This policy explains how The Katana Connection Pte Ltd, trading as Real Rare Antiques ("we", "us", "our"), collects, uses, discloses and looks after personal data through realrareantiques.com. We are a private limited company governed by the laws of the Republic of Singapore, and we handle personal data in line with Singapore's Personal Data Protection Act 2012 (the "PDPA").
We collect only what we need to answer your questions, to sell and deliver pieces, and to send our newsletter to those who ask for it. How the site and our sales work is set out in our Terms and Conditions.
The personal data we collect
When you send an inquiry
You can ask about a piece through the inquiry form on its page, or write to us through the contact form. Both forms ask for:
- your name;
- your email address;
- your country;
- your phone number, if you choose to give it;
- your message.
When you ask about a particular piece, its reference is attached to your inquiry automatically.
When you buy a piece
If you decide to buy, we arrange the sale with you by email. We ask for the details we need to complete it, such as your delivery address, and we keep a record of the sale: the piece, the price, the payment and the shipment.
When you join the newsletter
We ask only for your email address.
Technical information
- Spam protection. Our forms use Cloudflare Turnstile, a check that tells people apart from automated programs, and a hidden field that only bots fill in. To limit repeated submissions, we keep a salted one-way hash of your IP address: a scrambled code that cannot be turned back into the address. We do not store the IP address itself.
- Analytics. If you accept analytics cookies, we use Google Analytics to understand how the site is used: which pages are viewed, which country visits come from, and the type of device and browser. See "Cookies and analytics" below.
How we use your personal data
We use your personal data to:
- reply to your inquiry, including, when you ask about a piece, its price, any extra photographs you ask for and a shipping quote;
- send you an email confirming that we have received your inquiry;
- arrange payment, shipping and delivery when you buy a piece;
- keep records of sales, as accounting, tax and other laws require;
- send you our newsletter, if you have subscribed;
- protect the site and its forms against spam, abuse and fraud;
- understand how the site is used, so that we can improve it;
- comply with the law, or with an order of a court or other authority that we are legally bound to follow.
We do not sell your personal data, and we do not share it with anyone who does not help us run the business, except as described in this policy.
Your consent
By sending an inquiry or subscribing to the newsletter, you consent to our collecting, using and disclosing your personal data as this policy describes. You may withdraw your consent at any time by writing to us through the contact form. We will then explain what withdrawal means in practice: for example, we may no longer be able to answer an inquiry or complete a sale. Withdrawing consent does not affect records that the law requires us to keep.
We ask for your consent to analytics cookies separately, through a banner on the site, and you can change that choice at any time through "Cookie settings". See "Cookies and analytics" below.
The newsletter
We use your email address only to send you the newsletter. Every newsletter includes a link to unsubscribe, and you can also ask us to remove you through the contact form. If you unsubscribe, we may still email you about an inquiry or a purchase that is in progress.
Who we share it with
We share personal data only with the service providers that help us run the site and complete sales, and only as far as each one needs it:
- Cloudflare hosts the website, the database in which we store inquiries, and our images, and runs the Turnstile check on our forms.
- Resend, an email service provider, delivers inquiries to us and sends the acknowledgement emails.
- Google provides Google Analytics and processes analytics data on our behalf as our data processor, if you accept analytics cookies.
- Couriers receive the name, address and contact details needed to deliver a piece you have bought.
- Banks, card payment providers and cryptocurrency services process the payment method you choose.
We may also disclose personal data where the law requires it, and we may transfer it as part of a merger, acquisition, reorganisation or sale of our business or its assets.
Transfers outside Singapore
Some of these service providers store or process data outside Singapore. When personal data is transferred overseas, we take the steps the PDPA requires to make sure the recipient protects it to a standard comparable to the PDPA, for example through the data protection terms in our agreements with those providers.
Cookies and analytics
A cookie is a small file that a website stores in your browser. This site has no customer accounts and no shopping cart, so it does not use cookies to remember who you are.
Google Analytics
We use Google Analytics, a service provided by Google, to understand how the site is used, but only if you agree. On your first visit, a banner asks whether you accept analytics cookies. Until you click Accept, nothing is loaded from Google and no analytics cookies are set. We record your choice in your browser's local storage, under the name "rra-analytics-consent", so that we do not ask you again on every page. This record stays in your browser and is not sent to us.
If you accept, Google Analytics sets its own cookies, such as _ga, which hold a random identifier so that visits from the same browser can be counted together. It records the pages you view, how you arrived at the site, your approximate location (such as your country) and the type of device and browser you use. Google states that Google Analytics does not log or store IP addresses. The reports we see are aggregated and do not identify you.
We use Google Analytics only to measure how the site is used, not for advertising. Advertising storage, the use of your data for advertising and ad personalisation are always switched off.
- Legal basis. We use analytics cookies only with your consent, which you give by clicking Accept on the banner.
- Changing your mind. You can withdraw or give your consent at any time through "Cookie settings" at the foot of every page. If you decline or withdraw it, the site deletes the Google Analytics cookies set on this site (_ga and _ga_ followed by an identifier), and Google Analytics stops running straight away.
- Google's role. Google processes analytics data on our behalf as our data processor. It may store and process that data outside Singapore (see "Transfers outside Singapore" above). How Google itself handles personal data is explained in the Google Privacy Policy, published on Google's website.
- Retention. Google Analytics keeps the data linked to these cookies for the period set in our Google Analytics settings, at most 14 months.
Security
Cloudflare may use strictly necessary cookies or similar technology to protect the site and to run the Turnstile check on our forms. These do not depend on the analytics banner.
You can also block or delete cookies in your browser settings, and you can stop Google Analytics from recording your visits by installing Google's opt-out browser add-on. Declining or blocking analytics cookies does not change how the site works for you.
How long we keep it
We keep personal data only for as long as we need it:
- an inquiry, for as long as we need it to deal with your inquiry and any sale that follows;
- sale records, for as long as accounting, tax and other laws require;
- your newsletter email address, until you unsubscribe;
- the hashed IP address, for as long as it is useful for limiting repeated submissions;
- analytics data, as set in our Google Analytics settings, at most 14 months.
When we no longer need personal data for these purposes or to meet a legal obligation, we delete it or make it anonymous.
How we protect it
The site is served over an encrypted (HTTPS) connection, and access to our inquiry database is limited to authorised people. We keep a hash of your IP address rather than the address itself, and we never publish your details. No method of sending or storing information over the internet is completely secure, however, so we cannot guarantee the security of information you send to us.
If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission, as the PDPA requires. We will also notify the Commission of any breach of a significant scale.
Access and correction
You may ask us:
- for a copy of the personal data we hold about you, and for information about how it has been used or disclosed in the past year;
- to correct any personal data about you that is wrong or incomplete.
Please send your request through the contact form. We may need to confirm your identity before we act on it. We will reply as soon as we reasonably can and in any event within 30 days; if we need longer, we will tell you when to expect our answer.
If you live outside Singapore, the law where you live may give you further rights. Contact us and we will respond in line with the law that applies to you.
Children
This site is not intended for anyone under 18, or under the age of majority where they live. We do not knowingly collect personal data from them. If we learn that we have, we will delete it as quickly as possible, and we would be grateful if you told us about any case you are aware of.
Changes to this policy
We may update this policy from time to time. The current version is always on this page, with the date of the last update at the foot.
Contact us
We have appointed a Data Protection Officer, who handles questions, requests and complaints about personal data. You can reach the Data Protection Officer through our contact form; please say that your message is for the Data Protection Officer. We will reply as soon as we can and in any event within 30 days.
Last updated: September 2026.