Privacy policy

Privacy Policy

Last Updated: March 30, 2026

California Privacy Rights | European/UK Privacy Rights | Governing Law & Class Action Waiver

Hautuki (operated by Custics Singapore Pte. Ltd., hereinafter “Hautuki,” “we,” “us,” or “our”) recognizes the supreme importance of data privacy and personal information protection. This comprehensive Privacy Policy sets forth the exhaustive terms and conditions with respect to how we process, store, use, and disclose your personal information. This Privacy Policy describes, among other complex legal issues, the types of personal information that we collect, the specific purposes for which we use it, the types of third parties with whom we share it, and any limited rights and expansive responsibilities you may have with respect to such personal information.

PLEASE READ THIS PRIVACY POLICY WITH EXTREME CARE AS IT DESCRIBES YOUR LEGAL RIGHTS, EXTENSIVE RESPONSIBILITIES, AND SIGNIFICANT LIABILITIES. WE RESERVE THE UNILATERAL RIGHT TO MODIFY, AMEND, OR UPDATE THIS PRIVACY POLICY AT ANY TIME WITHOUT PRIOR INDIVIDUAL NOTICE. BY ACCESSING, BROWSING, OR USING THE SERVICES (INCLUDING OUR SITE AND MOBILE APPLICATIONS) OR OTHERWISE PROVIDING US WITH PERSONAL INFORMATION, YOU ARE UNCONDITIONALLY CONSENTING TO THE TERMS OF THIS PRIVACY POLICY, OUR TERMS OF SERVICE, AND ANY SUBSEQUENT UPDATES. IF YOU DO NOT AGREE TO EVERY TERM HEREIN, YOU ARE PROHIBITED FROM ACCESSING OUR SERVICES.

1. Comprehensive Scope and Data Controller Identity

This Privacy Policy applies to any and all personal information that Hautuki receives during its global business operations as a “data controller.” For the purposes of this Privacy Policy, the term “personal information” means any information that, alone or in conjunction with other data, identifies or is linked to a particular individual or household. This does not include anonymized, de-identified, or aggregated data which is not subject to this policy. Hautuki reserves the absolute right to anonymize your data and use such data for any commercial purpose without further notice or compensation to you.

2. Detailed Categories of Personal Information Collected

To provide our Services and promote our commercial interests, we collect the following categories of information. Failure to provide such information may result in our inability to complete transactions or provide Services.

• Personal Identifiers: Legal name, aliases, shipping/billing addresses, email addresses, unique customer identifiers, and telephone numbers.
• Registration & Account Data: Usernames, encrypted passwords, and profile preferences.
• Payment & Financial Data: Data necessary to confirm payments through third-party processors (Stripe, Airwallex). Hautuki does not maintain full credit card records; all financial liability rests with the payment processors.
• Online & Technical Identifiers: IP addresses, device IDs, MAC addresses, operating system details, browser types, and cookie-based tracking data.
• Commercial & Behavioral History: Records of products purchased, abandoned carts, items considered, and overall consuming tendencies.
• Marketing & Interaction Data: Subscription statuses, age demographics or preferences provided, engagement metrics with Klaviyo emails, and interaction logs with our WhatsApp Marketing API.
• Visual & Audio Content: Any images or videos you upload as part of a review or feedback.

3. Automated Technical Data Collection and Monitoring

When you access our Site, we collect data automatically through technical tools such as cookies, web beacons, and pixels (including Google, Facebook, and TikTok pixels).

SITE MONITORING NOTICE: YOU HEREBY ACKNOWLEDGE, AGREE, AND CONSENT TO THE CONTINUOUS MONITORING AND RECORDING OF ANY AND ALL ACTIVITIES AND COMMUNICATIONS TO, FROM, AND ON THE SITE BY HAUTUKI AND ITS THIRD-PARTY PARTNERS.

4. Expansive Use of Personal Information

We use your information for a wide range of business purposes, including but not limited to:

• Operating, maintaining, and aggressively improving our Services and Site architecture.
• Processing global transactions and enforcing our contractual obligations.
• Sending promotional communications and "Abandoned Checkout Reminders" via Klaviyo or WhatsApp Marketing API.
• Personalizing advertisements to match your preferences across Google, Meta, and TikTok platforms.
• Protecting Hautuki against fraudulent transactions, unauthorized access, and other illegal activities.
• AI & Algorithm Training: Utilizing anonymized, aggregated, or specific behavioral data to train, optimize, and deploy artificial intelligence and machine learning models for business analytics and commercial enhancements.

5. Absolute Third-Party Platform Disclaimer

Hautuki utilizes various third-party service providers (Shopify, Stripe, Airwallex, Klaviyo, WhatsApp, etc.).

FOR THE AVOIDANCE OF DOUBT, YOU EXPRESSLY AGREE THAT HAUTUKI SHALL NOT BE HELD LIABLE FOR ANY DATA BREACH, SYSTEM FAILURE, OR PRIVACY VIOLATION OCCURRING ON THE INFRASTRUCTURE OF THESE THIRD-PARTY PROVIDERS. YOUR RECOURSE FOR SUCH INCIDENTS LIES SOLELY WITH THE RELEVANT THIRD-PARTY PROVIDER.

6. Global Messaging Program and TCPA Compliance

By opting-in to our mobile messaging program, you agree to receive automated messages.

LEGAL PROTECTIVE CLAUSE: YOU AGREE THAT HAUTUKI MAY CONTACT YOU VIA ANY ELECTRONIC MEANS. THE USE OF ANY MESSAGING SYSTEM BY HAUTUKI IS NOT, AND SHALL NOT BE INTERPRETED AS, AN ADMISSION THAT HAUTUKI UTILIZES AN "AUTODIALER" OR ANY SYSTEM SUBJECT TO RESTRICTIVE STATUTORY PENALTIES.

7. Permanent Proprietary Rights over Product Reviews

Any feedback or product reviews submitted to Hautuki shall be considered our sole proprietary information.

BY SUBMITTING CONTENT, YOU GRANT HAUTUKI A NON-EXCLUSIVE, PERPETUAL, IRREVOCABLE, WORLDWIDE, ROYALTY-FREE, AND FULLY SUB-LICENSABLE LICENSE TO EXPLOIT, MODIFY, PUBLISH, AND DISTRIBUTE SUCH CONTENT IN ANY MEDIA AND FOR ANY PURPOSE WITHOUT COMPENSATION OR CREDIT TO YOU.

8. Ultimate Security Disclaimer and Liability Cap

We employ security technologies; however, the absolute security of the internet can never be guaranteed.

LIMITATION OF LIABILITY: TO THE MAXIMUM EXTENT PERMITTED BY LAW, HAUTUKI SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING FROM DATA INCIDENTS. IN NO EVENT SHALL OUR TOTAL AGGREGATE LIABILITY EXCEED THE TOTAL AMOUNT ACTUALLY PAID BY YOU TO HAUTUKI DURING THE SIX (6) MONTHS PRIOR TO THE CLAIM, OR $100.00 USD, WHICHEVER IS LESS. FURTHERMORE, HAUTUKI SHALL BE ABSOLUTELY EXEMPT FROM ANY LIABILITY RESULTING FROM DATA BREACHES CAUSED BY FORCE MAJEURE EVENTS, INCLUDING BUT NOT LIMITED TO STATE-SPONSORED CYBERATTACKS, ZERO-DAY EXPLOITS, TERRORISM, OR MASS INFRASTRUCTURE FAILURES BEYOND OUR REASONABLE CONTROL. YOU PROVIDE DATA AT YOUR OWN RISK.

9. User Indemnification Obligations

YOU EXPRESSLY AGREE TO FULLY INDEMNIFY, DEFEND, AND HOLD HARMLESS HAUTUKI AND ITS DIRECTORS, OFFICERS, AND EMPLOYEES FROM ANY AND ALL CLAIMS, LOSSES, LIABILITIES, AND EXPENSES (INCLUDING LEGAL FEES) ARISING FROM YOUR PROVISION OF INACCURATE DATA OR YOUR VIOLATION OF ANY THIRD-PARTY PRIVACY RIGHTS.

10. Protection of Minors and Parental Responsibility

While Hautuki provides Services that may appeal to a broad audience, any collection of personal information, including age demographics, from individuals under the applicable age of legal majority is strictly contingent upon the explicit consent of a parent or legal guardian. By accessing our Services and providing age-related or personal data, you explicitly represent, warrant, and guarantee that you are either of legal age to form a binding contract or possess the unequivocal, verifiable consent of your legal guardian to do so.

DISCLAIMER OF LIABILITY REGARDING MINOR DATA: THE BURDEN OF COMPLIANCE AND TRUTHFUL REPRESENTATION RESTS ENTIRELY ON THE USER AND THEIR LEGAL GUARDIAN. HAUTUKI EXPRESSLY DISCLAIMS ANY AND ALL LIABILITY ARISING FROM THE UNAUTHORIZED SUBMISSION OF MINOR DATA DUE TO FRAUD, MISREPRESENTATION, OR LACK OF PROPER CONSENT. WE RESERVE THE ABSOLUTE RIGHT TO RETAIN, PROCESS, OR PURGE SUCH DATA IN ACCORDANCE WITH OUR OPERATIONAL IMPERATIVES AND LEGAL OBLIGATIONS.

11. U.S. State and California Privacy Rights (CCPA/CPRA)

California residents have the right to know, delete, and correct their personal information. However, Hautuki does not "sell" information for monetary gain. To opt-out of "sharing" for targeted advertising, you must adjust your cookie settings. We reserve the right to verify your identity through stringent multi-factor methods before processing any privacy requests.

12. European (GDPR) and UK Privacy Rights

For users in the EEA/UK, we process data under the legal bases of Contractual Necessity, Legitimate Interest, and Consent. You have the right to portability and objection; however, we may retain certain data to protect our legal interests or comply with regulatory mandates. Notwithstanding any deletion requests, Hautuki reserves the broad right to retain internal records, transaction histories, and de-identified data in perpetuity for the purposes of fraud prevention, security auditing, and internal operational analytics, overriding individual deletion rights to the maximum extent permitted by applicable law.

13. Global Data Retention and International Transfers

Hautuki is based in Singapore. Your data will be transferred to and stored in servers located in Singapore, the United States, and other global jurisdictions. By using our Services, you consent to these cross-border transfers regardless of the privacy laws in your home country.

14. Mandatory Governing Law and Dispute Resolution

This Privacy Policy and any dispute arising out of or related to your data privacy shall be governed exclusively by the laws of the Republic of Korea.

• Exclusive Venue: You agree that any legal action shall be brought exclusively in the competent courts of the Republic of Korea.
• Class Action Waiver: YOU AGREE TO BRING CLAIMS ONLY IN YOUR INDIVIDUAL CAPACITY AND EXPRESSLY WAIVE THE RIGHT TO PARTICIPATE IN ANY CLASS ACTION OR REPRESENTATIVE PROCEEDING.
• Time Bar: ANY CLAIM MUST BE FILED WITHIN ONE (1) YEAR OF THE INCIDENT; OTHERWISE, THE CLAIM IS PERMANENTLY BARRED.

15. Contact and Privacy Requests

For legal inquiries or to exercise your limited data rights, please contact:

Custics Singapore Pte. Ltd. (Hautuki)
Email: cs@hautuki.sg