Privacy policy
Last updated: 7th May 2026
good totes operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). good totes is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
What we collect
- Identity: name, email, phone, shipping + billing address
- Order: what you bought, when, payment method (we never see full card numbers — Shopify Payments handles those)
- Account: login email, password (encrypted), points balance if you're on our loyalty program
- Browsing: pages visited, device, referral source (via cookies + analytics)
- Anything you tell us: when you message support, sign up for newsletters, or leave a review
We don't collect anything we don't need.
How we use it
- Ship your order and resolve issues if something goes wrong
- Reply to your messages
- Send marketing emails (only if you opted in — unsubscribe any time, link in every email)
- Improve the site, products, and customer experience
- Comply with tax + accounting requirements
We never sell your data. Full stop.
Who we share with
We share only what's needed to deliver your order or run the business:
- 3PL warehouses (to pick + pack)
- Couriers (to ship — name + address only)
- Payment processors (Shopify Payments)
- Email tools (Klaviyo, for marketing if you opted in)
- Customer support tools (Richpanel)
- Analytics tools (Google Analytics, Meta Pixel — anonymised where possible)
These partners are bound to handle your data only for the purposes we instruct.
Cookies + tracking
We use cookies for:
- Cart functionality (essential — can't shop without these)
- Analytics (so we know which pages people read)
- Marketing pixels (so ads are relevant, not random)
You can disable non-essential cookies in your browser. The site still works.
How long we keep it
- Order + transaction records: 7 years (Singapore tax law)
- Account data: until you ask us to delete it, or 3 years of inactivity
- Marketing preferences: until you unsubscribe
- Support tickets: 2 years for quality + reference
Your rights (PDPA)
Under Singapore's Personal Data Protection Act, you can:
- Ask us what data we hold on you
- Ask us to correct anything that's wrong
- Ask us to delete your data (subject to tax retention rules)
- Withdraw consent for marketing any time
- Lodge a complaint with the PDPC if we mishandle your data
To exercise any of these, email help@goodtotes.co. We'll reply within 30 days.
Children
Our site is for shoppers 18 and over. If you're under 18, please shop with a parent or guardian.
Changes to this policy
If we update this, we'll change the date at the top. Major changes — we'll email you if we have your address.
Contact
Email help@goodtotes.co for any privacy questions. We will reply within 30 days.
