Privacy policy

1. Who we are

The Shepherd’s Pie (“we”, “us”) bakes and sells shepherd’s pies for delivery and self-collect in Singapore, through this website. Our kitchen is at Block 3015, Bedok North Street 5, Shimei East Kitchen, #06-05, Singapore 486350.

This policy explains what personal data we collect when you visit, order or sign in, why we collect it, who we share it with, and your choices. It is written to meet Singapore’s Personal Data Protection Act 2012 (PDPA).

2. What we collect

Contact details: your name, email address, mobile number, and another number if you give one.
Delivery details: your address and postal code, or that you’ll self-collect, with the date and time you choose.
Order details: what you order, what you paid, your order notes and, for a gift, the recipient’s name, phone number and your message to them. Orders you placed on our previous website are kept here too, so you can see them in My account.
Payment details: how you paid and a payment reference. Card and PayNow payments are handled by our payment provider, Omise. We never see or store your full card number.
Sign-in details: if you use My account, your email address and the one-time codes we send you, stored in a scrambled form.
Your cart at checkout: once you’ve typed your email at checkout, with “Email me about new flavours and offers” ticked, we keep your cart and what you’ve filled in, so we can send you up to three reminders if you don’t finish, each with a link that puts your cart back. What you filled in is deleted a week after your last change, or once you’ve ordered and paid; the cart itself after 45 days. Untick the box, or choose “No thanks”, and it’s deleted straight away.
Rewards and referrals: the rewards and vouchers on your email address and the orders they were used on, your referral code, and, if a friend referred you, the link between the two of you. Each of you sees the other’s first name.
Where you came from: if you arrive from a search engine, social media, an ad or a campaign link, your browser remembers that source (the website, and campaign tags such as utm_source, gclid or fbclid) for 30 days. We save it with your order, along with whether you ordered on a phone or a computer, so we know which ads and links work.
Visits and ads: the pages you view, the pies you add to your cart and, when you order, what you bought and the amount, sent to Google, Meta (Facebook and Instagram) and TikTok through their tracking codes (see “Cookies and your browser”). With a paid order we also send them your email address and mobile number in a scrambled form (SHA-256), not as they are: they can only match it to people whose email or number they already have, to link the order to the ad you saw. We send a paid order to Meta and TikTok from our own server as well, with your network (IP) address, your browser’s details and their cookies, so the count doesn’t depend on your browser; once it’s sent, we delete those details from your order.
Questions in “Ask us”: what you type into the chat helper and its answers, with the page you asked from, kept for 180 days so we can see what customers want to know and improve our answers. Please don’t type personal details such as your address or card number into it.
Technical data: your IP address and browser details, used to keep the site secure and working, for example to limit repeated sign-in attempts.

3. How we use it

To take, bake and deliver your order, or have it ready for you to collect.
To work out the delivery charge from your postal code and check that we deliver there.
To take payment and prevent fraud.
To send your order confirmation, payment links and updates about your order.
To answer your questions and sort out any problems.
To show your orders in My account and fill in your details at checkout.
To run rewards and referrals: adding rewards once an order is delivered, taking them off your next order, and giving referral vouchers.
To improve our pies, this website and our service.
To see which of our ads work, and to show our ads to people likely to enjoy our pies.
To email you about new flavours and offers, only if you agree to it (see “Emails and offers”).

5. My account

You don’t need an account to order. My account shows the orders placed with your email address: you sign in with a 6-digit code we email to you, so there’s no password. When you’re signed in, checkout fills in your name, numbers and last delivery address for you.

We keep you signed in on that device for 90 days, using a cookie, unless you sign out.

6. Cookies and your browser

Your cart, the checkout form while you fill it in, and where you came from (see above) are kept in your own browser until you order (and your cart on our side too, for reminders, as described above). A conversation with “Ask us” is kept in that browser tab until you close it. If you sign in to My account, we set one cookie to keep you signed in. When you open your order from the link in our email, we set a cookie for that order’s page only, so its secret key doesn’t stay in the page’s address.

This website uses Google Tag Manager (with Google Analytics and Google Ads), the Meta pixel and the TikTok pixel. They set their own cookies to recognise your browser, count visits and link orders to ads. You can block them in your browser’s settings or with an ad blocker, and the shop still works. You can also change which ads you see in your Google, Facebook, Instagram and TikTok settings.

7. Emails and offers

We email you about your order: the payment link, the confirmation and any changes. These aren’t marketing.

At checkout, the box “Email me about new flavours and offers” is ticked for you. Untick it if you’d rather not hear from us. If you leave it ticked, we may email you offers. You can stop them at any time by unsubscribing from the email or by contacting us.

If you have rewards or vouchers, we email you about them: when a referral earns you a voucher, and before your rewards run out. Every one of these emails has a link to stop them.

You can also sign up for our emails on our website without ordering. We keep the email address you give us, and your first name if you add it, and use them only to send you three short welcome emails over about a week, then news of new flavours and offers now and then. Every one of these emails has a link to stop them.

8. How long we keep it

We keep order details for as long as we need them to fulfil orders, meet our accounting and tax obligations, resolve disputes and enforce our terms. Sign-in codes stop working after 10 minutes. What you filled in on a saved cart is deleted after a week, questions to “Ask us” after 180 days, and the browser details for our ad partners once they’re sent, or after 7 days.

If you’d like your personal data deleted sooner, contact us and we’ll do it, unless we have to keep it for legal or accounting reasons.

9. Keeping it secure

We take reasonable steps to protect your personal data: this website only uses encrypted connections, sign-in codes and sign-in cookies are stored in a scrambled form, the links to your order and your cart carry a secret key that’s kept away from our ad partners’ tracking codes, and card payments go straight to Omise, a PCI-compliant payment provider. No way of sending or storing data is completely secure, but we work to protect yours against loss, misuse and unauthorised access.

10. Your rights

Under the PDPA you can ask to see the personal data we hold about you, ask us to correct it, or withdraw your consent to our using it, for example for marketing emails. Contact us using the details below and we’ll reply as soon as we reasonably can.

11. Children

Our service is for adults placing food orders. We don’t knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we’ll remove it.

12. Changes to this policy

We may update this policy from time to time, for example if we start working with a new delivery or payment partner. When we do, we’ll change the “last updated” date at the top, and point out any big changes on this page.

13. Contact us

The Shepherd’s Pie
Block 3015, Bedok North Street 5, Shimei East Kitchen, #06-05, Singapore 486350
Email: contact@theshepherdspie.com
Phone: (65) 6789 0707

How we look after your data