Privacy Policy

1. Who We Are

List operates as an online marketplace based in Singapore. We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

2. What Data We Collect

We collect the following types of personal data:

• Identity data: name, profile photo
• Contact data: email address, phone number (if provided)
• Account data: role (customer or provider), account creation date
• Transaction data: booking details, purchase history, payment amounts
• Payment data: payment is processed by Stripe; we receive only a payment reference and masked card details
• Usage data: pages visited, features used, device and browser type
• Communications: messages sent through the platform

3. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Facilitate bookings and transactions between users and providers
• Process payments via our payment processor
• Send transactional notifications (booking confirmations, receipts)
• Improve platform features and user experience
• Comply with legal and regulatory obligations
• Detect and prevent fraud or policy violations

We will not use your data for purposes beyond the above without your consent.

4. Sharing with Third Parties

We share personal data only where necessary:

• Stripe: Payment processing. Stripe handles all card data and is PCI-DSS compliant. See Stripe's Privacy Policy.
• Firebase (Google): Database and authentication infrastructure.
• Analytics providers: Aggregate, anonymised usage statistics.
• Service providers: Your name and booking details may be shared with the provider you book a service with.
• Legal authorities: Where required by law or to protect our rights.

We do not sell your personal data to third parties.

5. Cookies

We use cookies and similar technologies for authentication (keeping you logged in), security, and platform analytics. Essential cookies are required for the platform to function. By using the platform, you consent to our use of cookies as described.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete or anonymise your data within a reasonable period, except where retention is required by law (e.g. financial records).

7. Your Rights (PDPA)

Under the PDPA, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for uses beyond the primary purpose (note: this may affect your ability to use the platform)

To exercise these rights, contact us at privacy@list.com. We will respond within 30 days.

8. Security

We implement industry-standard technical and organisational measures to protect your personal data. However, no system is completely secure. If you believe your account has been compromised, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform.