Privacy policy

Privacy policy

This policy explains how Kids Village Asia Pte. Ltd. (UEN 202009660Z), which runs LittleShop ("we", "us"), collects, uses and protects your personal data when you visit littleshop.toys, buy from us or contact us. We follow Singapore's Personal Data Protection Act 2012 (PDPA).

1. What we collect

  • Order details: your name, email, phone number, delivery and billing address, and what you bought.
  • Payment: handled by our payment providers (Shopify Payments, PayPal, Shop Pay, Google Pay and any other method shown at checkout). We never see or store your full card number.
  • Account and rewards: login details, order history and LittlePAL points, if you create an account.
  • Messages: anything you send us by email, chat or contact form.
  • Reviews: your name and review, if you leave one.
  • Device and browsing data: your IP address, browser type, the pages you visit and how you arrived, collected through cookies and similar tools.

2. Why we use it

  • To process, ship and track your order, and to handle returns and refunds.
  • To answer your questions and provide customer service.
  • To run your account and LittlePAL rewards.
  • To prevent fraud and keep the website secure.
  • To understand how the site is used, so we can improve it.
  • To send you news and offers, only if you've opted in. You can unsubscribe at any time using the link in any email.
  • To meet our legal, tax and accounting obligations.

We only use your data for these purposes, or for others we tell you about and you agree to.

3. Children
Our toys are for children, but our website is for parents and other adults. We don't knowingly collect personal data from children. If you think a child has given us personal data, email us and we'll delete it.

4. Who we share it with
We share only what each service needs to do its job:

  • Shopify, which hosts our store and checkout.
  • Payment providers, to take payment.
  • Couriers and delivery partners, to deliver your order.
  • Service apps: Smile.io for LittlePAL rewards, Judge.me for reviews, and Shopify Email for newsletters.
  • Analytics and advertising tools, such as Google and Meta, if you accept those cookies.
  • Professional advisers and authorities, where the law requires it.

We don't sell your personal data.

5. Data stored outside Singapore
Some of these providers store data outside Singapore, including in Canada, the United States and the European Union. When we transfer your data overseas, we take steps to make sure it is protected to a standard comparable to the PDPA, as the PDPA requires.

6. Cookies
We use cookies that the store needs in order to work (for example, to remember your cart). With your consent, we also use analytics and marketing cookies. You can change your choice through the cookie banner or in your browser settings. Blocking essential cookies may stop the cart and checkout from working.

7. How long we keep it
We keep order and payment records for at least 5 years, as Singapore tax law requires. We keep other data only as long as we need it for the purposes above, then delete or anonymise it.

8. How we protect it
Our checkout runs on Shopify, which is PCI-DSS compliant, and all data travels over an encrypted (HTTPS) connection. Only staff who need your data for their work can access it.
If a data breach is likely to cause you significant harm, we'll tell you and the Personal Data Protection Commission, as the PDPA requires.

9. Your rights
You can ask us to:

  • tell you what personal data we hold about you and how we've used it in the past year;
  • correct data that is wrong or incomplete;
  • withdraw your consent to us using your data, including for marketing.

If you withdraw consent, we may not be able to provide some services, such as processing an open order. We'll explain what that means for you before we act on it.
We'll reply within 30 days. We may charge a reasonable fee for an access request, and we'll tell you the amount first.

10. Contact our Data Protection Officer
Email: shop@littleshop.toys (subject: "Attn: Data Protection Officer")
Post: Data Protection Officer, Kids Village Asia Pte. Ltd., 11 Kallang Place, #02-08, Singapore 339155

If you're not satisfied with our reply, you can contact the Personal Data Protection Commission at www.pdpc.gov.sg.

11. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last changed.

Last updated: 8 October 2026