivery lists are deleted within three months of delivery. Artwork files are kept while you remain a client so that a reorder matches the original, and deleted on request.

8. Keeping it safe, and what happens if something goes wrong

We use reasonable security arrangements to protect personal data against loss and unauthorised access, including access controls on our systems and encrypted connections to this website.

If a data breach occurs and we assess it to be notifiable under Part 6A of the PDPA, we will notify the Personal Data Protection Commission within three calendar days of that assessment, and notify affected individuals as soon as practicable, unless an exception in the Act applies.

9. Cookies

This website uses cookies to keep your cart working, to remember preferences, and to understand which pages are used. You can refuse or delete cookies in your browser settings. Some parts of the site will not work properly without them.

10. Access and correction

Under sections 21 and 22 of the PDPA you may ask us what personal data we hold about you and how we have used it in the past year, and you may ask us to correct anything inaccurate. Write to sales@hinokii.sg. We will respond within thirty days, or tell you when to expect a response if we cannot meet that. A reasonable fee may apply to an access request, and we will tell you the amount before doing the work.

11. Marketing messages and the Do Not Call Registry

We send marketing messages only to people who have asked for them or who have an existing business relationship with us, and every message carries a way to stop receiving them. We check Singapore telephone numbers against the Do Not Call Registry before sending marketing messages by telephone, SMS or fax, as Part 9 of the PDPA requires.

12. Data Protection Officer

Our Data Protection Officer is Calvin Foo. Questions, access requests, corrections, withdrawals of consent and complaints about how we handle personal data should go to sales@hinokii.sg, marked for the attention of the Data Protection Officer, or by post to the address below.

If you are not satisfied with our response you may raise the matter with the Personal Data Protection Commission at pdpc.gov.sg.

13. Changes

We update this policy when our practices change. The date at the foot of the page is the date of the current version. Material changes will be notified to clients with an order in progress.

HINOKII PTE. LTD.
3 Ang Mo Kio Street 62, LINK @ AMK #06-05, Singapore 569139 (by appointment)
sales@hinokii.sg · +65 8889 1472 · hinokii.sg

Last updated 23 August 2026.