Select Page

Privacy Policy

everland merchandise store  ·  everland.reginasong.com

Last updated: 12 October 2026

1. Introduction

This Privacy Policy explains how Play by NANA Pte Ltd (“we”, “us” or “our”), a company incorporated in Singapore, collects, uses, discloses and protects personal data when you visit the everland merchandise store at everland.reginasong.com (the “Site”) or buy our products.

We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and, where they apply to you, other data protection laws such as the EU and UK General Data Protection Regulation (“GDPR”) and US state privacy laws. By using the Site or placing an order, you acknowledge that you have read this policy.

2. Personal data we collect

Information you give us:

  • Identity and contact details: name, email address and phone number;
  • Delivery and billing addresses;
  • Order details: items purchased, sizes, amounts paid and order history;
  • Account details, if you create an account;
  • Messages you send us, such as support or refund requests, including any photos you attach; and
  • Your marketing preferences.

Payment information. Payments are handled by Stripe. We do not collect or store your full card number or security code. We receive limited information from Stripe, such as your payment status, transaction ID, card brand and the last four digits of your card.

Information collected automatically: your IP address, device and browser type, operating system, pages viewed, links clicked, referring website and the date and time of your visit, collected through cookies and similar technologies (see section 5).

Information from others: delivery status information from our shipping carriers, and fraud-prevention signals from Stripe.

We do not intentionally collect sensitive personal data, and ask that you do not send it to us.

3. How we use your personal data

We use your personal data to:

  • process your order, take payment, arrange delivery and send order and dispatch updates;
  • handle refunds, replacements and customer enquiries;
  • detect and prevent fraud, abuse and security incidents;
  • comply with legal, tax and accounting obligations;
  • operate, maintain and improve the Site and our products, including by analysing how the Site is used;
  • send you marketing emails about everland merchandise and related news, where you have agreed to receive them; and
  • establish, exercise or defend legal claims.

4. Our legal bases

In Singapore, we collect, use and disclose your personal data with your consent, including consent you give by providing it to us for a purpose that is obvious from the circumstances (such as supplying your address so we can deliver your order), or where the PDPA otherwise allows, for example where it is necessary for our legitimate interests or to comply with the law.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performing our contract with you (processing and delivering orders); our legitimate interests (preventing fraud, securing and improving the Site and handling queries); your consent (marketing emails and non-essential cookies, which you can withdraw at any time); and compliance with legal obligations (tax and accounting records).

5. Cookies and similar technologies

The Site uses cookies and similar technologies. These fall into the following categories:

  • Essential cookies keep the Site working, for example remembering what is in your cart and keeping checkout secure. These cannot be switched off.
  • Analytics cookies help us understand how visitors use the Site so we can improve it.
  • Marketing cookies, if used, help us measure and show relevant advertising.

Where required by law, we will ask for your consent before using non-essential cookies. You can also control cookies through your browser settings, although blocking some cookies may affect how the Site works.

6. Who we share your personal data with

We do not sell your personal data. We share it only as needed with:

  • Stripe, to process payments and help prevent fraud. Stripe acts under its own privacy policy for its own purposes in addition to processing on our behalf;
  • Shipping carriers and fulfilment partners, to deliver your order (they receive your name, address, phone number and email);
  • Service providers that host the Site, provide our e-commerce platform, send emails, provide analytics and customer support tools, and otherwise help us run the business, under obligations to protect your data;
  • Professional advisers, such as lawyers, accountants and auditors;
  • Authorities, where we are required or permitted by law, such as to respond to lawful requests, or to protect our rights, safety and property; and
  • A successor business, if we are involved in a merger, acquisition or sale of assets, subject to this policy continuing to apply.

7. International transfers

We are based in Singapore, and our customers and service providers are in many countries. Your personal data may be transferred to, stored and processed in countries outside where you live, including Singapore and the United States. Where we transfer personal data out of Singapore, we take steps to ensure it receives a standard of protection comparable to that under the PDPA, for example through contractual safeguards. For transfers from the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses where required.

8. How long we keep your personal data

We keep personal data only as long as needed for the purposes in this policy or as required by law. Order and payment records are generally kept for five to seven years to meet tax and accounting requirements. Customer support messages are kept for as long as needed to resolve your matter and for a reasonable period afterwards. Marketing details are kept until you unsubscribe or ask us to delete them. When data is no longer needed, we delete or anonymise it.

9. Security

We use reasonable administrative, technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and restricting access to those who need it. Payment details are handled by Stripe, which maintains industry-standard security certification. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach occurs that is likely to cause you significant harm, we will notify you and the relevant authorities as required by law.

10. Your rights

Depending on where you live, you may have the right to:

  • ask for access to the personal data we hold about you and how it has been used;
  • ask us to correct inaccurate or incomplete data;
  • withdraw your consent to our collection, use or disclosure of your data, bearing in mind that this may mean we can no longer fulfil your order or provide certain services;
  • ask us to delete your data, restrict or object to certain processing, or provide your data in a portable format (rights available under GDPR and certain other laws);
  • opt out of marketing communications at any time; and
  • not be discriminated against for exercising your privacy rights.

To exercise any of these rights, email us at admin@reginasong.com. We may need to verify your identity first, and we aim to respond within 30 days. We may decline requests where the law allows or requires, and will explain why if we do.

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Personal Data Protection Commission of Singapore or, if you are in the EEA or UK, to your local data protection authority.

US residents. Depending on your state, you may have additional rights to know, access, correct and delete your personal information, and to opt out of its sale or sharing for targeted advertising. We do not sell personal information. If we use advertising cookies, you may opt out through our cookie settings or by emailing us.

11. Marketing communications

We only send marketing emails to people who have chosen to receive them. You can unsubscribe at any time using the link in any marketing email or by emailing us. You will still receive essential messages about your orders.

12. Children

The Site is not directed at children under 13, and we do not knowingly collect their personal data. Anyone under 18 should obtain a parent’s or guardian’s permission before placing an order. If you believe a child has given us personal data without appropriate consent, please contact us and we will delete it.

13. Links to other websites

The Site may link to third-party websites, including the websites of our service providers. We are not responsible for their privacy practices and encourage you to read their policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on the Site with the “Last updated” date at the top. If we make significant changes, we will take reasonable steps to notify you, and where required, seek your consent.

15. Contact us and our Data Protection Officer

For questions about this policy, to exercise your rights, or to contact our Data Protection Officer, please reach out to:

Play by NANA Pte Ltd

Attention: Data Protection Officer

Email: admin@reginasong.com

Website: everland.reginasong.com