Privacy policy
Last updated: 16 August 2026
Punching Bag Singapore collects the minimum personal data needed to sell you a punching bag and get it to you. This policy explains what we collect, why, and what you can ask us to do about it, in line with Singapore's Personal Data Protection Act.
What we collect
When you place an order
- Name, email address and phone number
- Delivery address and postal code (delivery orders only — self-collection orders do not need one)
- Order contents, totals and any notes you add
When you contact us
- Name, email address, and phone number if you provide one
- The content of your message
Automatically
- A session cookie that remembers what is in your cart. It contains no personal data and expires when you close your browser.
- Standard server logs (IP address, browser type, pages requested) retained briefly for security and troubleshooting.
- Anonymous usage measurements from Google Analytics and Microsoft Clarity — which pages were viewed, how long for, roughly where in the world the visit came from, and how the page was used. See Cookies and analytics below.
What we do not collect
We do not collect NRIC or any identity document number, date of birth, financial account details, or any special category data. We do not run advertising trackers, we do not sell or share data with advertisers, and we do not build profiles of you across other websites.
Why we use it
- To fulfil your order — process payment, arrange delivery or collection, and send your confirmation
- To answer your enquiry — reply to whatever you asked
- To meet legal obligations — retain transaction records for accounting and tax
- To send marketing — only if you explicitly opted in, and no more than monthly
Who we share it with
Only where it is necessary to complete what you asked for:
- Payment providers — to process your payment. They receive your name, email and the amount. Their own privacy terms govern that data.
- Delivery partners — your name, address and phone number, so they can deliver.
- Google and Microsoft — anonymous usage measurements only, never your name, address or order details. See Cookies and analytics.
We do not sell, rent or trade personal data. We do not share it with advertising networks or data brokers.
How long we keep it
| Data | Retention | Why |
|---|---|---|
| Order records | 5 years | Accounting and tax obligations |
| Contact enquiries | 2 years | Warranty context and follow-up |
| Marketing consent | Until withdrawn | Proof of consent |
| Server logs | 30 days | Security and troubleshooting |
| Cart session | Until browser closes | So your cart works |
How we protect it
- The whole site runs over HTTPS
- Card details never reach our server
- Order records are stored in a directory the web server is configured to refuse, under filenames that cannot be guessed, so they are not reachable by URL
- Email addresses on this website are encoded so that automated harvesters cannot read them
- Access to order data is limited to the people who need it to fulfil orders
Your rights under the PDPA
You may ask us to:
- Access the personal data we hold about you
- Correct anything inaccurate
- Withdraw consent for marketing, at any time
- Delete your data, subject to records we must retain by law
Email hello@punchbag.sg and we will respond within 30 days. There is no charge for a reasonable request.
Cookies and analytics
The cart cookie
A session cookie named PBSG keeps your shopping cart working as you move between pages. It holds no personal data, is not used for tracking, and expires when you close your browser. It is strictly necessary for the shop to function, so there is nothing to opt out of.
Measurement
We use two measurement tools to understand how the site is used, so we can fix what is confusing and stock what people actually want. Neither is used for advertising.
- Google Analytics 4 — counts visits, which pages were read, and which orders completed. It sets cookies beginning
_ga. Google states that Analytics 4 does not log or store individual IP addresses, and we cannot identify you from these reports. - Microsoft Clarity — records anonymous playbacks of how pages were used: mouse movement, clicks and scrolling. Anything you type into a form is masked before it leaves your browser, so your checkout details are not captured, and your name, address and phone number are masked on the order confirmation page as well. We use it to find layout problems on phones.
Both providers process this data on our behalf and may hold it outside Singapore. Their own terms apply: Google Privacy Policy and Microsoft Privacy Statement.
Turning measurement off
Nothing here is needed for the site to work, so you are free to block it:
- Install Google's opt-out browser add-on
- Block third-party cookies in your browser settings
- Use any standard content or script blocker
Blocking them costs you nothing. Browsing, the cart and checkout all work exactly the same.
Changes to this policy
If we change anything material, we will update the date at the top of this page. Substantial changes affecting how we use existing data will be notified by email to anyone affected.
Contact
Questions about this policy, or about data we hold:
Punching Bag Singapore
1092 Lower Delta Road, #06-10, Singapore 169203
hello@punchbag.sg
+65 6372 1581
Privacy & Your Data — FAQ
What personal data do you collect?
Only what an order or an enquiry requires: your name, email address, phone number and — for deliveries — your address. We do not collect date of birth, NRIC or any identity document, and we never ask for them.
Do you store my credit card details?
No. Card payments are handled entirely on the payment provider's own secure page. Card numbers never reach our server and we could not store them if we wanted to. PayNow and bank transfers happen directly between your bank and ours.
Do you share my data with anyone?
Only with the parties needed to complete your order: the payment provider that processes your payment, and the delivery service that brings your order. We also use Google Analytics and Microsoft Clarity to measure how the website is used, but they receive anonymous usage data only — never your name, address or order details. We do not sell, rent or trade personal data, and we do not share it for advertising.
How long do you keep my information?
Order records are kept for at least five years to meet accounting and tax obligations, and are reviewed and removed by hand after that. Email enquiries are kept for around two years. Marketing consent is kept until you withdraw it. You can ask us to delete your data at any time and we will action it within 30 days, apart from records the law requires us to retain.
How do I request deletion of my data?
Email hello@punchbag.sg and we will action it within 30 days. Note that we may need to retain order records where the law requires it, in which case we will tell you exactly what is being kept and why.