Privacy Policy

What we collect

• Email address — when you subscribe to the halal guide newsletter.
• Name, email and phone — when you request a quote, suggest or claim a business, or contact us.
• Reviews and the display name you provide — when you post a review.
• Approximate location — only when you tap “near me” and grant permission; used in your browser to sort results and not stored on our servers.
• Usage preferences — saved places, filters and settings are stored locally in your browser (localStorage), not on our servers, unless you create an account.

How we use it

• To run the directory: show listings, sort by distance, save favourites.
• To send the newsletter you asked for (you can unsubscribe any time).
• To process business submissions, claims and quote requests.
• To moderate reviews and keep the platform safe and accurate.
• We do not sell your personal data.

Travel bookings

When you book a hotel or flight, the booking and payment are handled by our travel partner LiteAPI (Nuitée), which acts as the merchant of record. The traveller and contact details you enter (name, email, phone, and for flights the passenger/document details required by the airline) are passed to LiteAPI and on to the relevant hotel or airline to fulfil and confirm your booking.

Who we share it with

We use trusted service providers (data intermediaries) only to the extent needed to operate the service. Each receives only the data required for its purpose:

• MailerLite — newsletter delivery (email address).
• Resend — transactional email such as booking, contact and alert emails (email address + message content).
• Stripe — payment processing for our own paid plans, advertising and event tickets (only if you make such a transaction).
• LiteAPI (Nuitée) — hotel and flight search, booking and payment as merchant of record (traveller, contact and passenger details).
• Supabase — database and storage (when account features are enabled).
• Vercel — website hosting.
• OneMap (Singapore Land Authority) — address lookup; OpenStreetMap — map tiles.

International transfers

Some of these providers process data outside Singapore (for example in the EU, UK or US). Where personal data is transferred overseas, we take reasonable steps so the recipient provides a standard of protection comparable to the PDPA, including through the provider's own contractual data-protection terms.

Cookies & local storage

We use minimal browser storage to remember your preferences and saved places, and a small record of your cookie-consent choice. See our Cookie Policy for details.

Your PDPA rights

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Withdraw consent — opt out of the newsletter or other processing at any time.
• Contact our data protection contact at privacy@humblehalal.com to exercise these rights.

How long we keep it (retention)

We keep personal data only as long as needed for the purposes above or as required by law, then delete or anonymise it. As a guide:

• Newsletter subscribers — until you unsubscribe, then removed at the next clean-up.
• Quote requests, business suggestions, claims and contact messages — up to about 12 months after they are resolved.
• Reviews — kept while published; on account deletion we remove or anonymise them.
• Booking records — kept as needed to support your trip and to meet tax/accounting obligations.

Security & data breaches

We apply reasonable technical and organisational security measures, but no system is perfectly secure. If a notifiable data breach occurs, we will assess it and notify the PDPC and affected individuals as required under the PDPA — in any case no later than 30 days after we determine the breach is notifiable.

Children, changes & contact

The service is not directed at children under 13. We may update this policy and will revise the date above. Questions or requests:

ONN GROUP LLP, 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051. Email privacy@humblehalal.com.