PRIVACY POLICY

THEOS KYRIOS

Effective Date: 27 October 2026

1. Introduction

THEOS KYRIOS, operated by The Standard Room LLP ("we", "us" or "our"), respects the privacy of our customers and visitors.

This Privacy Policy explains how we collect, use, disclose, protect and retain personal data in connection with our website, online store, products and services.

We are committed to handling personal data responsibly and in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following information:

  • Name and contact details, including email address and telephone number.

  • Billing and delivery addresses.

  • Order details, purchase history and transaction records.

  • Payment confirmation and related transaction information.

  • Customer enquiries, correspondence and exchange requests.

  • Measurements, fitting preferences and other information voluntarily provided for our made-to-measure services.

  • Technical information collected through our website, such as cookies and browsing information, where applicable.

We generally collect only the information reasonably necessary to provide our products and services.

3. How We Use Your Personal Data

We may collect and use personal data for the following purposes:

a. Processing and fulfilling online purchases.

b. Verifying payments and maintaining transaction records.

c. Arranging delivery, shipment tracking and order fulfilment.

d. Responding to customer enquiries, complaints and feedback.

e. Processing eligible size exchanges, product issues and after-sales requests.

f. Providing made-to-measure consultations and related services.

g. Managing customer accounts and maintaining necessary business records.

h. Improving our website, products and customer service.

i. Complying with applicable legal, accounting, tax and regulatory requirements.

j. Sending promotional communications where you have provided the necessary consent or where otherwise permitted by applicable law.

We will not use personal data for unrelated purposes without the appropriate legal basis or consent where required.

4. Disclosure to Service Providers

To operate our business and fulfil customer orders, we may share relevant personal data with authorised third-party service providers, including:

  • EasyStore, which provides our online store and order management platform.

  • EasyParcel and relevant courier companies, including J&T Express, for shipping and delivery arrangements.

  • Payment and financial service providers involved in verifying or processing transactions.

  • IT, hosting, email, accounting and other service providers supporting our business operations.

Only information reasonably necessary for the relevant service will be shared.

We do not sell customer personal data to third parties.

Personal data may also be disclosed where required or permitted by applicable law.

5. Payment Information

Payments are processed or verified using the payment arrangements available through our store.

We may retain relevant payment confirmation details and transaction records for order verification, accounting and legal purposes.

Customers should not send confidential banking passwords, PINs or other sensitive authentication credentials to us.

6. Cookies and Website Technologies

Our website and its service providers may use cookies or similar technologies to support essential website functions, including shopping carts, customer sessions, security and website performance.

Additional analytics or marketing technologies may be used where enabled through our website platform or other services.

You may manage certain cookies through your browser settings. Disabling essential cookies may affect the operation of some website features.

Where consent is required for non-essential cookies or tracking technologies, we will seek it as applicable.

7. Protection of Personal Data

We take reasonable administrative, technical and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, modification, loss or disposal.

Access to customer information is limited to authorised persons and service providers who require it for legitimate business purposes.

While we take reasonable precautions, no electronic storage or transmission system can be guaranteed to be completely secure.

8. Retention of Personal Data

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, or where retention remains necessary for legitimate business or legal purposes.

Certain order, transaction and accounting records may be retained after delivery to support exchanges, customer enquiries, record-keeping and applicable legal obligations.

When personal data is no longer required, we will take reasonable steps to securely dispose of it or remove identifying information, as appropriate.

9. Access and Correction

You may request access to personal data held about you or request correction of inaccurate or incomplete personal data, subject to applicable legal requirements and exceptions.

Please submit your request using the contact details provided below.

We may request reasonable information to verify your identity before processing your request.

Where permitted by law, a reasonable administrative fee may apply to an access request. Any applicable fee will be communicated in advance.

10. Withdrawal of Consent

Where our collection, use or disclosure of personal data relies on your consent, you may withdraw that consent by contacting us in writing.

We will explain any likely consequences of the withdrawal and process your request within a reasonable period.

Depending on the nature of your request, withdrawing consent may affect our ability to process an outstanding order or provide certain services.

Withdrawal of consent does not affect our ability to retain or process personal data where permitted or required by law.

11. Overseas Processing and Transfers

Some service providers supporting our website, online store or business operations may process or store personal data outside Singapore.

Where personal data is transferred overseas, we will take appropriate steps to ensure that such transfers comply with applicable requirements under the PDPA, including requirements relating to comparable standards of protection.

12. Marketing Communications

We may occasionally provide information about our products, services or business updates through permitted communication channels.

Where consent is required for marketing communications, we will obtain it before sending such messages.

You may request to stop receiving promotional communications by contacting us or using an available unsubscribe mechanism.

Transactional communications relating to purchases, deliveries, exchanges or customer service may continue where necessary or otherwise permitted by law.

13. Third-Party Websites

Our website may contain links to third-party websites or services.

These websites may operate under their own privacy policies and practices. We encourage customers to review the relevant privacy notices before providing personal information to third parties.

14. Data Protection Contact

For enquiries, feedback, access or correction requests, withdrawal of consent, or concerns relating to personal data, please contact:

THEOS KYRIOS — Data Protection Officer

Operated by The Standard Room LLP

Email: contact.theoskyrios@gmail.com

Website: https://www.theoskyrios.com

Please include sufficient details in your enquiry so that we can assist you appropriately.

15. Updates to This Privacy Policy

We may review and update this Privacy Policy periodically to reflect changes in our business operations, service providers or applicable legal requirements.

The latest version will be published on our website with its effective date.

For further information regarding purchases, deliveries, exchanges and other conditions, please refer to our Terms of Service.

Effective Date: 27 October 2026