Privacy Policy

Nurul Mode — Personal Data Protection Standards | Last Updated: August 2, 2026 (Reviewed: September 2026)

Nurul Mode (www.nurulmode.com), commercially operated by FF COMMERCE LTD ("we", "us", "our"), operates this website including all related information, content, features, tools, products, and services (collectively, the "Services"). Nurul Mode is powered by Shopify, which provides the ecommerce platform that enables us to deliver our Services to you.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit, make a purchase, or communicate with us. Prepared primarily for customers in Singapore, this policy complies with applicable privacy laws, including the Singapore Personal Data Protection Act 2012 (PDPA) and regulatory guidance administered by the Personal Data Protection Commission (PDPC). For data protection purposes, FF COMMERCE LTD is the organization responsible for managing your personal data.

1. Personal Information We Collect

"Personal information" means data that identifies or can reasonably be linked to an individual in line with the PDPA. Anonymous or de-identified data is excluded. We collect or process the following categories:

2. How We Collect & Use Personal Information

Collection Channels: Directly from you (during account creation, checkout, or support contact), automatically via cookies and site diagnostics, and from authorized service providers or logistics partners.

Purposes of Processing:

• Providing Services: Fulfilling orders, handling payment processing, arranging international shipping, and facilitating returns/exchanges.
• Marketing: Delivering promotional communications, offers, and recommendations where permitted under PDPA consent rules.
• Security & Fraud Prevention: Verifying identities, safeguarding website integrity, and detecting unauthorized transactions.
• Customer Care: Sending dispatch updates, order confirmations, and addressing inquiries.
• Legal Obligations: Complying with regulatory requirements, tax laws, and enforcing corporate legal rights.

3. Consent & Withdrawal Under Singapore PDPA

Where required under the PDPA, we notify you of the purposes for collecting, using, or disclosing personal data and obtain your explicit or deemed consent. By voluntarily submitting personal data to place an order or communicate with us, you consent to our processing for those specified purposes.

Consent Withdrawal: You may withdraw your consent at any time by contacting us at info@nurulmode.com, subject to reasonable notice and contractual or legal retention requirements.

4. Disclosures & Platform Infrastructure

We share personal data with external service providers (logistics carriers, payment gateways, analytics providers), marketing partners where permitted, regulatory bodies if required by law, or corporate entities during mergers or business transfers.

Shopify Hosting: Our platform is hosted by Shopify Inc. Shopify processes data required for storefront management and platform optimization. Review the Shopify Consumer Privacy Policy or visit the Shopify Privacy Portal for details.

5. Data Security, Retention & International Transfers

We enforce administrative, physical, and technical controls to safeguard personal data. Data is retained strictly as long as necessary to fulfill business purposes or meet legal requirements, adhering to the Retention Limitation Obligation under the PDPA.

International Data Transfers: Personal information may be transferred to service providers operating outside Singapore. Under the PDPA Transfer Limitation Obligation, we take reasonable steps to ensure overseas recipients provide a standard of protection comparable to Singapore's PDPA.

6. Your PDPA Statutory Rights & Complaints

Subject to statutory exceptions, individuals in Singapore possess rights under the PDPA:

• Right of Access: Request access to personal data in our possession or control and details regarding its use over the past year.
• Right of Correction: Request correction of errors or omissions in your personal records.
• Withdrawal of Consent: Submit a request to withdraw consent for data processing.

To submit a privacy request, email info@nurulmode.com. Identity verification may be required. Unresolved privacy concerns can be lodged with Singapore's Personal Data Protection Commission (PDPC).

Data Controller Profile & Contact