Quick Navigation
Overview & Commitment
DabaoLah! operates an online platform connecting customers, food court hawkers, and delivery partners across Singapore. This policy governs how DabaoLah! Pte. Ltd. (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data in compliance with Singapore's Personal Data Protection Act 2012 (No. 26 of 2012) (“PDPA”).
By registering an account, placing an order, partnering as a vendor stall, or utilizing our QR ordering services, you acknowledge and consent to the collection, use, and disclosure of your personal data as outlined in this Privacy Policy.
Personal Data We Collect
We only collect data strictly necessary to facilitate food ordering, table QR dine-in, takeaway, and delivery operations:
A. From Food Lovers & Customers
- Identity & Contact: Full name, email address, mobile phone number.
- Delivery Details: Singapore postal codes, building names, unit numbers, delivery instructions.
- Order Information: Dishes purchased, food court stall IDs, special dietary notes, transaction timestamps.
- Referral Details: Unique referral codes used, reward balances earned and redeemed.
B. From Hawker Stalls & Vendors
- Business Details: Stall name, Singapore food hygiene licence / UEN, food court location.
- Owner Contact: Vendor owner name, registered phone number, email address.
- Payout Information: Bank account name, bank code, PayNow corporate proxy details for automated revenue settlements.
- Delivery Settings: Store self-delivery radius configuration (e.g. 500m/1km).
How We Use Your Data
We process your personal data for the following legitimate purposes:
- Order Execution: Routing your multi-stall food court selections to hawker POS thermal printers and management tablets.
- Delivery Fulfillment: Calculating real-time distance quotations, dispatching courier drivers, or alerting hawkers for self-delivery drops.
- Real-time Notifications: Sending SMS or WhatsApp alerts regarding order status (preparing, rider picked up, delivered).
- Billing & Payouts: Processing customer payments, issuing electronic receipts, and disbursing vendor revenues without 35% commission deductions.
- Customer Support: Investigating missing items, order cancellations, or dispute resolutions.
- Referral Rewards: Validating eligible $20 vendor activations or $5 user order thresholds and applying reward offsets at checkout.
Payment & Security Standards
We implement rigorous technical, operational, and organizational security controls to protect your data against unauthorized access, loss, or misuse:
SSL/TLS 256-bit
Encrypted in transit & at rest
PCI-DSS Compliant
Zero stored card numbers
Role-Based Access
Restricted internal privileges
Data Retention Policy
We retain personal data only for as long as necessary to fulfill the operational purposes for which it was collected, or as required by applicable Singapore legal and tax regulations (e.g. retaining financial transaction records for up to 5 years under the Inland Revenue Authority of Singapore (IRAS) guidelines).
Once the retention period expires or the purpose is no longer served, data is permanently erased or anonymized so that it can no longer be associated with an identifiable individual.
Your Rights under Singapore PDPA
Under the PDPA, you are entitled to the following rights regarding your personal data:
Right of Access
You may request access to personal data in our possession and details on how it has been used within the past year.
Right of Correction
You can request correction of inaccurate, incomplete, or outdated data through your account profile or by contacting us.
Consent Withdrawal
You may withdraw consent for data processing. Note that withdrawing delivery consent may prevent us from completing future orders.
Cookies & Tracking Technologies
DabaoLah! uses essential session cookies to remember your food cart items across stalls, maintain active login sessions, and save your preferred language (English or Chinese). We do not deploy intrusive third-party cross-site advertising trackers. You can disable cookies in your browser settings, though doing so may disrupt cart functionality.
Contact Our Data Protection Officer (DPO)
If you have any questions, feedback, or requests concerning your personal data or this Privacy Policy, please reach out to our appointed Data Protection Officer:
Entity: DabaoLah! Pte. Ltd. (Data Protection Office)
Email: dpo@dabaolah.sg / support@dabaolah.sg
Country of Jurisdiction: Republic of Singapore
We aim to review and respond to all formal access or correction requests within 30 calendar days as stipulated by the PDPA.