Privacy notice

The Sins Vault is operated by The Trading Sins Private Limited (UEN: 202541213K). This notice covers the store’s customer accounts, catalogue, orders and fulfilment.

Information we collect

When you register, we collect your email address, chosen user ID and a securely derived password hash. We store email-verification status, temporary verification/reset tokens as hashes, and login sessions. If you save a shipping address, we store the recipient’s name, contact number and address.

Reviews and feedback

We invite feedback after completed purchases and may send one reminder. You can decline using the invitation link. Reviews are stored privately for now. We collect your rating, comment, optional display name, purchase-verification link and publication choice. Publication permission is optional and can be withdrawn by editing through your review link while valid or contacting our DPO. We do not publish your email, address or order reference. Owner tests are excluded from public reviews. Review links expire after 30 days; original access links are removed from stored email text after expiry. Feedback is retained only while needed for customer service, the stated publication purpose or applicable legal obligations, with periodic retention review.

How we use it

We use this information to operate your account, send verification and password-reset messages, and retain the shipping details you provide for future fulfilment. Live product checkout and owner-only sandbox tests store order items, prices, discount usage, delivery choice, a shipping-address snapshot, accepted policy version and payment references/status. Live payment verification updates stock and queues an order confirmation email. Fulfilment records may include courier/tracking or agreed MRT station/time. Owner-only live connection checks store a S$1 payment reference, amount and verified status separately from product orders; these checks use real money and do not create product orders. Account email is not used to enrol you in marketing.

Services and protection

Cloudflare hosts the website and database. Resend delivers account and order-confirmation emails. HitPay processes live product payments and owner-only sandbox tests, as well as separate live S$1 connection checks, using references, currency and amounts; card details are entered on its hosted checkout rather than stored by this website. These services process information needed to provide their functions and may process it outside Singapore. We use secure connections, password hashing and restricted access to account records. The essential login cookie keeps you signed in for up to seven days. Request-rate counters help prevent abuse.

Updates, access and deletion

You can update your saved shipping address in your account. For questions about your personal data, access, corrections, withdrawal of consent or account deletion, contact our Data Protection Officer at thetradingsins@gmail.com or our business Telegram. We may need to retain transaction records and other information for legal or legitimate business purposes after an account is closed. We will explain any applicable limits when handling your request. We update this notice when our data handling changes.

Language preference

Your English or Chinese selection is saved in this browser’s local storage so it can be used across customer pages. It is not sent to a translation service. Clear your browser’s site data to remove this preference.

Updated 21 October 2026.