Who we are and what this policy covers
Garrnish Private Limited (UEN 202538969W), trading as Garrnish, collects, uses and discloses personal data when you browse our website, buy or subscribe to products, contact us or interact with our marketing. This policy explains those activities and your choices.
Our store runs on Shopify. This policy covers Garrnish’s handling of personal data; other services may also process information under their own notices.
Personal data we collect and its sources
- From you: name, contact details, billing and delivery addresses, order details, account information, subscription choices, support messages, marketing preferences and consent records.
- Information you choose to share about your dog, such as size or feeding needs, when linked to your account or enquiry. Please avoid sending unnecessary personal or medical information about people.
- Automatically through the website: IP address, device/browser information, pages viewed, shopping activity and interactions with our website or messages, through cookies and similar technologies where permitted.
- From service providers: payment confirmations, transaction identifiers, delivery updates, subscription status and information needed to investigate fraud or support requests.
Shopify and payment providers process payment credentials. Garrnish does not intentionally store your full payment-card number. If you decline information needed to fulfil an order or manage a subscription, we may be unable to provide that service.
How and why we use personal data
- To process payments, fulfil orders, manage subscriptions, arrange delivery and handle cancellations, returns and refunds.
- To send order and renewal communications, respond to questions and provide customer support.
- To maintain accurate business records, meet legal obligations, resolve disputes and prevent misuse or fraud.
- To operate and improve the website and understand how visitors use it.
- To send marketing and personalise communications where you have consented or another lawful basis under Singapore law applies.
We notify you of the purposes for collecting, using or disclosing personal data and obtain consent where required. We do not require consent to unrelated marketing as a condition of purchasing.
Who receives personal data
We share information needed for the purposes above with providers of e-commerce hosting, payment processing, subscription management, delivery and fulfilment, customer support, email and marketing communications, advertising measurement, customer reviews, website analytics and website content services. We may also disclose data to professional advisers and public authorities where legally required or permitted, or in connection with a lawful business transfer subject to applicable safeguards.
Service providers receive access appropriate to their function and applicable contractual or legal obligations. If you ask us to share information with another party, we will do so in accordance with your instructions and applicable law.
Shopify’s role
Our store is hosted by Shopify, which processes personal data when you visit the store and make purchases. We use Shopify Network Intelligence and related enhanced services. Shopify uses information about your interactions with our store together with information about your interactions with other merchants and Shopify to provide and improve services, including personalisation and advertising.
To provide these services, information is shared with Shopify and relevant third parties, which may be located outside Singapore. Shopify processes some information for its own purposes as described in its Consumer Privacy Policy. Visit Shopify’s privacy portal to learn about its processing and available privacy choices.
Microsoft analytics
We use Microsoft Clarity to understand website interactions through usage metrics, heatmaps and session replays, and to improve our website and marketing. Cookies and similar technologies collect website usage information. Microsoft collects or receives personal data from us to provide Microsoft Advertising. For details of how Microsoft collects and uses information, see the Microsoft Privacy Statement.
Cookies, analytics and marketing choices
Cookies and similar technologies help operate checkout, remember preferences and, where enabled and permitted, measure website use and marketing performance, including page views, cart activity and purchases. You can manage cookies through your browser and any privacy controls provided on the site. Disabling necessary cookies may affect site functions.
Unsubscribe from marketing emails using the link in each email or contact care@garrnish.sg. We will still send service communications needed for your orders and subscriptions. Withdrawing marketing consent does not cancel an order or subscription.
Where we use telephone, SMS or WhatsApp marketing, we will obtain the necessary consent or rely on a lawful exception and comply with applicable Singapore Do Not Call requirements. Providing a delivery phone number alone is not consent to marketing.
International transfers
Shopify and other providers may process information outside Singapore. Where we transfer personal data overseas, we take the steps required under Singapore’s Personal Data Protection Act 2012 to ensure comparable protection, including appropriate contractual safeguards or a permitted exception.
Security, retention and data incidents
We use reasonable administrative, technical and physical measures to protect personal data. No internet transmission or storage system can be guaranteed completely secure. Please protect your account access and avoid sending payment-card details by email.
We retain identifiable personal data while needed for the notified purposes, including active subscriptions, customer support and legal or business recordkeeping. We stop retaining it, or remove its association with you, when those purposes no longer justify retention.
We assess data incidents and notify the Personal Data Protection Commission and affected individuals when required by law.
Access, correction and withdrawal of consent
Subject to applicable exceptions, you can request access to your personal data and information about its use or disclosure, correction of inaccurate or incomplete data, and withdrawal of consent. Contact our Data Protection Officer using the details below. We may reasonably verify your identity.
We respond as soon as reasonably possible. If we cannot respond to an access or correction request within 30 days, we will tell you in writing within that period when we expect to respond. We may charge a reasonable access fee where permitted, after explaining it in advance.
For consent withdrawal, we will explain likely consequences and stop the relevant processing within a reasonable time unless continued processing is permitted or required by law. Withdrawing information necessary to fulfil a service may affect our ability to provide it. You can also ask about deletion; legal retention duties and applicable exceptions may prevent immediate deletion.
Children, external sites and public reviews
The store is intended for adults making purchases for their dogs. We do not knowingly seek personal data from children. Contact us if you believe a child has provided personal data so we can assess and address it.
External websites have their own privacy practices. Content you deliberately post in a public review may be visible to others. Sending private support messages or photos does not give us permission to use identifiable customer material in marketing; we obtain separate permission for that use.
Changes and contact
We may update this policy to reflect changes in our practices or the law. We will publish the revised date and provide further notice or seek consent where required.
For privacy questions, complaints, access or correction requests, or consent withdrawal, contact: Data Protection Officer, Garrnish Private Limited, UEN 202538969W.
Email: care@garrnish.sg
Phone: +65 8980 1997
If we cannot resolve your concern, you may contact the Personal Data Protection Commission of Singapore.
