Last updated: 20 September 2026
Kavi TCG (“Kavi“, “we“, “us“) runs the online store at kavitcg.com. This Privacy Policy explains how we collect, use, disclose and protect your personal data in line with Singapore’s Personal Data Protection Act 2012 (“PDPA“). By using our website, creating an account or placing an order, you consent to your personal data being handled as described here.
1. Personal data we collect
- Account details: your name, email address, username and password (stored encrypted) when you sign up.
- Order details: billing and shipping name, address, phone number, email address and the items you buy.
- Payment details: payments are processed by our payment providers. We do not see or store your full card number.
- Communications: messages you send us by email, contact form or social media.
- Technical data: IP address, browser type, device information, pages viewed and cookies (see section 6).
2. How we use your personal data
- To process, pack, ship and track your orders, including pre-orders.
- To create and manage your account, order history and saved addresses.
- To handle returns, refunds, disputes and customer enquiries.
- To detect and prevent fraud, abuse and unauthorised transactions.
- To send service messages about your orders and account.
- To send marketing emails about new sets, restocks and promotions — only if you opt in. You can unsubscribe at any time using the link in each email.
- To improve our website, product range and customer service.
- To comply with legal, tax and accounting obligations.
3. Who we share it with
We do not sell your personal data. We share it only as needed to run the store:
- Payment providers [e.g. Stripe, PayPal, PayNow] to process payments.
- Delivery partners [e.g. SingPost, Ninja Van] to deliver your orders.
- Service providers such as our web host, email service and analytics tools, who process data on our behalf.
- Authorities, where required by law or to protect our rights.
Some of these providers may store or process data outside Singapore. Where that happens, we take reasonable steps to make sure your data receives protection comparable to the PDPA.
4. How long we keep it
We keep order and transaction records for as long as required for tax and accounting purposes (generally at least 5 years). Account data is kept until you ask us to delete your account. Other data is kept only as long as it is needed for the purposes above.
5. Protecting your data
We use reasonable security measures, including encrypted (HTTPS) connections, restricted admin access and trusted payment processors. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
6. Cookies
Our site uses cookies to keep your cart and login working, remember your preferences, and understand how the site is used. Essential cookies are required for the store to function. You can block or delete cookies in your browser settings, but parts of the site (such as checkout) may stop working.
7. Your rights
Under the PDPA you may:
- Request access to the personal data we hold about you and how it has been used in the past year.
- Request that we correct inaccurate or incomplete data.
- Withdraw your consent to our collection, use or disclosure of your data. We will tell you the likely consequences (for example, we may be unable to fulfil orders).
- Ask us to delete your account.
To make a request, email hello@kavitcg.com. We will respond within 30 days. We may charge a reasonable fee for access requests and will tell you the fee in advance.
8. Children
Our store is not directed at children under 13. If you are under 18, please use the site with the involvement of a parent or guardian.
9. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated.
10. Contact us
If you have questions or complaints about how we handle your personal data, contact us at:
Email: hello@kavitcg.com