Privacy Policy

1. Who we are

This policy explains how The Local Labs Group (operating SaveTotal) (“SaveTotal”, “we”) collects, uses and discloses personal data, in line with Singapore’s Personal Data Protection Act 2012 (PDPA). It covers homeowners who request quotes and book jobs, and providers who list with us.

2. What we collect

From homeowners

• Your name, mobile number and, if you give it, your email address.
• Your address: postal code, block and street, and unit number. We work out your area from the postal code.
• Your home type, the service you need, number of units, preferred visit time and any notes.
• The providers you picked, the quotes you received, your booking, any price changes, and what you told us you paid.
• Reviews you leave, and messages you send us.
• Receipts, invoices or payment screenshots you choose to attach to a booking. Customer payment proof is visible only through your private booking link and to SaveTotal; provider invoices are also shared with the customer.

From providers

• Business details, contact person, phone, email, prices, service areas, and records of quotes, bookings and fees.

From everyone who visits

• Anonymous counts of taps on our WhatsApp and call buttons, with a short visit reference code (such as V-AB2CD). We do not store your name, number or IP address with these counts.

3. How we use it

• To confirm your request and send it to the providers you picked.
• To manage quotes, bookings, price change requests, cancellations and booking summaries.
• To keep a record of what was shown and agreed at each step, and to use it to resolve disputes.
• To bill providers their fees and track their reliability.
• To route service and payment reports to the booked provider, track their response, and follow up on unresolved or repeated issues. Customer payment-proof files remain private to the customer and SaveTotal.
• To spot duplicate requests. If the same phone number sends a request again within 24 hours, we resend the link to that phone instead of creating a new request.
• To meet our legal and accounting obligations.

By submitting a request or signing up, you consent to us using your details for these purposes. When you give us details so we can do something you asked for, such as passing your booking to a provider, the PDPA also treats you as consenting to that use.

4. Messages we send

We contact you by WhatsApp, and by email if you gave one, about your request and booking. New aircon bookings include WhatsApp servicing reminders about 90 days after completed visits. You can turn reminders off using the link in your request confirmation, completed booking or a reminder. We remember your preference for future aircon bookings using the same mobile number. Existing opted-out preferences are respected. We do not send marketing on behalf of anyone else.

5. Who we share it with

Providers you pick. Up to three providers per request see your first name, area and the job details. Only the provider you book receives your full address and phone number, and only after they accept the booking. That provider uses your details as an organisation in its own right under the PDPA, and only to do your job.

Service providers who process data for us. Cloudflare hosts our website and database. Meta (WhatsApp) carries our messages. Resend delivers our emails. When you type your postal code, we send only the postal code to OneMap, the Singapore Land Authority’s address service, to look up your street.

Where the law requires. We may disclose data to authorities where required or permitted by law.

We do not sell your details or pass them to other providers, advertisers or data brokers.

6. Data outside Singapore

Some of our service providers, such as Cloudflare, Meta and Resend, may store or process data outside Singapore. When this happens, we take reasonable steps to make sure your data gets a standard of protection comparable to the PDPA.

7. How long we keep it

• Booking, fee and agreement records: 5 years after the booking, for business, tax and legal purposes.
• Requests that never led to a booking: 2 years.

After that, we delete the data or anonymise it so it can no longer identify you.

8. Keeping it safe

We limit who can see your details, keep your address and phone number from providers until a booking is accepted, and use reputable hosting with encrypted connections. No system is perfectly secure. If a data breach occurs, we will notify you and the Personal Data Protection Commission where the PDPA requires it.

9. Your rights

• Access. You can ask what personal data we hold about you and how it has been used or disclosed in the past year. We will respond within 30 days, or tell you within that time when we can.
• Correction. You can ask us to correct data that is wrong or incomplete.
• Withdrawing consent. You can withdraw your consent at any time. If you do, we may not be able to process your request or booking, or to pass messages between you and your provider. We may still keep records we must keep by law, such as booking and fee records.

10. Contact our Data Protection Officer

Email our Data Protection Officer at hil@thelocallabs.com, or WhatsApp or call us on 8111 2221. We may need to check your identity before acting on a request. If you are not satisfied with our response, you can contact the Personal Data Protection Commission.

11. Changes

If we change how we handle your details, we will update this page and its date.