Privacy policy

Last updated: November 2025

We’re Altfolk Trading Pte. Ltd., operating as HexaCrunch®. This policy is here to explain, in plain English, how we handle your personal data. We comply with all relevant Singapore laws (PDPA) and international standards.

1. What Personal Data We Collect

If you are just browsing, we collect non-identifying data only. When you engage with our brand (place an order, sign up, or contact us), we may collect the following data, which is necessary to fulfill our service:

Category

Specific Data Points

Purpose of Collection

Identity & Contact

Your name, email address, phone number, and delivery address.

Order fulfillment, customer support, and sending updates/offers (if consented).

Financial/Transaction

Details regarding your purchase (e.g., items ordered, amount). We do not store or view your full credit card number.

Processing your payment and generating invoices/receipts.

Technical & Usage

Clicks, time spent, pages visited, IP address, and browser type.

Site improvement, security monitoring, and displaying relevant ads/offers.


2. How We Use Your Data

We rely on your data to perform four main functions:

  1. Contractual Fulfillment: To process your order, manage payment via our secure provider (Stripe/Shopify Payments), and ship the snacks to your designated address.
  2. Marketing & Communication: To send order updates and, with your explicit consent, send spicy offers, newsletters, and promotional materials.
  3. Site Improvement & Analytics: To understand what people like, troubleshoot issues, and enhance the functionality and user experience of our website.

  4. Legal Compliance & Security: To meet our obligations under Singapore law (including PDPA and IRAS requirements) and to prevent fraudulent transactions.

Crucially: We do not sell, rent, lease, or trade your personal information to third parties. Period.

3. Data Security and Protection (GMC Requirement)

We take the security of your data seriously. We use a combination of physical and technical measures to protect the information we collect:

  • Encryption (SSL): All sensitive data, including billing and shipping information, is encrypted and transmitted securely using industry-standard SSL (Secure Socket Layer) technology.
  • Secure Platforms: We use secure, industry-leading platforms like Shopify to host our store and manage your data, ensuring ongoing updates and protection against common vulnerabilities.

  • Payment Handlers: Financial transactions are securely handled directly by accredited third-party payment processors (Shopify Payments and Stripe). We do not store or have access to your full credit card details.

4. Who We Share Your Data With (Third Parties)

We only share data with third parties necessary to run our business, and they are required to protect your information at the same level we do.

Third-Party Category

Data Shared

Purpose

Payment Processors

Transaction details (not full card number)

To authorize and settle your payment.

Fulfillment & Shipping

Name, address, phone number

To generate shipping labels and deliver your order (e.g., local couriers).

Analytics/Marketing

Technical data (clicks, IP address, device type)

To measure site traffic, improve ads, and troubleshoot site performance.

 

5. Cross-Border Data Transfers

Yes, some of our necessary service providers (like Shopify and analytics tools) may host data outside of Singapore. We ensure that any tools or services we use that transfer data internationally are certified to provide a level of protection equivalent to or higher than the Singapore PDPA.

6. Data Retention

We keep your personal information only for as long as necessary to:

  • Fulfill your order and handle ongoing customer support.

  • Meet mandatory legal, tax, or accounting obligations (typically 5-7 years).

Once retention requirements are met, we either securely delete the data or anonymize it so it can no longer be linked to you.

7. Cookies and Tracking (The Digital Kind)

We use cookies (small text files placed on your device) to track clicks, improve site function, and personalize your experience.

  • You are in Control: Our website utilizes a cookie consent banner to allow you to manage or block non-essential tracking cookies.

  • If you block all cookies, some parts of the site may not work perfectly.

8. Your Rights

Under Singapore law, you have rights regarding your personal data. We commit to respecting them fully. You can:

  • Access: Ask what data we hold about you.
  • Correct: Request we update or fix inaccurate data.
  • Delete: Request the permanent deletion of your data (unless we have a mandatory legal obligation to keep it).

  • Withdraw Consent: Change your mind about receiving marketing communications at any time.

To exercise any of these rights, please email us directly: hello@hexacrunch.com.sg. We don't ghost, and we will respond promptly.

9. Contact Us

If you have any questions, data requests, or legal curiosity regarding this policy, please reach out.

Altfolk Trading Pte. Ltd. (HexaCrunch®)

Email: hello@hexacrunch.com.sg