Privacy policy

Last updated: 2 July 2026

This Privacy Policy explains how Digital Health Pte Ltd handles personal data in connection with Biodata.sg. It is intended to describe our privacy practices and support compliance with Singapore's Personal Data Protection Act 2012 (PDPA).

By using Biodata.sg, creating an account, submitting biodata, contacting an agency, subscribing to a plan, or otherwise providing information to us, you acknowledge this policy. If you do not agree, please do not use the platform.

What this policy covers

Biodata.sg helps employers browse domestic helper biodata, discover agencies, contact agencies or helpers, and helps agencies publish and manage biodata. This policy applies to personal data that we collect, use, disclose, store, or otherwise process through the website, app, user accounts, forms, subscriptions, messages, support channels, and related services.

Agency and submitter responsibilities

Agencies and other submitters remain independent organisations responsible for their own PDPA, employment agency, employment, and recordkeeping obligations. If an agency uploads helper biodata or other personal data, the agency must ensure it has notified the individual of the purposes of collection, use, disclosure, and publication, obtained and documented any required consent or legal basis, and can respond to access, correction, withdrawal, and deletion requests that relate to the data it controls.

Biodata.sg processes agency-submitted data to provide, secure, moderate, publish, index, support, and improve the platform. We also process account, security, billing, analytics, and support data for our own operational and legal purposes.

Personal data we may collect

• Account details such as email address, role, login credentials, Google account identifiers, verification status, notification settings, and support history.
• Agency details such as company name, licence number, personnel information, contact details, logos, public profile text, subscription status, payment records, and administrative settings.
• Helper biodata and listing content submitted by agencies, helpers, or authorised representatives, including photos, work history, skills, preferences, availability, salary expectations, and related notes.
• Employer, helper, agency, and public-user communications, including enquiries, saved biodata, messages, forms, feedback, attachments, and support requests.
• Transaction records such as subscriptions, wallet credits, boosts, featured placements, invoices, payment references, promotions, refunds, and billing support records.
• Technical and usage data such as IP address, browser type, device information, approximate location, pages viewed, referral source, event timestamps, logs, cookies, local storage values, and analytics signals.

How we collect personal data

We may collect personal data when:

• you create or manage an account, submit a form, subscribe to a service, make payment, or contact us;
• an agency, helper, employer, or representative uploads or edits biodata, agency information, or enquiry content;
• you browse the website, use search, save biodata, send enquiries, open emails, or interact with support channels;
• service providers, payment processors, analytics tools, identity providers, security tools, or business partners send us operational information;
• we are required or permitted by law to collect, verify, retain, or disclose information.

How we use personal data

We may use personal data for one or more of the following purposes:

• to operate, maintain, secure, troubleshoot, and improve Biodata.sg and its search, publishing, messaging, import, A.I., and agency-management features;
• to publish and distribute biodata, agency listings, microsites, and public profile content as intended by the submitter;
• to verify identity, manage accounts, authenticate users, administer subscriptions, process payments, apply promotions, and provide support;
• to route enquiries, send transactional emails, deliver service notices, and respond to requests, complaints, or disputes;
• to detect, prevent, investigate, and respond to abuse, scraping, spam, fraud, security incidents, unauthorised access, policy breaches, and legal risk;
• to generate statistics, analytics, logs, reports, de-identified data, or aggregated insights that help us understand and improve the platform;
• to comply with legal, regulatory, audit, tax, accounting, dispute-resolution, risk-management, and recordkeeping obligations;
• to enforce our Terms of Use and protect our rights, users, business operations, and service providers.

Public listings and search visibility

Biodata, photographs, agency information, microsite content, and other public listing content may be visible to employers, agencies, helpers, website visitors, service providers, search engines, and other parties outside our direct control. Public content may be viewed, copied, cached, indexed, archived, or shared by third parties.

Do not submit personal data for public listing unless you have the authority and required consent to publish it. If consent is withdrawn or content becomes inaccurate, unauthorised, expired, or unlawful, the submitter must promptly update, de-list, or ask us to remove it.

When we may disclose personal data

We do not sell personal data. We may disclose personal data:

• to employers, agencies, helpers, representatives, and account users where disclosure is part of the service requested or listing published;
• to vendors and service providers that help us host, store, secure, analyse, maintain, market, communicate, bill, or operate Biodata.sg;
• to payment processors, identity providers, communications providers, storage providers, analytics providers, professional advisers, insurers, auditors, or debt collection providers where reasonably necessary;
• to regulators, public authorities, law enforcement, courts, tribunals, or other parties where required or permitted by law or necessary to protect rights, safety, or security;
• in connection with a merger, restructuring, financing, acquisition, sale, transfer, or reorganisation of business assets, subject to appropriate safeguards.

Cookies, analytics, and local storage

We may use cookies, pixels, local storage, session storage, logs, and analytics tools to remember preferences, restore sessions, preserve referral or promo information, understand traffic patterns, measure performance, prevent abuse, and improve user experience. You can usually control cookies through your browser settings, although disabling them may affect how some features work.

Retention

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including to maintain listings, provide accounts and subscriptions, support users, resolve disputes, enforce agreements, meet legal or regulatory obligations, and preserve security logs. When retention is no longer necessary, we may delete, anonymise, or de-identify the data.

Public listings generally remain visible while active. Deleted, de-listed, expired, or replaced content may remain in backups, logs, audit records, payment records, support records, or third-party caches for a period where technically, legally, or operationally necessary.

Protection of personal data

We use reasonable administrative, technical, and organisational safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These safeguards may include access controls, authentication, transport security, provider controls, monitoring, and operational procedures. No platform is completely secure, so we cannot guarantee absolute security or recovery of data.

If a data incident occurs, we will assess it and take steps required by applicable law, which may include notifying affected individuals or regulators where legally required.

Transfers outside Singapore

Some service providers may process or store data outside Singapore. Where we transfer personal data internationally, we will take reasonable steps to ensure that the receiving party provides a standard of protection comparable to that required under applicable Singapore law.

Your rights and choices

Subject to applicable law, you may request access to personal data in our possession or control, request correction of inaccurate or incomplete data, withdraw consent for certain processing, or ask us to de-list or delete data where appropriate. We may need to verify your identity before acting on a request.

Some requests may be limited where exceptions under the PDPA or other laws apply, where information is controlled by an agency or another submitter, where deletion would affect legal claims or audits, or where retention remains necessary for legitimate business or legal purposes.

Children

Biodata.sg is intended for adults and businesses involved in lawful hiring, recruitment, and employment-agency services. It is not directed to children, and we do not knowingly collect personal data from children for independent use of the platform.

Third-party services

The platform may contain links to third-party websites, payment tools, messaging services, maps, social media features, or agency websites. Their privacy practices are governed by their own policies, not this one, and we are not responsible for how those third parties handle personal data.

Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be effective when posted unless stated otherwise. Continued use of Biodata.sg after an update means you acknowledge the revised policy.

Contact

For privacy questions or requests, email hello@biodata.sg.