Data controller: [公司主体名称占位] · DPO: [to be appointed]
What we collect
Login email, check-ins, photos and reviews, visit statistics (referrer, UTM, browser time zone). Location only when you allow it, to verify a check-in within 100 m — no continuous tracking.
Why
To light up your footprint, compute levels and show recommendations. Marketing email needs separate consent; unsubscribe anytime.
Your rights
Access, correct or delete your data (contact the DPO). We handle PDPA requests within 30 days.
Placeholder text; the final version will follow Singapore's PDPA and be reviewed by a lawyer.
Merchant claims and verification documents
When you claim a shop we collect your login email and the name you give us, to send one-time codes, claim notices and review results.
To become "Verified" you can submit one proof: your ACRA UEN (optionally with a BizFile document), your NEA food shop / hawker licence, or an in-store photo showing your shop's map.com QR poster.
Purpose: only to confirm that you run the shop and to resolve competing claims; never for marketing.
Storage and access: documents are kept in private storage and never appear on shop pages, in search results or in the sitemap. Only authorised reviewers signed in to the admin console can open them, and every review action is recorded in the audit log.
Retention: kept until 12 months after you stop managing the shop (to handle disputes), then deleted. Contact the DPO at any time to access, correct or delete them earlier; deleting them may remove the "Verified" badge.
Share only what is needed: do not upload unrelated personal data (e.g. NRIC numbers, home address) — please mask it before uploading.