Legal

Privacy Policy

Last updated: June 2025

Lavastone (operated by Submarine Singapore, "we", "us", "our") is committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA).

What We Collect

When you browse our website or place an order, we may collect your name, email address, phone number, delivery address, and order history. Payment transactions are processed by HitPay — we do not store card or PayNow account details. We also collect basic usage data (pages visited, browser type, IP address) via cookies to improve our website.

How We Use Your Data

  • Process and fulfil your orders
  • Send order confirmations and delivery updates
  • Respond to your enquiries
  • Send product updates or promotions, with your consent
  • Improve our website and services

We do not sell your personal data to third parties.

Who We Share It With

We share data only where necessary to operate our business:

  • HitPaypayment processing
  • Resendtransactional email delivery
  • Supabasesecure cloud database hosting
  • Vercelwebsite hosting

All providers are contractually required to protect your data.

Cookies

We use essential cookies to keep your shopping cart and session active. We do not use third-party advertising cookies. You may disable cookies in your browser settings, though this may affect site functionality.

Data Retention

Order records are retained for 7 years for accounting and legal compliance. Account data is retained until you request deletion. To request deletion, email us at hello@lavastone.sg.

Your Rights

Under the PDPA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Withdraw consent for marketing communications at any time

To exercise these rights, contact our Data Protection Officer at hello@lavastone.sg. We will respond within 5 business days.

Contact

Submarine Singapore
hello@lavastone.sg