Effective Date: October 26, 2026
This Privacy Policy explains how OWT Shop (“OnlyWrongThings.com”) handles your personal data under the Singapore Personal Data Protection Act 2012 (PDPA), the EU General Data Protection Regulation (GDPR), and applicable global privacy laws.
1. Data Controller & Data Protection Officer (DPO)
- Company Name: Media Distributions PTE. LTD. (UEN:
202619160G) - Registered Address: 33A Pagoda Street, Singapore 059192
- Data Protection Officer (DPO) Contact: privacy@@mediasistributions.com
2. Zero Cookies & Zero Tracking
We do not use tracking cookies, advertising pixels, or behavioral analytics scripts on this website. When you browse our pages, no cookies are placed on your device.
3. Hosting & Server Logs (Hostinger)
Our website is hosted by Hostinger on servers located in the European Union. When you visit our site, our server automatically logs standard connection data (your IP address, browser type, requested page, and timestamp) strictly to maintain technical security, prevent bot abuse, and troubleshoot server errors (our legitimate interest). Server logs are not merged with other data and are automatically deleted after 30 days.
4. Email Signup & Free Digital Downloads
If you voluntarily enter your email address to download our free digital printables or receive new product updates, we process your email address solely on the basis of your explicit consent.
- Double Opt-In: When you sign up, your status is set to “Pending” and we send a confirmation link to your inbox. You are only added to our active list once you click that link. We log your confirmation timestamp and IP address as legal proof of consent.
- Unsubscribing: You can withdraw your consent at any time by clicking the “Unsubscribe” link at the bottom of any email we send, or by emailing our DPO.
5. Third-Party Service Providers (Email Pipeline)
We do not sell or rent your email address. To verify, store, and deliver our emails securely, we use the following infrastructure providers:
- MyEmailVerifier (Inbox Validation): When you submit the signup form, your email address is checked in real time via API to confirm the inbox exists and prevent invalid bot signups from causing hard bounces (processed under our legitimate interest in server security).
- CRM (Self-Hosted Database): Your subscriber profile and opt-in status are stored directly inside our local database on our EU Hostinger server using a locally running CRM, rather than in an external third-party marketing system.
- Amazon SES & Amazon SNS (Email Delivery & Bounce Handling): We use Amazon Web Services (AWS) to route our outbound emails (Amazon SES) and automatically process bounce or spam notifications via webhook (Amazon SNS) so invalid or unsubscribed addresses are immediately blocked from future emails. International data transfers by AWS are protected under EU Standard Contractual Clauses (SCCs) and the Data Privacy Framework.
6. Data Retention
We keep your email address for as long as you remain subscribed. Unconfirmed (“Pending”) signups are deleted after 30 days. If you unsubscribe or your email hard-bounces, your address is immediately blocked from receiving further emails and permanently deleted or anonymized within 30 days.
7. External Purchases on Redbubble
Our website is a product showcase and catalog bridge. When you click a purchase button (such as “Buy on Redbubble →”), you leave our site and go to Redbubble.com. Redbubble acts as an independent data controller and the sole Merchant of Record for all physical orders. We never receive your name, shipping address, or payment details from Redbubble.
8. Your Global & GDPR Privacy Rights
Regardless of where you live (including Singapore, the European Union/EEA, the UK, or the United States), you have the right to:
- Access & Portability: Request a copy of the personal data we hold about you.
- Correction (Rectification): Ask us to update or correct inaccurate data.
- Deletion (Erasure): Ask us to permanently delete your email address and personal data.
- Withdraw Consent / Object: Unsubscribe from our emails or object to our data processing at any time.
- Supervisory Authority Complaint (EU/UK Visitors): If you reside in the EU/EEA or UK and believe your data rights have been infringed, you have the right to lodge a complaint with your local Data Protection Authority.
To exercise any of these rights, simply email our Data Protection Officer.