F!ESTA

Privacy Policy

We collect only what we need. We keep it secure. We don't sell it.

Last updated: 2026-05-22

Data controller

F!ESTA - operated by GOLDSTAR EAST PTE. LTD.
151 Chin Swee Road, #02-04A, Manhattan House
Singapore 169876
Singapore UEN: 201810746H
Email: privacy@fiestasnus.com

What we collect

  • Account data: email, name, shipping/billing address, phone (optional)
  • Order data: products purchased, payment status, order number, invoice
  • Payment data: processed by our payment partner; we never store full card numbers
  • Browsing data: pages visited, products viewed, IP address, device/browser type - via cookies and analytics
  • Communications: emails you send us, support tickets
  • Age confirmation: we record that you confirmed you are 18+

Why we use it

  • Fulfill your order (contract performance) - shipping, customer service, returns
  • Comply with the law (legal obligation) - age verification, tax records, accounting
  • Protect F!ESTA and you (legitimate interest) - fraud prevention, security monitoring
  • Improve the site (legitimate interest, with consent for non-essential cookies) - analytics, error tracking
  • Marketing (consent only) - newsletter, product launches, drops

Who we share data with

  • Shopify - e-commerce platform
  • ShipAway / Ongoing WMS - fulfillment, Lithuania (EU)
  • Payment processor - for transactions
  • Klaviyo - email marketing, only if you subscribe (US, SCCs in place)
  • Analytics / advertising - only with your consent (Google Analytics, Meta, TikTok)

We never sell your data.

How long we keep it

  • Order records: as required by applicable accounting law
  • Account data: until you delete your account or 3 years of inactivity
  • Newsletter: until you unsubscribe
  • Analytics: aggregated after 26 months

Your rights (GDPR)

If you are based in the EU/EEA or the UK, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict or object to processing
  • Port your data to another service
  • Withdraw consent at any time
  • Lodge a complaint with your national data protection authority

To exercise any of these, email privacy@fiestasnus.com. We respond within 30 days.

International transfers

As a Singapore-based company serving the EU, your data is processed in Singapore and by EU/US service providers. We rely on Standard Contractual Clauses (SCCs) and Singapore's PDPA-aligned safeguards.

Cookies

See our Cookie Policy for details on which cookies we use and how to manage them.

Changes to this policy

We'll update this page if anything material changes. The "last updated" date at the top tells you when.