Privacy policy
Last updated: 1 August 2026
Punching Bag Singapore collects the minimum personal data needed to sell you a punching bag and get it to you. This policy explains what we collect, why, and what you can ask us to do about it, in line with Singapore's Personal Data Protection Act.
What we collect
When you place an order
- Name, email address and phone number
- Delivery address and postal code (delivery orders only — self-collection orders do not need one)
- Order contents, totals and any notes you add
When you contact us
- Name, email address, and phone number if you provide one
- The content of your message
Automatically
- A session cookie that remembers what is in your cart. It contains no personal data and expires when you close your browser.
- Standard server logs (IP address, browser type, pages requested) retained briefly for security and troubleshooting.
What we do not collect
We do not collect NRIC or any identity document number, date of birth, financial account details, or any special category data. We do not run third-party advertising trackers or cross-site profiling scripts.
Why we use it
- To fulfil your order — process payment, arrange delivery or collection, and send your confirmation
- To answer your enquiry — reply to whatever you asked
- To meet legal obligations — retain transaction records for accounting and tax
- To send marketing — only if you explicitly opted in, and no more than monthly
Who we share it with
Only where it is necessary to complete what you asked for:
- Payment providers — to process your payment. They receive your name, email and the amount. Their own privacy terms govern that data.
- Delivery partners — your name, address and phone number, so they can deliver.
We do not sell, rent or trade personal data. We do not share it with advertising networks or data brokers.
How long we keep it
| Data | Retention | Why |
|---|---|---|
| Order records | 5 years | Accounting and tax obligations |
| Contact enquiries | 2 years | Warranty context and follow-up |
| Marketing consent | Until withdrawn | Proof of consent |
| Server logs | 30 days | Security and troubleshooting |
| Cart session | Until browser closes | So your cart works |
How we protect it
- The whole site runs over HTTPS
- Card details never reach our server
- Order records are stored outside the public web root and are not reachable by URL
- Email addresses on this website are encoded so that automated harvesters cannot read them
- Access to order data is limited to the people who need it to fulfil orders
Your rights under the PDPA
You may ask us to:
- Access the personal data we hold about you
- Correct anything inaccurate
- Withdraw consent for marketing, at any time
- Delete your data, subject to records we must retain by law
Email hello@punchbag.sg and we will respond within 30 days. There is no charge for a reasonable request.
Cookies
We use one cookie: a session cookie named PBSG that keeps your shopping cart working as you move between pages. It holds no personal data, is not used for tracking, and expires when you close your browser. Because it is strictly necessary for the site to function, no consent banner is required — and there is nothing to opt out of.
Changes to this policy
If we change anything material, we will update the date at the top of this page. Substantial changes affecting how we use existing data will be notified by email to anyone affected.
Contact
Questions about this policy, or about data we hold:
Punching Bag Singapore
1092 Lower Delta Road, #06-10, Singapore 169203
hello@punchbag.sg
+65 6372 1581
Privacy & Your Data — FAQ
What personal data do you collect?
Only what an order or an enquiry requires: your name, email address, phone number and — for deliveries — your address. We do not collect date of birth, NRIC or any identity document, and we never ask for them.
Do you store my credit card details?
No. Card payments are handled entirely on the payment provider's own secure page. Card numbers never reach our server and we could not store them if we wanted to. PayNow and bank transfers happen directly between your bank and ours.
Do you share my data with anyone?
Only with the parties needed to complete your order: the payment provider that processes your payment, and the delivery service that brings your order. We do not sell, rent or trade personal data, and we do not share it for advertising.
How long do you keep my information?
Order records are kept for five years to meet accounting and tax obligations. Contact-form enquiries are kept for two years. Marketing consent is kept until you withdraw it. After that, data is deleted.
How do I request deletion of my data?
Email hello@punchbag.sg and we will action it within 30 days. Note that we may need to retain order records where the law requires it, in which case we will tell you exactly what is being kept and why.