Legal
Privacy Policy
Last updated: 9 August 2026
Doctor Clean Private Limited (“Doctor Clean”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in compliance with Singapore's Personal Data Protection Act 2012 (PDPA).
1. Data We Collect
When you visit our website or make a booking, we may collect:
Personal Identification Data
- Full name
- Email address
- Mobile phone number
Property & Location Data
- Postal code and residential or commercial address
- Unit number and floor level
- Property type (HDB, condo, landed, commercial)
Booking & Service Data
- Service type, date, time, duration, and add-on selections
- Special requests, notes, or instructions
- Promo codes used
- Booking status and history
Payment Data
- Payment method type (card, PayNow, GrabPay)
- Transaction amount and status
- Stripe payment intent and reference IDs
- Note: Full card numbers are not stored by Doctor Clean. Payment details are handled directly by Stripe and are subject to Stripe's Privacy Policy.
Chat & Support Data
- Messages sent to our AI assistant (Ashmera Bot)
- Customer support conversations with our team
Technical & Session Data
- Anonymised session identifier (stored in your browser for up to 24 hours)
- Browser type and device information
- IP address (used for bot protection and rate limiting)
- Pages visited and interactions with the booking flow
2. How We Use Your Data
We use the data we collect to:
- Process, confirm, and manage your service bookings
- Calculate pricing, apply promotions, and process payments
- Communicate with you about your booking (confirmations, reminders, updates)
- Handle rescheduling and refund requests
- Enable address lookup via OneMap.sg for accurate service routing
- Improve our services, website, and customer experience
- Prevent fraud, abuse, and unauthorised access
- Comply with legal and regulatory obligations in Singapore
We do not use your personal data for unsolicited marketing without your consent.
3. Third-Party Service Providers
We share your data only with trusted third-party providers necessary to deliver our services. These providers are contractually bound to handle your data securely and only for specified purposes.
We do not sell your personal data to any third party.
4. Cookies & Local Storage
We use minimal browser storage mechanisms:
- Session identifier: A temporary anonymous token stored in localStorage to maintain your booking session for up to 24 hours. This is not tied to your personal identity unless you complete a booking.
- Booking draft: Your in-progress booking details are temporarily saved in localStorage for 24 hours to allow you to resume a booking.
- Cloudflare Turnstile: May set cookies for bot detection. These do not track browsing behaviour across other websites.
We do not use advertising cookies or tracking pixels.
5. Data Retention
We retain your personal data only for as long as necessary:
Data may be retained longer if required by applicable law or legal proceedings.
6. Data Security
We implement industry-standard technical and organisational measures to protect your data, including:
- TLS/SSL encryption for all data in transit
- Row-level security (RLS) policies on the database
- API rate limiting and bot protection
- Stripe-hosted payment forms (PCI DSS compliant — card data never touches our servers)
- Webhook signature verification to prevent spoofed payment events
While we take reasonable steps to protect your data, no system is entirely immune to breaches. In the event of a data breach affecting your personal data, we will notify you as required by the PDPA.
7. Your Rights Under the PDPA
Under Singapore's PDPA, you have the right to:
- Access — Request a copy of the personal data we hold about you.
- Correction — Request that inaccurate or incomplete data be corrected.
- Withdrawal of consent — Withdraw consent to the collection or use of your data, subject to legal and contractual obligations (e.g., we may need to retain records of a completed booking).
- Data portability — Request your data in a machine-readable format where applicable.
To exercise any of these rights, please contact our Data Protection Officer at admin@doctorclean.com.sg. We will respond within 30 days.
8. Children's Privacy
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Links to Third-Party Sites
Our website may contain links to third-party websites (e.g., Google Reviews). We are not responsible for the privacy practices of these sites and recommend that you review their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy periodically. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact & Data Protection Officer
For any privacy-related questions, data access requests, or concerns:
You may also lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe your data rights have been infringed.
This Privacy Policy is governed by the laws of Singapore, including the PDPA 2012. © 2026 Doctor Clean Private Limited.