Pack and Store Pte. Ltd.

Pack and Store Pte. Ltd. ("Pack and Store", "we", "us", "our") operates a valet storage service in Singapore — we collect, store, and return customers' belongings. This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").

We collect, use, and disclose personal data with your consent, with deemed consent, or as otherwise permitted or required under the PDPA and other applicable laws. Where consent is required, we will notify you of the relevant purposes before or at the time of collection.

1. Personal Data We Collect

We may collect the following personal data:

• Contact information: name, phone number, email address, postal code, and collection/delivery address.
• Account information: login credentials and account activity when you register for a Pack and Store account.
• Service information: details of items you store with us (including serialised seal numbers and item inventory), storage duration, and service history, to the extent necessary to provide the service.
• Payment information: credit card payments are processed by PayPal, and we do not receive or store your full card details. Where you pay by PayLah or bank transfer, we may retain the payer name, transaction reference, amount, and payment confirmation. In all cases we retain transaction confirmations and billing history necessary for accounting purposes.
• Communication records: messages sent to us via WhatsApp, email, phone, or our website enquiry forms.
• Technical data: IP address, browser type, and website usage data collected automatically via cookies or similar technologies when you visit our website (see Section 6).

2. How We Collect Personal Data

We collect personal data when you:

• Submit an enquiry via our website, WhatsApp, phone, or email.
• Create or log in to a Pack and Store account.
• Make a booking for collection, storage, retrieval, or delivery of items.
• Make a payment via credit card (processed by PayPal), PayLah, or bank transfer.
• Contact our customer support team.
• Browse our website (via cookies and analytics tools).

3. Purposes of Collection and Use

We use personal data for the following purposes:

• To fulfil our storage services, including scheduling collection, storage, retrieval, and delivery of your items.
• To manage your Pack and Store account and process payments.
• To respond to enquiries and provide customer support via WhatsApp, email, or phone.
• To send you service-related notifications (e.g. billing, appointment reminders, account updates).
• With your consent, to send you promotional offers and marketing communications. You may opt out of marketing communications at any time. Where we send marketing messages to Singapore telephone numbers by SMS or voice call, we comply with the Do Not Call provisions of the PDPA.
• To improve our website and services, including through website analytics.
• To comply with legal and regulatory obligations.

4. Disclosure of Personal Data

We do not sell your personal data. We may disclose personal data to:

• Payment providers: PayPal (for credit card transactions) and our bank or payment service providers (for PayLah and bank transfer payments), to process payments.
• Messaging platforms: when you communicate with us via WhatsApp, your messages are transmitted and processed by Meta Platforms in accordance with WhatsApp's own terms of service and privacy policy.
• IT and service providers: providers of our website hosting, booking and account system, and email services, who process personal data on our behalf.
• Analytics and advertising providers: Google and Microsoft, in connection with the website analytics, session analytics, and advertising measurement services described in Section 6.
• Our staff and authorised representatives, to carry out collection, delivery, and storage operations.
• Professional advisers (e.g. accountants, auditors, lawyers), where reasonably necessary.
• Government authorities or regulators, where required by law.

We require third parties who process personal data on our behalf to protect it in accordance with applicable data protection laws.

5. Google User Data (Google Services and Google Ads API)

Pack and Store uses Google services, including the Google Ads API, to manage and measure our own advertising. Our application accesses only Pack and Store's own Google Ads account. Where a Google account is connected to our application via Google OAuth:

• We access only the Google Ads account data required to operate and report on advertising campaigns (such as account identifiers, campaign settings, and performance metrics).
• We do not sell Google user data, and we do not use or share it except to provide this functionality, to comply with applicable law, or with explicit consent.
• OAuth access tokens are stored securely and are not shared with third parties. Access can be revoked at any time via your Google Account security settings.
• Upon revocation of access or upon request, we will delete associated Google user data within 30 days, unless retention is required by law.
• Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

6. Cookies, Analytics, and Advertising

Our website uses Google Tag Manager to deploy the following analytics and advertising tools:

• Google Analytics (GA4): collects information about how visitors use our website (such as pages viewed and time on site) to help us improve the site.
• Google Ads conversion measurement: measures the effectiveness of our advertising, including when visitors click through to contact us via WhatsApp.
• Microsoft Clarity: records how visitors interact with our website pages (such as clicks, scrolling, and mouse movement) through session replay and heatmaps, to help us improve website usability.

These tools use cookies and similar technologies. The information they collect is processed by Google and Microsoft respectively, in accordance with their own privacy policies.

You can control cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality of some website features.

7. Data Protection, Security, and Data Breaches

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, or similar risks.

If a data breach affecting personal data occurs, we will take reasonable steps to contain and assess it. Where required under the PDPA, we will notify the Personal Data Protection Commission (PDPC) and affected individuals within the applicable timeframes.

Separately, for the security and privacy of stored belongings, customers are not permitted direct access to our storage facilities.

8. Transfer of Personal Data Outside Singapore

Some of our service providers (for example, PayPal, Meta Platforms/WhatsApp, Google, Microsoft, and our website hosting and email providers) may store or process personal data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure that the data receives a standard of protection comparable to that under the PDPA, including through contractual or other legally binding arrangements where applicable.

9. Retention of Personal Data

We retain transaction and accounting records for the periods required under applicable tax and accounting laws. Other personal data is retained only for as long as it is needed for the relevant service, legal, or legitimate business purpose, after which it is deleted or anonymised.

10. Your Rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you and information about how it has been used or disclosed in the past year.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent for the collection, use, or disclosure of your personal data, by giving us reasonable notice, subject to legal or contractual restrictions.

For access and correction requests, we will respond as soon as reasonably possible, and generally within 30 days. If we are unable to respond within 30 days, we will inform you of the timeframe within which we will respond.

For withdrawal of consent, we will process your request within a reasonable time (as a general guide, within 10 business days of receiving it). Please note that withdrawing consent may mean we are unable to continue providing storage services to you, and withdrawal does not affect personal data we are required or permitted to retain under applicable law.

To exercise these rights, please contact our Data Protection Officer using the details in Section 12. We may require verification of your identity before processing your request.

11. Third-Party Websites

Our website and communications may contain links to third-party websites (e.g. WhatsApp, PayPal, social media platforms). This Privacy Policy does not apply to those websites, and we encourage you to review their respective privacy policies.

12. Data Protection Officer / Contact

Pack and Store has appointed a Data Protection Officer (DPO) to oversee our compliance with the PDPA. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer
Pack and Store Pte. Ltd.
21 Bukit Batok Crescent, Wcega Tower, #09-79, Singapore 658065
Email: support@packandstore.com.sg (Attention: Data Protection Officer)
Phone: +65 6802 6889

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.