M Luxury (Far East Plaza #03-128, 14 Scotts Road, Singapore 228213) collects personal data only to sell and buy bags with you. This notice explains what we collect, why, who processes it, how long we keep it and how to reach us, in line with Singapore's Personal Data Protection Act (PDPA).
Last updated: August 2026
What we collect
- Orders: your name, email, phone number and delivery address, the items bought and the amounts paid. Card and PayNow details are entered on Stripe's checkout page and never reach our servers.
- Enquiries and sourcing requests: your name, WhatsApp number, the details you type about the bag and the photos you upload.
- Newsletter: your email address, the language you chose and when you consented.
- Technical: the IP address of a request is used for rate limiting and login protection, and to detect abuse. We do not run advertising trackers or analytics cookies.
Why we use it
To reserve and deliver the item you bought, send order confirmations and receipts, answer your enquiry, make and record a quote, prevent fraud and abuse, and — only with your ticked consent — tell you about new arrivals and offers.
How long we keep it
- Enquiry names, WhatsApp numbers and photos: deleted 12 months after the enquiry is closed.
- Order delivery addresses: removed 90 days after the order is sent or collected.
- Order amounts and item codes: kept 5 years for accounting.
- Login attempt IP addresses: removed after 30 days.
- Abandoned photo uploads from an unsent enquiry: removed after 24 hours.
- Checkout reservation records: removed after 90 days.
- Newsletter: kept until you unsubscribe.
Who processes it for us
- Stripe Payments Singapore — online card and PayNow payments and receipts.
- Vercel — hosting of this website and storage of uploaded photos.
- Resend — sending order and enquiry emails.
- Neon — the database this site runs on.
Each processor acts on our instructions under its own data-protection terms. Your data is not sold or shared for advertising.
Access, correction and erasure
You may ask what personal data we hold about you, correct it, or have it erased, by messaging +65 9155 6398 on WhatsApp or emailing the shop. We respond within 30 days and can erase enquiry and order records by your email or phone number, except amounts we must keep for accounting.
WhatsApp: +65 9155 6398
Marketing consent
Our enquiry, sourcing and newsletter forms carry an unticked box for marketing messages. Leaving it unticked never affects your order or quote. You can withdraw consent at any time by replying STOP on WhatsApp, using the unsubscribe link in any email, or messaging us; we stop within 10 working days.
Cookies and local storage
We set a cookie to remember your language, a short-lived cookie during checkout, and a staff login cookie on the admin pages. Your cart is stored in your browser's local storage, not on our servers, until you check out.