Privacy policy
Last updated 22 September 2026.
Who is responsible
Fluffee Company Singapore, a division of Caruso Consulting Co Ltd, Suite 28, 380 Jln Besar, Singapore 209000. Privacy enquiries: theteam@customersupport.care.
What we collect
When you start or place an order we collect your name, email, phone number, delivery address, order contents, delivery choice and payment status. When you contact us, we collect the information you provide.
We do not receive or store your card number. Stripe or PayPal processes payment on its own service.
Why we use it
We use personal data to validate checkout, process and fulfil orders, send confirmations and tracking, handle returns and complaints, prevent fraud, keep required business records and answer support requests.
Who receives it
Relevant data may be shared with the payment provider, the supplier and delivery partner fulfilling the order, transactional email and order-storage providers, and support services. Analytics data is collected only after consent. We do not sell personal data.
Overseas processing
Some providers may process data outside Singapore. We require processing arrangements intended to provide protection comparable to the Personal Data Protection Act 2012, subject to applicable exceptions.
Retention and security
We use reasonable security arrangements and stop retaining personal data when it is no longer needed for a legal or business purpose. Business and transaction records are retained for at least five years where required by Singapore tax rules. Support correspondence is normally retained for two years unless a longer period is needed for an active dispute or legal obligation.
Your choices and rights
You may withdraw consent to optional analytics at any time. Subject to the PDPA and its exceptions, you may ask for access to personal data in our possession or control, information about its use or disclosure in the preceding year, or correction of an error or omission. Email us to make a request.
Concerns
Please contact us first so we can investigate. Information about Singapore's data protection framework is available from the Personal Data Protection Commission at pdpc.gov.sg.
Microsoft Clarity analytics
Microsoft Clarity stays off until you choose to enable it here. With your permission, Clarity helps us understand public page use through analytics, heatmaps and session recordings. Microsoft receives usage data as an independent data controller and handles it under its Privacy Statement, including its described service-improvement and advertising-related uses. Text and sensitive fields are masked; checkout, account and other sensitive routes are excluded.
Advertising storage is denied and Clarity's advertising integrations are disconnected. Your choice is remembered in this browser for up to 180 days. Older Google-only choices do not enable Clarity. You can turn Clarity off here at any time; withdrawal stops future recording after a page reload and clears its first-party cookies. It does not delete data already received. Contact us using the contact details on this website about privacy or data requests.
Optional Clarity analytics is off.
Google measurement choices
This website's Google measurement follows its existing regional consent defaults. These choices are separate from Microsoft Clarity. You can decline Google measurement, allow Google Analytics alone, or allow analytics and advertising measurement when configured. Google receives usage data under the Google Privacy Policy. Declining updates Google's consent signals. Where an existing Google tag is already active, denied-mode requests can continue without optional storage; changing this choice does not delete data already received.