This policy explains what personal data we collect through this website (shop.imagixor.xyz), why, who it is shared with, and your rights. Imagixor is a brand of ARCSTONE COLLECTIVE PTE. LTD..
Who is responsible for your data
The organisation responsible for your personal data (the “data controller”) is ARCSTONE COLLECTIVE PTE. LTD., a company registered in Singapore (UEN 202539223R), 190 Clemenceau Avenue, #06-08 Singapore Shopping Centre, Singapore 239924. This policy is based on Singapore’s Personal Data Protection Act 2012 (PDPA), and also covers rights that buyers in the US, the EU and the UK may have.
Data Protection Officer: you can reach our Data Protection Officer at hello@imagixor.com.
What we collect
- Order details: your name, shipping and billing address, email address, phone number if you give it, and what you bought.
- Payment details: we don’t receive card details. Crypto payments are handled by NOWPayments, which receives the order amount and reference and sees the wallet address and transaction you pay with. Public blockchains record transactions permanently, and nobody can delete them.
- Messages you send us by email or through the contact form.
- Newsletter: your email address, only if you sign up.
- Technical data: IP address, browser and device information, and cookies, used to run the shop (for example, the cart), keep the site secure and remember your cookie choices. You can manage optional cookies in the cookie banner.
We collect this data from you directly, from your browser when you use the site, and from our payment and fulfilment providers about your order.
Why we use it
- To take, make, ship and support your order, including replacements and refunds.
- To answer your messages.
- To send our newsletter, if you signed up. You can unsubscribe at any time.
- To keep the site secure and prevent fraud and abuse.
- To meet our legal, tax and accounting obligations.
Who we share it with
We share personal data only with service providers who need it to run the shop, and only as much as they need:
- Printify and its print partners and shipping carriers: to make and deliver your order (name, address, contact details, order contents).
- NOWPayments: to process your crypto payment and any crypto refund.
- Namecheap: our website hosting provider, where the site and its database are stored.
- Our email providers, including Google (Gmail), which sends the site’s order and account emails.
- Website tools that run on our site: Wordfence and Loginizer (security and login protection, which process IP addresses; Wordfence may check IP addresses against its threat data), Complianz (cookie consent, which records your cookie choices), MailPoet (newsletter sign-ups, if you subscribe), Fluent Forms (the contact form) and LiteSpeed Cache (page caching to make the site faster).
We may also disclose data where the law requires it, or to protect our rights. We don’t sell your personal data.
International transfers
We are based in Singapore, and our providers process data in other countries, including the United States. When we transfer personal data out of Singapore, we take steps to make sure it gets a standard of protection comparable to the PDPA, as the PDPA requires. For data from the EU or UK, we rely on the safeguards our providers offer for such transfers, such as standard contractual clauses, where those apply.
How long we keep it
We keep order records as long as needed for the order, customer service and our legal, tax and accounting obligations. Messages are kept as long as needed to deal with them. Newsletter data is kept until you unsubscribe. Security logs are kept for a limited time.
Security
We use reasonable security measures, such as HTTPS, login protection and a firewall, and we limit who can access personal data. No website or online service is completely secure, so we can’t guarantee absolute security.
Your rights
Under the PDPA you can ask to access or correct your personal data, and you can withdraw consent you have given, for example to the newsletter. Email hello@imagixor.com. We may need to confirm your identity before acting on a request. We’ll reply within the time the law allows.
US residents (including California)
- In the past 12 months we have collected these categories of personal information: identifiers (name, email, address, IP address), customer records (contact and shipping details), commercial information (orders), internet activity (how you use our site, security logs) and communications you send us. We don’t collect sensitive personal information for the purpose of inferring characteristics about you.
- We use it for the purposes listed above and disclose it only to the service providers listed above for those purposes.
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
- Depending on your state of residence, including under the California Consumer Privacy Act as amended by the CPRA, you may have the right to know what personal information we hold about you, to get a copy, to have it corrected or deleted, and not to be treated differently for using these rights.
- To make a request, email hello@imagixor.com with the subject “Privacy request”. We’ll confirm your identity by matching the details you give with what we hold. An authorised agent can make a request for you with your signed permission.
EU and UK residents
- We rely on these legal bases: performing our contract with you (your order), our legal obligations (for example tax records), our legitimate interests (running and securing the site, preventing fraud, answering messages), and your consent (newsletter and optional cookies).
- You have the right to access, correct or delete your data, to restrict or object to how we use it, to data portability, and to withdraw consent at any time.
- You can complain to your local data protection authority. Please contact us first so we can try to help.
Children
This shop is not aimed at children, and we don’t knowingly collect personal data from children under 16. If you think a child has given us data, contact us and we’ll delete it.
Changes
We may update this policy. The current version is always on this page. Last updated: 23 October 2026.
Draft – review before launch. This page is general information, not legal advice.