Privacy Policy

1. Who We Are

AbsQueue (“AbsQueue”, “we”, “us”, or “our”) operates absqueue.com, a marketplace connecting customers with independent beauty service professionals in Singapore and Malaysia.

Data Protection Officer (DPO) Contact
For all personal data protection enquiries, please contact our DPO at:
Email: [email protected]

This Privacy Policy explains how we collect, use, disclose, and protect your personal data. AbsQueue operates in Singapore and Malaysia, and the law that applies to you depends on where you are:

• In Singapore, the Personal Data Protection Act 2012 (PDPA) and its subsidiary legislation, as administered by the Personal Data Protection Commission (PDPC).
• In Malaysia, the Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024, as administered by the Personal Data Protection Commissioner (JPDP). This applies to your data because we deal commercially with people in Malaysia, and it applies whether or not AbsQueue holds a Malaysian company registration.

Most of what follows is the same under both laws, and we have written it once rather than twice. Where Malaysia requires something Singapore does not, that section says so explicitly.

By using absqueue.com, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

We collect personal data from two groups of users: Customers (individuals browsing and contacting professionals) and Professionals (beauty professionals listing their services).

2.1 Data You Provide Directly

All Users:

• Name
• Email address
• Password (stored in encrypted form via Firebase Authentication)
• Authentication data when you sign in using Google OAuth, including your name, email address, and the link to your Google profile photo

Professionals (additional):

• Profile photograph
• Portfolio images (photos of your work)
• Neighbourhood or general location (e.g., “Tampines”, “Jurong East”)
• Service listings, descriptions, and pricing
• Contact handles: phone number, WhatsApp number, and/or Instagram username (voluntarily provided and displayed publicly on your profile)
• A brief professional biography

Customers (additional):

• When you make a booking, we collect the phone number you provide, and for a house call or hotel booking, the address or hotel and room where the service takes place.

2.2 Data Collected Automatically

When you use absqueue.com, we and our technology partners may collect:

• Pages viewed and features used (via Vercel Analytics and Plausible Analytics)
• Referring website or source
• Browser type and device type
• General geographic region (derived from IP address)
• Session cookies and functional cookies necessary for the website to operate

We do not use advertising cookies, cross-site tracking cookies, or marketing pixels.

2.3 Google Calendar Data (Professionals, Optional)

Professionals may choose to connect a Google Calendar account from their dashboard settings. If you do, we access your Google Calendar through Google's calendar.events permission, which lets us:

• Create a calendar event on your connected calendar when a booking is confirmed
• Delete that calendar event if the booking is later cancelled

We do not read, list, or otherwise access any of your existing calendar events. We store your Google Calendar access token and refresh token so we can keep making these updates on your behalf. These tokens are not shared with any third party and are not used for advertising, profiling, or to train any AI or machine learning model. You can disconnect Google Calendar at any time from your dashboard settings, which revokes our access and stops any further updates.

3. Why We Collect Your Data

We collect and use personal data only for the purposes listed below. We will not use your data for a new purpose without notifying you first.

Note on Professional Contact Handles: Phone numbers, WhatsApp numbers, and Instagram usernames submitted by Professionals are displayed publicly on professional profiles to enable direct customer contact. By submitting this information, Professionals consent to its public display. Professionals can update or remove this information at any time via their dashboard.

Note on Professional Location: Neighbourhood-level location (not exact address) is displayed publicly to help customers find nearby professionals. We do not collect or display your precise GPS coordinates.

4. How We Collect Your Data

• Registration and profile forms: when you create an account or set up a professional profile
• Google OAuth: when you choose to sign in with Google (we receive your name, email, and a link to your Google profile photo from Google)
• Google Calendar connection: when a Professional chooses to connect Google Calendar from their dashboard, we receive an access token and refresh token from Google so we can create and delete calendar events on their behalf
• Automatic collection: through cookies and analytics tools when you browse absqueue.com
• Voluntary submission: when you contact us via email or submit a support request

5. Consent and Your Choices

5.1 How Consent Is Obtained

By creating an account on absqueue.com, you consent to the collection and use of your personal data as described in this Privacy Policy.

For Professionals, by submitting contact handles (phone, WhatsApp, Instagram) and location information for public display, you provide deemed consent to that public display.

5.2 Withdrawing Consent

You may withdraw consent to our use of your personal data at any time by:

• Deleting your account (which removes your profile and personal data from active use), or
• Emailing [email protected] to make a specific withdrawal request

Consequence of withdrawal: Withdrawal of consent may mean we can no longer provide you with access to AbsQueue's services. For Professionals, withdrawal will result in your profile being taken down.

We will process withdrawal requests within a reasonable time and inform you of any consequences before acting on your request.

6. Sharing Your Data with Third Parties

We do not sell your personal data. We share personal data only in the following circumstances.

6.1 Professionals and Studios You Book With

When you make a booking, we share your full name, phone number, email address, and the details of that booking with the Professional who will serve you. If you book at a Studio (a shop or business that lists its services on AbsQueue), we also share them with that Studio's administrators, who can view them for that booking so they can manage appointments and contact you about it. A Studio can see only the bookings made at that Studio, not bookings you make with a Professional independently. Professionals and Studios may use your details only to provide, manage, or follow up on the booking, and not for unrelated marketing without your separate consent.

6.2 Service Providers and Technology Partners

We use the following third-party services that may process your personal data on our behalf:

These service providers are contractually required to handle your personal data in a manner consistent with the PDPA and are not permitted to use your data for their own purposes.

6.3 Legal Disclosure

We may disclose personal data if required to do so by Singapore law, court order, or regulatory authority, or where we believe in good faith that disclosure is necessary to protect our legal rights or the safety of users.

6.4 Business Transfers

If AbsQueue undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and any resulting changes to this Privacy Policy.

7. Cross-Border Data Transfers

AbsQueue uses cloud-based services (including Google Firebase and Vercel) whose infrastructure is located outside Singapore, primarily in the United States and other regions. Your personal data may therefore be transferred to, stored in, and processed in countries outside Singapore.

We take steps to ensure that your personal data receives a standard of protection comparable to that provided under the PDPA, including by engaging only with service providers that have appropriate data protection commitments in place.

If you are in Malaysia: Malaysia removed its list of approved destination countries in June 2025, so a transfer out of Malaysia now rests on the protections actually in place rather than on the destination being pre-approved. Your data is transferred to and processed in Singapore and in the regions our cloud providers operate from. We rely on our contracts with those providers, which oblige them to protect your data to a standard comparable to Malaysian law, to notify us of any breach, and to use your data only as we instruct.

8. Data Retention

We retain your personal data only for as long as it is necessary for the purposes set out in this Policy, or as required by law.

When personal data is no longer required, we will securely delete or anonymise it.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encrypted storage and transmission (HTTPS / TLS)
• Firebase Authentication with industry-standard security protocols
• Access controls limiting who within our team can access personal data
• Regular review of data access practices

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Data Breach Notification: In the event of a data breach that is likely to result in significant harm to individuals, or that affects a significant number of individuals, we will notify the PDPC and affected users in accordance with our obligations under the PDPA.

If you are in Malaysia: breach notification is not discretionary and runs to a fixed clock. Where a breach causes or is likely to cause significant harm, we will notify the Personal Data Protection Commissioner as soon as practicable and in any case within 72 hours of becoming aware of it, and we will notify you directly within 7 days of that notification.

10. Your Rights Over Your Data

These rights are available to you under Singapore's PDPA and under Malaysia's PDPA alike, except where a specific right is marked otherwise:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right of Correction: You may request that we correct any inaccuracies in your personal data. Many corrections can be made directly through your account dashboard.
• Right to Withdraw Consent: You may withdraw consent to our use of your personal data at any time, subject to legal or contractual restrictions.
• Right to Data Portability (Malaysia): If you are in Malaysia, you may ask us to transmit your personal data to another service provider, where that is technically feasible and the receiving format is compatible. This right came into force in Malaysia in June 2025. In Singapore the equivalent regulations are still pending finalisation by the PDPC, and we will update this section when they take effect.
• Right to Limit Processing (Malaysia): If you are in Malaysia, you may ask us to limit how we process your personal data, and you may withdraw consent to processing for direct marketing at any time.

To exercise any of these rights, email us at [email protected] with the subject line “Data Rights Request”. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request.

11. Cookies and Tracking Technologies

11.1 What We Use

Plausible Analytics does not use cookies and does not collect personally identifiable information. It operates without cross-site tracking.

11.2 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of AbsQueue from functioning correctly.

12. Children's Data

AbsQueue is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a person under 18 has provided us with personal data, please contact us at [email protected] and we will take steps to delete that data promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the “Last Updated” date at the top of this Policy
• Notify registered users by email at least 14 days before the change takes effect

Your continued use of absqueue.com after the effective date of any changes constitutes your acceptance of the updated Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

AbsQueue
Data Protection Officer
Email: [email protected]
Website: absqueue.com

We are committed to working with you to resolve any concerns about your personal data.

Related Policies

• Terms of Service