Privacy Policy

Last updated 23 September 2026. This policy is reviewed periodically; if anything here is unclear, ask us before you order.

This Privacy Policy explains how Hydroponics Company Singapore (a division of Caruso Consulting Co Ltd, "we", "us" or "our") collects, uses, shares and protects your personal information when you visit nfthydroponics.asia or buy from us.

The privacy law that applies

Singapore's Personal Data Protection Act 2012 (PDPA) sets baseline requirements for organisations that collect, use, disclose and protect personal data. We handle personal data for reasonable business purposes and aim to meet the PDPA's notification, consent, access, correction, protection, retention and transfer obligations.

Privacy questions and requests are handled by our team at theteam@customersupport.care.

Information we collect

We only collect what we need to run the store and look after you.

• When you place an order: your name, email address, phone number, delivery address (street, city, postal code, province and country), any order notes, what you bought, the delivery method you chose, any discount code you used, and the amount you paid.
• Payment information: card payments are handled by Stripe Checkout and PayPal payments by PayPal, on their own systems. We receive confirmation that the payment went through and a payment reference. We never receive or store your card details.
• When you contact us: your name, email address, your message and anything you choose to include, whether you email us, use our contact or wholesale quote form, or leave feedback on our review page.
• When you browse: our hosting provider handles your IP address and basic details of each request so it can deliver pages to you.

How we use your information

• To process, pack and deliver your order, and to send your order confirmation and shipping emails.
• To answer your questions and handle returns, refunds and complaints.
• To prevent fraud and keep the store secure.
• To understand how the site is used so we can improve it, where you have accepted analytics cookies.
• To keep the business and tax records the law requires.

If we send you marketing emails, you can ask us to stop at any time by emailing theteam@customersupport.care.

Who we share it with

We share personal information only with the service providers we need to run the store, and only what each one needs:

• Stripe and PayPal, who take your payment.
• Vercel, who hosts this website and runs our checkout.
• Supabase, where our order records are stored.
• Resend, who sends our order emails.
• The warehouse and courier that pack and deliver your order, who receive the details needed to deliver it, such as your name, delivery address and phone number.
• Google, for the typefaces loaded by our pages.
• Our form system, served from app-marketing-command-centre.vercel.app, which receives what you send through our contact, wholesale quote and review feedback forms.

We may also disclose information where the law requires it. We do not sell your personal information.

Information stored or processed outside Singapore

Our company and some of our team are based outside Singapore, and several service providers may store or process information outside Singapore. We take reasonable steps to use providers and arrangements that protect transferred personal data to a standard comparable to the protection under the PDPA. Information processed overseas may also be subject to the laws of that country.

Cookies and browser storage

Your cart, delivery choice, discount code and short-lived checkout recovery record are kept in your own browser's local storage. Optional analytics or advertising tags are not currently configured. If they are enabled later, they will load only through the consent controls described in our Cookie Policy.

How long we keep it

We keep order records for as long as we need them for business, tax and accounting purposes. We keep messages and enquiries while they are useful. When we no longer need personal information, we delete it or make it anonymous.

Your rights

• Ask what personal information we hold about you, and ask for a copy of it.
• Ask us to correct information that is wrong or incomplete.
• Withdraw your consent to some uses of your information, such as marketing emails. We will explain if withdrawing it means we cannot provide a service, such as completing an order.
• Ask us to delete personal information we hold about you. This does not include information we must keep for administrative, legal or security reasons.

To make a request, email theteam@customersupport.care. We may need to confirm who you are before we act on it, and we will reply within the time the law allows.

If you are not happy with how we have handled your information, please tell us first so we can try to fix it. You can also contact Singapore's Personal Data Protection Commission.

Keeping it secure

This site uses an encrypted (HTTPS) connection, and your card details are handled by Stripe and PayPal rather than by us. No method of sending or storing information over the internet is completely secure, but we take care to protect yours.

Children's privacy

Our store is for adults. We do not knowingly collect personal information from children. If you believe a child has given us their information, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new "last updated" date.

Contact us

Hydroponics Company Singapore, a division of Caruso Consulting Co Ltd
Singapore administration office: 15 Beach Road, 2nd Floor, Singapore 189677, Singapore
International registered address: Caruso Consulting Co Ltd, Suite 31, 47 Moo 1, T. Nawoong, Meaung, Phetchaburi 76000, Thailand
Email: theteam@customersupport.care
International call centre: +66 (0) 98 391 3877