Privacy policy
# Privacy Policy
**Effective date: 14 July 2026**
Treat Protocol Co. (“Treat Protocol”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit **treatprotocol.co**, make a purchase, create an account, contact us, subscribe to marketing communications or otherwise interact with us.
## 1. Personal data we collect
Depending on how you interact with us, we may collect the following personal data.
### Information you provide directly
This may include:
- Your name;
- Email address and telephone number;
- Delivery and billing addresses;
- Account and login information;
- Order, return and refund information;
- Communications, enquiries, reviews and customer-support requests;
- Marketing preferences; and
- Photographs, videos or other evidence submitted in connection with a product or delivery issue.
### Order and payment information
When you place an order, we collect information about the products purchased, order value, discounts, delivery method and transaction status.
Payments are processed through Shopify and third-party payment providers. We generally do not receive or store your complete payment-card number. Payment providers may separately collect and process payment information under their own privacy policies.
### Information collected automatically
When you visit our website, we and our service providers may automatically collect information including:
- Your IP address;
- Device and browser type;
- Operating system;
- Pages viewed and links selected;
- Referring website;
- Approximate location derived from your IP address;
- Shopping-cart and checkout activity; and
- Cookie identifiers and similar technical information.
## 2. How we use personal data
We may collect, use or disclose personal data for purposes including:
- Processing and fulfilling orders;
- Arranging payment, delivery, returns, replacements and refunds;
- Creating and managing customer accounts;
- Communicating about orders, deliveries and account activity;
- Responding to enquiries, complaints and customer-support requests;
- Detecting, investigating and preventing fraud, misuse and security incidents;
- Maintaining, securing and improving our website, products and services;
- Understanding website traffic and customer preferences;
- Personalising your shopping experience;
- Sending marketing communications where you have consented or where otherwise permitted by law;
- Managing promotions, surveys and product reviews;
- Maintaining business, financial and tax records;
- Enforcing our terms, policies and legal rights;
- Complying with legal, regulatory and reporting requirements; and
- Carrying out purposes reasonably related to the above.
We will only collect, use or disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances and as permitted by applicable law.
## 3. Consent and marketing communications
By voluntarily providing personal data for a stated purpose, you consent to our collection, use and disclosure of that information for that purpose, subject to applicable law.
If you subscribe to marketing communications, we may use your contact details to send information about products, offers and updates. You may unsubscribe at any time by:
- Selecting the unsubscribe link in a marketing email; or
- Emailing **hello@treatprotocol.co**.
Withdrawing consent for marketing will not prevent us from sending essential non-marketing communications relating to your orders, transactions, account, security or customer-service requests.
You may withdraw consent to other uses of your personal data by contacting us. We will explain any consequences of withdrawal and will stop the relevant collection, use or disclosure within a reasonable period, unless continued processing is permitted or required by law.
## 4. Cookies and similar technologies
Our website uses cookies and similar technologies to:
- Keep the website and checkout functioning;
- Remember your preferences and shopping cart;
- Maintain security and prevent fraud;
- Measure website traffic and performance;
- Understand how visitors use our website; and
- Support advertising or personalisation where enabled and permitted.
Some cookies are necessary for the website to operate. Other cookies may be optional, depending on your location and our website settings.
You may manage cookies through your browser or any cookie-preference tools displayed on our website. Blocking certain cookies may affect website, account or checkout functionality.
## 5. How we disclose personal data
We may disclose personal data to trusted third parties where reasonably necessary, including:
- **Shopify**, which hosts our online store and processes customer and transaction data;
- Payment processors and financial institutions;
- Delivery companies, fulfilment providers and logistics partners;
- Website, cloud-storage and information-technology providers;
- Customer-support, email and communications providers;
- Analytics, security, fraud-prevention and performance providers;
- Advertising and marketing providers, where enabled and permitted;
- Professional advisers, including accountants, auditors, insurers and legal advisers;
- Government authorities, regulators, courts or law-enforcement agencies where required or permitted by law; and
- A purchaser, investor or successor in connection with a proposed or completed sale, merger, restructuring or transfer of our business or assets.
Service providers are authorised to process personal data only for the services they provide or as otherwise permitted by applicable law and their agreements with us.
We do not disclose personal data to unrelated third parties for their independent purposes without consent, unless permitted or required by law.
## 6. Shopify
Our store is hosted by Shopify. Shopify processes personal data to provide its platform, checkout, security and related services. Depending on the Shopify services and features used, Shopify may also process information for its own purposes.
For more information about how Shopify handles personal data and the privacy choices available to you, please review the **Shopify Consumer Privacy Policy**:
https://privacy.shopify.com/en
## 7. Overseas transfers
Shopify and some of our service providers may process or store personal data outside Singapore.
Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the recipient provides a standard of protection comparable to that required under Singapore’s Personal Data Protection Act 2012, unless an exception applies.
## 8. Data retention
We retain personal data only for as long as it is reasonably required to:
- Fulfil the purposes described in this policy;
- Maintain business and transaction records;
- Provide customer service;
- Resolve disputes;
- Prevent fraud and misuse; and
- Meet legal, accounting, tax or regulatory obligations.
When personal data is no longer required for a legal or business purpose, we will take reasonable steps to delete, destroy or anonymise it.
## 9. Data security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss or disposal.
However, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your account credentials confidential and should contact us promptly if you believe your account or personal data has been compromised.
If a data breach is legally notifiable, we will notify the Personal Data Protection Commission and affected individuals as required under applicable law.
## 10. Accuracy, access and correction
You should ensure that the personal data you provide is accurate and current.
Subject to applicable law and relevant exceptions, you may request:
- Access to personal data in our possession or control;
- Information about how your personal data was used or disclosed during the preceding 12 months; or
- Correction of an error or omission in your personal data.
We may need to verify your identity before processing a request. Where permitted by law, we may charge a reasonable fee for an access request and will inform you of the estimated fee in advance.
To submit a request, email **hello@treatprotocol.co**.
## 11. Children’s privacy
Our website and products are intended for adults purchasing products for their pets. We do not knowingly collect personal data directly from children under 18 without the consent of a parent or legal guardian.
If you believe a child has provided personal data to us without appropriate consent, contact us so that we can review and address the matter.
## 12. Third-party websites
Our website may contain links to third-party websites, platforms or services. We do not control and are not responsible for their privacy practices. You should review the privacy policy of each third party before providing personal data.
## 13. Changes to this policy
We may update this Privacy Policy to reflect changes to our practices, services, technology or legal obligations.
The updated policy will be posted on this page with a revised effective date. Where appropriate or legally required, we may provide additional notice of material changes.
## 14. Data Protection Officer and contact
For questions, feedback, complaints, consent withdrawals, or requests to access or correct personal data, contact our Data Protection Officer at:
**Treat Protocol Co.**
**Email:** hello@treatprotocol.co
**Website:** https://treatprotocol.co
Please include sufficient information for us to understand and respond to your request. We aim to acknowledge privacy-related requests and complaints promptly and will respond within a reasonable period.