Privacy Policy

The Xylo Archive (“we”, “our”) is committed to protecting your personal information. This policy explains what we collect, how we use it, and your rights under Singapore’s Personal Data Protection Act 2012 (PDPA).

What we collect

When you place an order, we collect:

• Your name and email address
• Your delivery address and postal code
• Your order and payment details (processed securely by HitPay — we do not store card numbers)

If you subscribe to our newsletter, we store your email address only.

How we use your data

• To fulfil and deliver your order
• To send you order confirmation and shipping notifications
• To send you occasional updates about new prints, if you have subscribed

We do not sell or rent your personal data. We do share a limited, hashed set of it with our advertising provider to measure advertising, as described under Advertising below.

Third-party services

We use HitPay for payment processing and Resend for transactional email. Each operates under their own privacy policies. We share only the minimum data necessary to complete your transaction.

Advertising

We use the Meta Pixel and Meta's Conversions API to measure how our advertising on Facebook and Instagram performs, and to show our prints to people who have visited this site. This tells us which adverts lead to orders, so we are not advertising blind.

The pixel sets cookies in your browser (_fbp and _fbc) that give your visit an anonymous identifier. When you place an order, submit a commission enquiry, or subscribe, we also send Meta a record of that action from our server. Identifying details in it — your email address, phone number, name and postal code — are irreversibly hashed before they are sent; Meta uses the hashes only to recognise an existing account and cannot read the original values from them. We never send your delivery address, your delivery notes, or your payment details.

You can limit this through your Facebook or Instagram ad preferences, or by blocking cookies in your browser. Doing so does not affect your ability to browse or order.

Data retention

Order records are retained for seven years as required by Singapore accounting regulations. Newsletter subscribers may unsubscribe at any time by contacting us.

Your rights

Under the PDPA, you have the right to access, correct, or withdraw consent for your personal data. To exercise these rights, contact us at hello@xyloarchive.com.

Contact

The Xylo Archive, Singapore. hello@xyloarchive.com