- Introduction
Trailfirestove respects the privacy of individuals who visit our website, purchase our products, or contact us regarding our services. This Privacy Policy outlines how we collect, use, disclose, store, and manage personal data in connection with our website and business activities.
We process personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA), the European Union’s General Data Protection Regulation (GDPR) (where applicable), and relevant data protection laws and regulations in the United Kingdom and other countries/regions where we operate.
By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where the law requires consent, we will seek your consent separately. Merely using our website does not, in itself, constitute your consent to the various data processing activities described in this policy.
- Data Controller
Trailfirestove acts as the data controller, responsible for determining the purposes and means of processing personal data collected through our website and business activities, and is subject to the relevant legal framework.
Data Controller: Trailfirestove
Address: 333A Orchard Road, Mandarin Gallery, #02-22
Phone: +65 8902 7220
Email: stove@trailfirestove.com
Website: www.trailfirestove.com
If you have any privacy-related questions, wish to access or correct your personal data, or have any inquiries regarding this policy, please contact us using the details provided above.
- Personal Data We Collect
Depending on how you interact with Trailfirestove, we may collect the following categories of personal data:
Contact Information
Full name (surname and given name).
Email address.
Phone number.
Billing and shipping addresses.
Order Information
Products purchased, quantities, and order numbers.
Order date, transaction amount, and payment status.
Delivery preferences and related fulfillment information.
Correspondence regarding purchases, returns, or order-related inquiries.
Payment-Related Information
Payment transactions on our website are processed by Stripe. Depending on the payment method and the nature of the transaction, the information required to process a payment may include billing details, payment method information, transaction identifiers, and payment status. Payment card information submitted via the Stripe payment interface is handled in accordance with Stripe’s applicable privacy documentation and processing arrangements. We receive information related to transactions, which is necessary for managing orders and reconciling payments.
Website and Device Information
When you visit our website, certain information may be collected automatically, including your IP address, browser type, device information, access times, pages visited, and related website activity. The specific information collected depends on the website features used and your cookie settings.
Customer Communications
We may retain records of emails you send us, content submitted via contact forms, and other forms of communication, as well as information reasonably necessary to respond to your inquiries.
We do not intentionally collect personal data that is unnecessary for the purposes described in this policy.
- Purposes of Processing and Legal Basis
We process personal data only for relevant business purposes and where there is an applicable legal basis to do so.
These purposes may include:
Order Management: Receiving and managing orders, confirming purchases, and maintaining transaction records.
Payment Processing: Arranging payment authorization, processing transactions, managing refunds, and reconciling payments.
Delivery Management: Preparing orders, arranging delivery, and providing relevant logistics tracking information.
Customer Service: Responding to inquiries about products or orders, and handling complaints and return requests.
Website Operations: Maintaining website functionality, diagnosing technical issues, and understanding overall website usage.
Fraud Prevention and Transaction Review: Identifying unusual activity and addressing potential unauthorized transactions.
Legal Compliance: Maintaining records and responding to lawful requests from competent authorities.
Marketing Communications: Sending promotional emails, provided there is a valid legal basis and—where required—consent has been obtained.
For individuals protected by the General Data Protection Regulation (GDPR), the legal basis for processing may vary depending on the specific activity, including the performance of a contract, compliance with legal obligations, the pursuit of legitimate interests, or the individual’s consent. Where we process data based on “legitimate interests,” we carefully weigh those interests against the rights and freedoms of the individuals concerned. In accordance with Singapore’s Personal Data Protection Act (PDPA), we comply with legal requirements regarding consent, notification, the purposes for processing, and other relevant matters when collecting, using, and disclosing personal data.
- Payment Processing via Stripe
Trailfirestove uses Stripe as its payment processing service provider to facilitate purchases made by users through our website.
When you place an order, relevant personal information and transaction data may be transmitted to Stripe for the purpose of processing the payment. Depending on the specific transaction and payment method, this information may include your name, email address, billing details, transaction amount, order number, and information related to your chosen payment method.
Stripe may process personal data for the following purposes:
Processing and managing payments.
Notifying you of transaction outcomes.
Facilitating refunds and account reconciliation.
Identifying and reviewing potential fraudulent activity.
Complying with applicable legal and regulatory obligations.
In certain activities, Stripe acts as a “data processor” under our instructions; in other activities—determined at its own discretion, including specific compliance and anti-fraud functions—Stripe acts as an “independent data controller.” Stripe’s processing of personal data is also governed by its own applicable privacy terms.
For more information, please refer to the Stripe Privacy Policy.
When Stripe acts as an independent data controller, Trailfirestove does not determine the data retention periods or the purposes for which the data is processed.
- Disclosure of Personal Data
Where necessary and lawful, we may disclose relevant personal data to the following recipients:
Stripe: For payment processing, transaction management, and related activities.
Shipping and Fulfillment Providers: For order preparation, dispatch, delivery, and logistics tracking.
Website Hosting and Service Providers: For website operation, maintenance, and customer communication.
Professional Advisors: Where reasonably necessary for accounting, legal, or business management purposes.
Public Authorities and Regulatory Bodies: When required by applicable law or upon receipt of a lawful request.
We disclose only the information relevant to the stated purpose of the disclosure, in compliance with applicable legal requirements and the terms of relevant service agreements.
In the ordinary course of our retail operations, we do not sell personal data to third parties.
- International Data Transfers
Trailfirestove is headquartered in Singapore and provides services to customers in Europe. Consequently, personal data may be processed in Singapore, as well as in countries or regions where our service providers or payment processing partners are located.
Where the General Data Protection Regulation (GDPR) or other applicable data protection laws impose requirements regarding international data transfers, we will implement lawful transfer mechanisms as necessary. Depending on the circumstances, this may include an applicable “adequacy decision,” approved standard contractual clauses, or other recognized data transfer mechanisms.
We comply with Singapore’s requirements regarding the transfer of personal data outside of Singapore.
Information concerning data transfer arrangements involving Stripe can be found in their published legal and privacy documentation.
- Retention of Personal Data
Trailfirestove retains personal data only for as long as is reasonably necessary to fulfill the purposes for which it was collected, including compliance with accounting, tax, contractual, and legal requirements.
Our data retention periods are as follows:
Order and Transaction Records
Order details, invoices, transaction references, and related accounting records are generally retained for up to seven years following the completion of the relevant transaction or order. If a longer retention period is required for accounting, tax, legal proceedings, or other legitimate record-keeping purposes, data will be retained for as long as necessary. Where applicable law prescribes a different retention period, that legal requirement shall take precedence.
Customer Service Correspondence
Routine customer service emails and inquiry records are generally retained for up to 24 months after the matter has been resolved. Exceptions may apply if continued retention is necessary due to outstanding issues, complaints, legal proceedings, or other legitimate purposes.
Account Information
For customer accounts, account information is retained for as long as the account remains active. Following the closure of an account, relevant personal data is generally retained for up to 24 months; however, it may be kept for a longer period if necessary to process incomplete orders, fulfill legal obligations, or establish, exercise, or defend legal claims.
Website Logs
Routine website logs and diagnostic records are generally retained for up to 12 months. They may be kept for a longer period if required for incident investigation, maintaining website records, or compliance with applicable law. Cookie Information
The retention period for a cookie depends on its purpose and configuration. The use of non-essential cookies is subject to applicable consent requirements. For further details, please refer to our Cookie Policy; where applicable, you may also manage your preferences using our cookie preference tool.
Marketing Preferences
Where we send marketing communications, we retain the information necessary to manage your subscription preferences and record any opt-outs (unsubscribing). This information is kept for a reasonable period required to honor these preferences and comply with applicable legal requirements.
Once the relevant retention period expires, personal data will be deleted, anonymized, or otherwise processed in accordance with applicable law, unless further retention is required by law.
- Cookies and Similar Technologies
Our website may use cookies and similar technologies to support core website functionality, remember user preferences, understand how the website is used, and facilitate other features as described in our cookie settings.
Where applicable law requires consent, non-essential cookies will only be enabled if you choose to accept them. You may adjust your preferences using the cookie controls provided on the website or through your browser settings.
Certain website features—including payment-related functions provided by Stripe—may involve the use of cookies or similar technologies operated by the respective service providers. The use of such technologies is subject to applicable legal requirements and the privacy policies of those service providers.
For further details, please refer to our Cookie Policy.
- Data Protection Measures
We have implemented appropriate organizational and access control measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.
Access to personal data is granted only when necessary for the performance of specific job duties or for other legitimate purposes. Furthermore, we require service providers who process personal data on our behalf to operate under appropriate contractual arrangements and data protection mechanisms.
In the event of a personal data breach that triggers a notification obligation under applicable law, we will assess the incident and fulfill our notification requirements within the timeframes prescribed by law.
- Your Data Protection Rights
Depending on your geographical location and applicable law, you may have the following rights:
To request access to the personal data we hold about you.
To request the correction of inaccurate or incomplete personal data.
To request the deletion of personal data, subject to legal conditions.
To request the restriction of certain data processing activities.
To object to data processing based on “legitimate interests,” where applicable.
To request a copy of specific personal data in a portable format, subject to legal conditions.
To withdraw your consent, in cases where data processing is based on “consent.”
To object to direct marketing and request that such marketing activities cease.
To lodge a complaint with the relevant data protection supervisory authority.
The exercise of these rights is subject to applicable legal conditions and exceptions. For example, we may need to retain certain transaction records to fulfill legal obligations or to establish, exercise, or defend legal claims.
To submit a request, please contact stove@trailfirestove.com. Please specify the nature of your request and provide sufficient information for us to identify the relevant records. We may request additional information if reasonably necessary to verify your identity.
We will respond within the timeframe stipulated by applicable law.
If you are located in the European Union, you may contact the competent supervisory authority in the place where you reside, work, or where the alleged infringement occurred. Individuals in the United Kingdom may, where applicable, contact the UK Information Commissioner’s Office (ICO).
In Singapore, you may contact the Personal Data Protection Commission (PDPC) regarding matters within its jurisdiction.
- Personal Data of Children
Our website is intended for individuals who are legally eligible to make purchases under applicable law. We do not knowingly collect personal data from children in circumstances where such collection is prohibited by law or requires prior authorization that has not been obtained.
If you believe that a child has provided us with personal data in circumstances where such data should not have been collected, please contact us so that we may assess the situation and take appropriate action in accordance with applicable law.
- Third-Party Websites and Services
Our website may contain links to external websites or services. These websites may have their own privacy policies and data processing practices. Trailfirestove is only responsible for its own data processing activities and has no control over the independent privacy practices of external websites. We recommend that you review the relevant privacy information of any third-party service provider before providing them with your personal data directly.
- Changes to This Privacy Policy
We may update this Privacy Policy as our business practices, website features, or applicable legal requirements evolve.
The latest version will be posted on this page, along with the date of the most recent update. If applicable law requires additional notice or consent for such changes, we will take the necessary steps to comply.
- Contact Us
If you have any questions regarding this Privacy Policy, requests concerning your personal data, or other privacy-related matters, please contact us via the following:
Email: stove@trailfirestove.com
We will review your privacy-related inquiries and respond within the timeframes stipulated by applicable law.