Andy's respects your privacy. This notice explains what personal data we collect through this website and related services, why we use it, when we disclose it, and the choices available to you.
This notice applies when you browse or use our website, contact us, create an account, place or link an order, submit payment proof, book installation, use support chat, or access a restricted DIY guide.
Third-party platforms such as Shopee, Lazada and Carousell have their own privacy notices for data they collect. When information from an external order is entered into or linked with this website, this notice applies to our handling of that information.
Please obscure unrelated balances, transactions or account information before uploading payment proof wherever possible.
We collect, use and disclose personal data for reasonable purposes connected with our business, including to:
Where consent is required, you may withdraw it with reasonable notice. Withdrawal may prevent us from providing a service that depends on the relevant data—for example, we cannot arrange installation without an address and contact number.
We do not sell your personal data. We may disclose only what is reasonably needed to:
If a provider processes data outside Singapore, we will take reasonable steps to ensure the transferred data receives a standard of protection comparable to that required under Singapore’s Personal Data Protection Act, subject to applicable exceptions.
The website uses an essential session cookie to keep you signed in, maintain your shopping bag and support core website functions. Blocking it may prevent checkout, account and guide features from working. We do not currently use advertising cookies or sell browsing profiles.
We keep personal data only for as long as reasonably needed for the purposes above or to meet legal, accounting, dispute and record-keeping requirements. Transaction and accounting records may be retained for at least the period required by Singapore law. When identifiable data is no longer needed, we will delete it, anonymise it or remove the means of association where reasonably practicable.
We use reasonable administrative and technical safeguards, including access-controlled administration pages, password hashing and restricted guide/payment-proof routes. No internet service is completely risk-free, so please use a unique password and do not share your account or order ID.
Subject to applicable exceptions, you may ask to access personal data we hold about you, learn how it was used or disclosed during the preceding year, correct an error or omission, or withdraw consent. We may need to verify your identity and may charge a reasonable fee where permitted for an access request.
Send privacy questions or requests to andyshopsg@gmail.com with the subject Privacy request. This is also the public contact for the person responsible for our data-protection practices.
We may update this notice when our services or legal obligations change. The revised version will be posted here with a new “Last updated” date. Material changes may also be highlighted on the website where appropriate.