Privacy Policy

1. Introduction

1.1 This Privacy Policy explains how Homegigs Private Limited (UEN: 202545582W), trading as BoxPls Logistics ("BoxPls", "we", "us", or "our"), collects, uses, discloses and protects personal data under the Personal Data Protection Act 2012 of Singapore ("PDPA").

1.2 It applies to our customers, the recipients and contacts at the addresses we deliver to, people who receive our tracking links, and visitors to our website (boxpls.sg) and apps (together, the "Platform"). How we handle the personal data of our drivers and staff is set out in their employment terms.

1.3 By booking with us or using the Platform, you consent to the collection, use and disclosure of your personal data as described here.

2. Personal Data We Collect

2.1 Contact details. Your name, phone number, email address and business name. You do not need an account to book with us. If you create one, we also keep your login details, and if you sign in with Google or Apple, the identifier and email address they share with us.

2.2 Booking details. Pickup and delivery addresses, unit numbers, item descriptions, instructions, photos and documents you send us, and the date, time and price of each booking.

2.3 Recipients and site contacts. The names, phone numbers and addresses of the people at your pickup and drop-off points, which you give us so we can deliver.

2.4 Access information. Door codes, alarm codes and site notes you choose to store with us so our drivers can reach your premises.

2.5 Delivery records. Photos our drivers take at pickup and drop-off, delivery times and status, and signed delivery orders or invoices where you ask for them. Location details embedded in photo files are removed when they are uploaded.

2.6 Location during a booking. We record our driver's location while your booking is in progress, to show live tracking and arrival times. We do not track the location of customers or recipients.

2.7 Payment records. Payment is made by PayNow or bank transfer. We keep invoices, receipts and payment references. We do not collect or store card numbers. Records of card payments made before we moved to PayNow and bank transfer are kept as transaction records.

2.8 Communications. Your messages with us on WhatsApp, email and phone, and the booking updates we send.

2.9 Website and app usage. Pages visited, actions taken, device and browser type, approximate location derived from your IP address, and error reports, collected through the tools described in Section 9.

3. How We Collect It

3.1 From you, when you enquire, book, message us or use the Platform.

3.2 From our customers, when they give us the details of recipients and site contacts. Customers confirm they are allowed to share these details with us for the booking.

3.3 From our drivers, when they record photos, delivery status and location during a booking.

3.4 Automatically, through the analytics and monitoring tools on the Platform, and from Google or Apple if you use them to sign in.

4. Why We Use It

• To quote, schedule, perform and support your bookings
• To send booking confirmations, delivery updates, delivery photos, invoices and receipts by WhatsApp and email
• To show live tracking and arrival times
• To invoice, collect payment and handle refunds and claims
• To plan routes and assign drivers
• To keep our Platform secure, fix errors and improve our service
• To meet our legal, accounting and tax obligations
• To send you news and offers, only where you have agreed to receive them

5. Who We Share It With

5.1 Drivers and partner carriers. The driver or partner carrier performing your booking receives the names, phone numbers, addresses, instructions and access information needed to do the job.

5.2 Recipients and tracking-link holders. People who receive a tracking link see the details described in Section 6.

5.3 Service providers. We use trusted providers to run our business, who process data on our behalf and are bound to protect it:

• Amazon Web Services: hosting, storage and sign-in (Singapore)
• Google: maps, address lookup and route planning, website analytics, and Google sign-in
• Apple: Sign in with Apple
• Meta: WhatsApp business messaging
• Microsoft Clarity: website usage analytics and session recordings
• Sentry: error monitoring and session replays
• SendGrid: email delivery
• Expo: app push notifications

5.4 Authorities. Where required by law, regulation, court order or a lawful request.

5.5 Business transfers. To a buyer or successor if all or part of our business is sold or reorganised.

5.6 We do not sell personal data.

6. Tracking Links and Delivery Photos

6.1 Tracking links show the driver's name, photo and live location, the stops on the route, estimated arrival times and delivery photos. Anyone holding the link can view it without signing in, so please share it only with people involved in the delivery.

6.2 Tracking links expire within 24 hours after the booking is completed.

6.3 Delivery photos are taken to show your items were collected or delivered. Drivers are instructed to photograph the goods and where they were left, not people.

7. Overseas Transfers

7.1 Our main database and file storage are in Singapore. Some of our service providers, including Google, Meta, Microsoft, Sentry and SendGrid, process data in other countries such as the United States and the European Union.

7.2 When data leaves Singapore, we rely on contractual commitments from these providers to protect it to a standard comparable to the PDPA.

8. How Long We Keep It

8.1 We keep personal data only as long as it is needed for the purposes above, or as required by law.

8.2 Booking, delivery and payment records, including delivery photos and location history, are kept for up to 7 years to meet accounting, tax and legal requirements and to handle claims.

8.3 Closing your account. If you ask us to close your account, or use the delete option in the app, we deactivate it so it can no longer be used. We keep the records linked to it as the law requires, and use them only for those legal, accounting and dispute purposes.

9. Website Analytics and Cookies

9.1 Our website uses cookies and similar technologies through these tools:

• Google Analytics, to understand how visitors use our website and which pages lead to enquiries.
• Microsoft Clarity, to see how visitors move through our pages, using heatmaps and session recordings. Text you type into forms is masked.
• Sentry, to detect and fix errors, including replays of a sample of sessions.

9.2 You can block or delete cookies in your browser settings, or use Google's Analytics opt-out browser add-on. Some features may not work as intended if cookies are blocked.

10. Messages From Us

10.1 We send service messages about your bookings by WhatsApp and email, including to the site contacts you give us. Recipients can stop delivery updates by replying STOP.

10.2 We send marketing messages only with your consent. You can opt out at any time by replying STOP, using the unsubscribe link, or contacting us. Opting out of marketing does not stop service messages about your bookings.

11. How We Protect It

11.1 We use encryption in transit, secure cloud hosting, encrypted storage for sensitive documents, and access controls so staff see only what they need. Access information is shown only to the drivers assigned to your bookings.

11.2 No system is completely secure. If a data breach is likely to cause significant harm, we will notify the Personal Data Protection Commission and affected individuals as the PDPA requires.

12. Your Rights

12.1 You may ask to access or correct the personal data we hold about you, or withdraw your consent to its use. Withdrawing consent may mean we can no longer provide some Services.

12.2 Contact our Data Protection Officer using the details in Section 15. We will respond within 30 days.

13. Children

13.1 Our Services are intended for adults and businesses. We do not knowingly collect personal data from anyone under 18 except as a recipient or site contact given to us by a customer.

14. Changes to This Policy

14.1 We may update this Privacy Policy from time to time. We will post the updated version on the Platform with a new "Last updated" date.

15. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to raise a concern, contact:

Data Protection Officer
Homegigs Private Limited (BoxPls Logistics)
Singapore
Email: support@boxpls.sg
WhatsApp / Phone: +65 8984 4805