Privacy Policy
How Biig hands collects, uses, discloses and protects personal data under Singapore's Personal Data Protection Act 2012 (PDPA).
1. Who we are
Biig hands (UEN 53439282B) ("Biig Hands", "we", "us") is a Singapore-registered business providing handyman and facilities maintenance services to property teams, businesses and building owners. Our registered address is 175B Bencoolen Street, Burlington Square, Singapore 189651.
We are the organisation responsible for personal data collected through our website, our WhatsApp business number (+65 8892 0150), our customer portal, our handyman partner portal, and in the course of delivering our services.
2. Data Protection Officer
Our Data Protection Officer (DPO) can be reached at contact@biighands.com or by post at the address above. Please mark your message "Attention: Data Protection Officer".
3. Personal data we collect
We collect only the personal data reasonably needed for the purposes described in this policy. Depending on how you interact with us, this includes:
| When | What we collect |
|---|---|
| You enquire or request a quote (website form or WhatsApp) | Name, company, email, phone or WhatsApp number, your role, property type, site location, a description of the job, and any photos or videos you send us of the issue. Media may incidentally capture people or property details. |
| You become a customer | Billing entity details (company, MCST or personal name), billing address, contact persons, job records, before-and-after photos of work done, invoices and payment references (for example PayNow reference numbers). We do not store card details. |
| You open a customer portal account | Login email, password (stored hashed), and the records shown in your portal such as jobs, reports, invoices and warranty follow-ups. |
| You register as a handyman or supplier partner | Full name, NRIC or FIN, email, password (stored hashed), WhatsApp number, postal code, profession, experience level, trades, certificates and licences, a copy of your identity card or work pass, supporting documents, bank name and account number, and PayNow mobile number. |
| You raise a support ticket or use live chat | Name, phone, email, company, the content of your message and any attachments. Our website chat may be assisted by an AI service; chat transcripts are processed to answer your question and are kept with your ticket. |
| You visit our website | Technical data such as IP address, browser and device type, pages viewed and referring site, collected through cookies and Google Analytics (see section 9). |
About NRIC and FIN numbers
In line with the Personal Data Protection Commission's advisory guidelines, we collect NRIC or FIN numbers and identity documents only from handyman and supplier partners, where this is necessary to verify identity to a high degree of fidelity before granting access to client premises and making payments. We do not collect NRIC or FIN numbers from customers.
4. How we use personal data
- To scope, quote, schedule and carry out maintenance and repair work, and to send you quotes, job updates and completion reports.
- To match jobs to suitable handyman partners and share the job details they need to do the work.
- To verify the identity, qualifications and eligibility of handyman and supplier partners, and to pay them.
- To issue invoices, process payments, and keep accounting records required by law.
- To provide customer support, respond to enquiries and handle warranty claims.
- To operate, secure and improve our website and portals, including preventing spam and abuse.
- To send service-related messages. We send marketing messages only where you have consented, and you can opt out at any time.
- To comply with legal obligations, including workplace safety, tax and accounting requirements, and to respond to lawful requests from authorities.
5. Consent and legal basis
We collect, use and disclose personal data with your consent, including deemed consent where you voluntarily provide data for a purpose that is reasonable in the circumstances (for example, sending us a video so we can quote a job). In some cases we rely on exceptions under the PDPA, such as the legitimate interests exception for fraud and spam prevention, or where collection is required by law.
You may withdraw consent at any time by contacting our DPO. We will explain the likely consequences of withdrawal, which may include our being unable to continue providing services to you.
6. Who we share personal data with
- Handyman and supplier partners receive the job scope, site address, access instructions and site contact details needed to carry out the work. Partners are bound by confidentiality and data protection obligations.
- Clients receive the names of the handymen attending their premises where required for building access.
- Service providers who process data on our behalf: our hosting provider (servers located in Canada), Odoo business software, Google Analytics, Cloudflare (security and bot protection), Meta/WhatsApp for messaging, and an AI provider that powers our website chat. These providers may only use personal data to provide services to us.
- Professional advisers, insurers and authorities where necessary for warranty or insurance claims, legal compliance, or as required by law.
We do not sell personal data.
7. Transfers outside Singapore
Some of our service providers store or process data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure it receives a standard of protection comparable to that under the PDPA, including through contractual obligations with the recipient.
8. Retention
We keep personal data only for as long as it is needed for the purposes above or to meet legal requirements. As a guide:
- Enquiries that do not become jobs: up to 12 months.
- Job, invoice and warranty records: for the duration of the warranty period and at least 5 years for accounting and tax purposes.
- Handyman partner identity documents and bank details: for the duration of the partnership and up to 5 years after, or as required by law.
- Website analytics data: as configured in Google Analytics, currently up to 14 months.
When data is no longer needed, we delete it or anonymise it securely.
9. Cookies and analytics
Our website uses strictly necessary cookies to keep you signed in and to protect forms against abuse. We also use Google Analytics 4 to understand how visitors use the site; analytics cookies are set only once you accept them. You can manage cookies through your browser settings. Blocking necessary cookies may stop parts of the site, such as the portals, from working.
10. Security
We protect personal data with reasonable security arrangements, including encrypted connections (HTTPS), hashed passwords, role-based access to our systems, and restricted access to identity and bank documents. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify affected individuals and the PDPC of a notifiable data breach as required by the PDPA.
11. Your rights: access and correction
You may request access to the personal data we hold about you, information about how it has been used or disclosed in the past year, and correction of any error or omission. Write to our DPO with enough detail for us to verify your identity and locate the data. We aim to respond within 30 days; if we need longer, we will tell you when to expect a response. A reasonable fee may apply to access requests, and we will let you know in advance.
12. Marketing and the Do Not Call Registry
We will not send you marketing messages or calls to a Singapore telephone number unless you have given clear and unambiguous consent, or we have checked the Do Not Call Registry as required. Service messages about your ongoing jobs, quotes and invoices are not marketing. You can withdraw marketing consent at any time by replying STOP on WhatsApp or emailing our DPO.
13. Third-party links
Our website may link to third-party sites such as WhatsApp, Facebook and LinkedIn. Their privacy practices are governed by their own policies.
14. Children
Our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18.
15. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows the current version. Material changes will be highlighted on this page.
16. Contact us
Questions, requests or complaints about personal data: contact@biighands.com (Attention: Data Protection Officer), WhatsApp +65 8892 0150, or Biig hands, 175B Bencoolen Street, Burlington Square, Singapore 189651. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission at pdpc.gov.sg.