Privacy Policy

1.1 Data you provide directly

• Contact details: name, phone number, email address, postal address
• Service request data: photos / videos of the issue, property type (HDB / Condo / Landed), location, preferred service time
• Review and feedback data: name (or pseudonym), rating, comment text, optional photos / videos uploaded to our review system
• Payment data: PayNow handle, bank transfer reference, transaction amount (we do not store full bank account numbers or credit card details)
• Identity verification (optional): Google or Microsoft account email when you choose to sign in for a verified customer review

1.2 Data collected automatically

• Analytics data (Google Analytics 4): anonymised IP address, device type, browser, pages viewed, time on page, traffic source, approximate location (city-level only)
• Cookies and similar technologies: session cookies for site functionality, analytics cookies for usage measurement (see Cookie Policy in Section 7)
• Technical logs: IP address (for rate-limiting and security), user-agent string, timestamp

1.3 Data from third parties

• Google OAuth: when you sign in with Google to leave a verified review, we receive your email address and name from Google. We do not receive your password or contact list.
• Microsoft OAuth: same scope as Google, only email and display name.

We use your personal data only for the following purposes, consistent with the consent you provide and PDPA's Purpose Limitation Obligation:

Purpose	Data used	Legal basis
Provide service quotes and dispatch technicians	Phone, address, photos, service type	Consent + Contract performance
Process payments and issue invoices	Name, phone, PayNow / bank reference	Contract performance
Respond to enquiries and complaints	Name, contact details, message content	Consent + Legitimate interest
Display customer reviews on the website	Display name, rating, comment text, optional media	Explicit consent at submission
Site analytics and improvement	Anonymised IP, page behaviour, device data	Legitimate interest (PDPA-compliant)
Spam prevention and security	IP address, submission frequency	Legitimate interest
Compliance with Singapore law (e.g., IRAS records, BCA / EMA / PUB licensing)	Transaction records, technician details	Legal obligation

We do not use your data for: marketing emails without your explicit opt-in, sale or rental to third parties, behavioural advertising profiles, or automated decision-making with legal effects.

We only share your personal data with the following categories of recipients:

3.1 Assigned service technicians

To deliver the service you requested. They receive only the data needed to complete the job (name, address, contact, issue photos).

3.2 Licensed third-party contractors (where applicable)

For HDB / BCA-regulated works, EMA Licensed Electrical Workers, or PUB Licensed Plumbers, your service request details are shared with the registered contractor handling that work. We confirm the contractor's licence details with you before any regulated work begins.

3.3 Service providers (data processors)

Provider	Purpose	Data shared	Location
Google (Analytics, OAuth)	Site analytics, optional login	Anonymised behaviour, email (if signed in)	USA (with Standard Contractual Clauses)
Microsoft (OAuth only)	Optional login	Email, display name	USA (with Standard Contractual Clauses)
WhatsApp (Meta)	Customer messaging	Phone number, message content	USA / Ireland (per Meta's policies)
Hosting provider	Website hosting	All site data (encrypted in transit)	Singapore / Asia-Pacific

3.4 Legal authorities

We disclose personal data to Singapore government authorities (IRAS, BCA, EMA, PUB, IMDA, Singapore Police Force, courts) only when required by law, subpoena, or to investigate fraud or safety incidents.

3.5 We never

• Sell your personal data to third parties
• Share your contact list with advertisers
• Send your data to data brokers

Data type	Retention period	Reason
Service request logs (with completion)	5 years	IRAS recordkeeping (Income Tax Act)
Service request logs (without completion)	6 months	Quote follow-up window
Customer reviews (published)	Indefinite (until removal request)	Public record on website
Customer reviews (rejected / pending)	30 days	Appeal window
Analytics data (Google Analytics 4)	14 months (GA4 default)	GA4 data retention setting
WhatsApp conversation history	2 years	Service quality & dispute resolution
Payment records	5 years	IRAS & PDPA compliance

After the retention period, we delete or anonymise the data using industry-standard methods.

Under the Singapore PDPA, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Correction: Request correction of inaccurate personal data
• Right to Withdraw Consent: Withdraw consent for any data processing at any time
• Right to Data Portability: Receive your data in a structured, machine-readable format (where applicable)
• Right to Complain: File a complaint with the Personal Data Protection Commission (PDPC) if we fail to address your concern

To exercise any of these rights, contact our DPO at fixmovesg@gmail.com. We respond within 30 calendar days as required by PDPA Section 21. We may charge a reasonable fee for access requests as permitted under PDPA.

• Encryption in transit: All data sent to and from fixmove.sg uses HTTPS / TLS 1.2 or higher
• Access control: Only authorised personnel (technicians and admin) can view customer data, on a need-to-know basis
• Rate limiting: We limit submissions per IP to prevent spam and abuse
• Manual review: All customer-submitted reviews go through human review before publication
• Backup & recovery: Encrypted backups stored within Singapore / Asia-Pacific data centres
• Incident response: In the event of a data breach affecting your data, we notify you and the PDPC within 72 hours as required under the PDPA Data Breach Notification Obligation (effective 1 February 2021)

fixmove.sg uses the following cookies:

Cookie type	Purpose	Duration	Can you opt out?
Essential / session	Site navigation, form submission	Session only	No (required for site function)
Analytics (Google Analytics 4)	Anonymised usage measurement	14 months	Yes (browser settings or GA opt-out browser add-on)
OAuth (Google / Microsoft)	Sign-in state for verified reviews	Until you log out	Yes (don't sign in)

You can manage cookies through your browser settings. Disabling analytics cookies will not affect the core service experience. Disabling essential cookies may break site functionality (e.g., review submission).

fixmove.sg is intended for use by Singapore residents aged 18 and above. We do not knowingly collect personal data from minors under 13 years of age. If we discover we have inadvertently collected data from a child under 13, we will delete it promptly. Parents or guardians who believe their child has submitted data may contact fixmovesg@gmail.com for deletion.

Some of our service providers (Google, Microsoft, WhatsApp / Meta) process data outside Singapore (primarily USA and EU). When personal data is transferred outside Singapore, we ensure protection comparable to PDPA standards through:

• Standard Contractual Clauses (SCCs) with each overseas processor
• Verification that the processor's home jurisdiction provides adequate protection
• Encryption of data both in transit and at rest

This complies with PDPA's Transfer Limitation Obligation (Section 26).

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or service features. Material changes will be communicated by:

• Updating the "Last updated" date at the top of this page
• Posting a notice on the homepage for material changes affecting your consent
• Where required by law, notifying you directly via email or WhatsApp

The current version of this policy is always available at https://www.fixmove.sg/privacy-policy.html.

This Privacy Policy is drafted in accordance with:

• Personal Data Protection Act 2012 (No. 26 of 2012)
• PDPC Advisory Guidelines
• Spam Control Act 2007 (for marketing communications)
• Cybersecurity Act 2018 (for incident response)

If you believe FixMove.sg has not addressed your data protection concern adequately, you may lodge a complaint with the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.