Privacy
Policy.

1. Who this policy applies to

This policy applies to personal data handled by PikStiq in connection with our website, custom sticker services, ready-made sticker packs, order tracking, design approvals, customer support and related business operations.

PikStiq operates from Singapore. Singapore’s Personal Data Protection Act 2012 (“PDPA”) is an important part of our privacy framework. If another law gives you additional mandatory rights because of where you live, those rights may also apply.

2. Personal data we may collect

Depending on how you use PikStiq, we may collect:

• your name, email address, telephone number and delivery address;
• photos, images and other content you upload for a custom order, which may contain identifiable people;
• custom text, design instructions, revision requests and design-proof responses;
• order details, chosen products, finishes, prices, order status, payment status and shipping or tracking information;
• records of consent and acceptance associated with an order;
• communications you send to us; and
• limited technical, security and server-log information generated when the website or hosting infrastructure is used.

We aim not to collect more personal data than is reasonably needed for the purposes described below.

Order-fulfilment consent is not treated as permission to post your source photos or customer-specific artwork publicly. If PikStiq wants to feature your content in a portfolio, advertisement or social-media post, we will seek separate permission unless you separately supplied the content for that public-use purpose.

3. Why we collect, use and disclose personal data

We may handle personal data to:

• create, manage and fulfil custom and ready-made sticker orders;
• transform submitted images into requested artwork and prepare design proofs;
• communicate about an order, approval, revision, production, delivery or support request;
• store submitted material securely enough for the production workflow and retrieve it when needed;
• prevent abuse, troubleshoot services, maintain security and investigate suspected fraud;
• keep business, accounting, dispute and legal records where reasonably necessary;
• comply with applicable laws, lawful requests or regulatory obligations; and
• where you separately opt in, send marketing or promotional communications.

Where consent is required, we seek to provide information that allows meaningful consent. In other situations, applicable law may permit or require processing without consent.

4. Photos and AI-assisted creative processing

For custom orders, PikStiq may use automated and AI-assisted creative tools together with human design and review. The purpose is to transform submitted images into the artwork or sticker design you asked us to create.

This processing may involve sending or making the relevant image available to third-party technology providers that support our production workflow. We do not need to disclose our proprietary prompts, tool configuration, production sequence or other trade know-how in order to explain the privacy purpose of the processing.

Before submitting a custom order, we ask you to confirm that you have permission to use the images and that you agree to this AI-assisted processing for order fulfilment.

5. People shown in uploaded photos

The person placing the order is responsible for ensuring they are entitled to submit the images. This includes obtaining any permission reasonably required from identifiable people shown in the images. If a child or minor is shown, the uploader must have appropriate parent, guardian or other lawful authority to submit and use that image.

If you believe an image containing you has been submitted without proper authority, contact PikStiq promptly through our official business contact channel so we can assess the situation.

6. Service providers and disclosure

We may disclose or make personal data available to service providers only where reasonably connected to the purposes above. Categories may include:

• website and cloud infrastructure providers;
• private file-storage providers;
• automated or AI-assisted creative technology providers used for custom production;
• email or communications providers when customer notifications are enabled;
• payment providers when online payments are enabled;
• couriers, fulfilment partners or professional advisers where needed.

When online payment is used, the payment provider processes the payment details needed to complete the transaction. PikStiq does not need to receive or store your full card number or banking credentials.

We may also disclose data where required or permitted by law, to protect legal rights, or in connection with a genuine business restructuring subject to appropriate safeguards.

7. Overseas processing and transfers

Some service providers or technical infrastructure may process or store data outside Singapore. Where the Singapore PDPA’s transfer requirements apply, PikStiq will take reasonable steps intended to ensure that transferred personal data receives a standard of protection comparable to the PDPA, subject to applicable legal exceptions.

International users should understand that information may therefore be processed in Singapore and in other countries used by our service providers.

8. Retention and deletion

We do not intend to keep personal data indefinitely without a business or legal reason. Source photos, working files and design materials may be retained while needed to fulfil the order, manage approvals, support a reasonable reprint or support period, resolve disputes, maintain security, or meet legal and business requirements.

Order, accounting and transaction records may need to be kept for longer than source images. When personal data is no longer reasonably needed for a business or legal purpose, we aim to delete it, anonymise it, or remove the means by which it can be associated with an individual, as appropriate.

9. Security

We use reasonable administrative and technical measures intended to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. No internet or storage system can be guaranteed completely secure, so we cannot promise absolute security.

If a data incident occurs, we will assess and respond to it in accordance with applicable legal obligations, including notification obligations where they apply.

10. Access, correction and other privacy requests

Subject to applicable law and exceptions, you may ask about personal data PikStiq holds about you and request correction of inaccurate or incomplete information. You may also ask us to consider deletion or withdrawal of consent where applicable.

Withdrawing consent may mean we can no longer provide part or all of a custom service, especially where the requested processing is necessary to create or fulfil the order. We may retain information where a legal or legitimate business reason requires us to do so.

We may take reasonable steps to verify your identity before responding to a privacy request.

11. Marketing versus order communications

Transactional communications needed to operate an order — for example an order receipt, design-proof notice, revision update or shipping information — are separate from marketing.

Promotional messages are optional. If you opt in to marketing, you can later ask to stop receiving it. Choosing not to receive marketing does not prevent us from sending communications reasonably necessary to service an existing order.

12. Children

PikStiq is not designed for children to place orders independently. Orders involving images of minors should be submitted by an adult who has the appropriate authority to do so.

13. Changes to this policy

We may update this Privacy Policy as our services, providers or legal obligations change. The current version and effective date will be posted on this page. Material changes will be handled in a manner appropriate to the circumstances and applicable law.

14. Privacy contact

For a privacy question, access/correction request, consent withdrawal, or concern about an uploaded image, contact the PikStiq data-protection contact through the official business contact method shown on our storefront or in your order communications.

Before public launch, PikStiq should publish a dedicated business contact email or equivalent public contact channel for data-protection enquiries and keep this policy aligned with the actual tools and vendors used in production.