Privacy Notices
Last updated: November 10, 2026
This page adds to our Privacy Policy and forms part of it. It explains who we share information with, how long we keep it, and the specific rights of customers in the United States and Singapore.
Who we share information with
To run our store we use service providers who process personal information on our behalf, including: Shopify (store hosting, checkout and customer accounts); PayPal and other payment processors shown at checkout (payments; we never see or store your full card number); Our order-fulfillment partners and suppliers (to fulfill and ship your order; they receive your name, shipping address, phone number and order details); shipping carriers and customs brokers (delivery and customs clearance); Judge.me (product reviews, if you leave one); and Shopify Email (order and marketing emails). Some of these providers are located outside the country you live in. We do not sell your personal information for money.
How long we keep it
We keep order and transaction records for as long as needed for tax, accounting and legal purposes, generally up to 7 years. We keep customer support messages for up to 3 years after the last contact. If you unsubscribe from marketing, we keep your email address on a suppression list so we do not email you again. Analytics and cookie data are kept for shorter periods set by the tools that collect them. When information is no longer needed, we delete or anonymize it.
Cookies
We and Shopify use cookies and similar technologies to make the store work (for example your cart and checkout), to remember your preferences, to understand how the Site is used, and, where permitted, for advertising. You can control cookies through your browser settings and, where available, our cookie banner. Blocking essential cookies may stop the cart or checkout from working. See Your Privacy Choices to opt out of targeted advertising.
Marketing messages
We send marketing emails only if you have signed up or agreed to receive them, and every marketing email includes an unsubscribe link. We do not currently send marketing text messages or make marketing calls. If we start, we will ask for your consent first and, for Singapore numbers, check the Do Not Call Registry as required by law.
Notice for United States residents
Depending on your state (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws), you may have the rights described in "Your Rights and Choices", including to know, access, correct, delete and port your information, and to opt out of targeted advertising, "sale" or "sharing". In the last 12 months we have collected the categories of information listed in "Personal Information We Collect or Process", for the purposes described above. We do not use or disclose sensitive personal information to infer characteristics about you. We do not knowingly sell or share the personal information of anyone under 16. California residents may also ask, once a year and free of charge, for information about any disclosure of personal information to third parties for their direct marketing purposes ("Shine the Light"). To make any request, email support@sassolume.com. We will respond within the time required by law, usually 45 days. If we deny your request, you may appeal by replying to our decision, and we will respond to your appeal within the time required by law.
Notice for Singapore residents (PDPA)
We handle your personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).
- Consent and purposes: we collect, use and disclose your personal data for the purposes in this policy, mainly to process and deliver your order, provide customer support and, if you agree, send you marketing. By placing an order you consent to these uses. We will ask again before using your data for a new purpose.
- Withdrawing consent: you can withdraw your consent at any time by emailing us. We will tell you what withdrawal means for you (for example, we may not be able to complete an order without a delivery address) and act on it within a reasonable time.
- Access and correction: you can ask for a copy of your personal data, for how it has been used or disclosed in the past year, or for a correction. We aim to respond within 30 days and will tell you if we need longer. We may charge a reasonable fee for access requests, and will tell you the amount first.
- Transfers outside Singapore: some of our providers process data outside Singapore. When we transfer your data, we take steps, including contractual protections, to make sure it receives a standard of protection comparable to the PDPA.
- Data breaches: if a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as required by law.
- Data Protection Officer: you can contact our Data Protection Officer at support@sassolume.com (subject: "Data Protection Officer"). If you are not satisfied with our response, you can contact the Personal Data Protection Commission (PDPC).
Contact
For privacy questions or requests, email support@sassolume.com.