Privacy Policy
Last updated: March 2026
The Xylo Archive (“we”, “our”) is committed to protecting your personal information. This policy explains what we collect, how we use it, and your rights under Singapore’s Personal Data Protection Act 2012 (PDPA).
What we collect
When you place an order, we collect:
- Your name and email address
- Your delivery address and postal code
- Your order and payment details (processed securely by HitPay — we do not store card numbers)
If you subscribe to our newsletter, we store your email address only.
How we use your data
- To fulfil and deliver your order
- To send you order confirmation and shipping notifications
- To send you occasional updates about new prints, if you have subscribed
We do not sell, rent, or share your data with third parties for marketing purposes.
Third-party services
We use HitPay for payment processing and Resend for transactional email. Each operates under their own privacy policies. We share only the minimum data necessary to complete your transaction.
Data retention
Order records are retained for seven years as required by Singapore accounting regulations. Newsletter subscribers may unsubscribe at any time by contacting us.
Your rights
Under the PDPA, you have the right to access, correct, or withdraw consent for your personal data. To exercise these rights, contact us at hello@xyloarchive.com.
Contact
The Xylo Archive, Singapore. hello@xyloarchive.com