Editorial & Transparency

Privacy Policy

The Whisker Hut is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

Personal Data We Collect

Personal data refers to data about an individual who can be identified from that data, or from that data combined with other information.

  • Name and email address
  • Phone number
  • Cat details (name, vaccination records, special needs)
  • Booking history and preferences
  • Payment information (processed by Stripe — not stored by us)
  • Communication records (contact form messages, email correspondence)
  • IP address and browser metadata (automatically collected)

Purpose of Collection

PURPOSES

  • Processing and managing boarding reservations
  • Communicating booking confirmations, updates, and reminders
  • Providing care for your cat during boarding (dietary needs, medical requirements)
  • Processing payments securely via Stripe
  • Responding to enquiries and providing customer support
  • Complying with legal and regulatory requirements (AVS licensing)
  • Improving our services and facilities

Data Retention

Booking and financial records are retained for 7 years in accordance with Singapore tax and accounting requirements.

Accuracy

We take reasonable steps to ensure personal data is accurate and complete. You may request corrections at any time.

Retention

Account data is retained while your account is active. Booking and tax records: 7 years. Contact form messages: 2 years. You may request deletion of non-legally-required data.

Transfers

Your data is processed by third-party services that may store data outside Singapore. All providers comply with data protection standards equivalent to PDPA.

Third-Party Disclosures

We share personal data only with the following service providers, strictly for the purposes described. We do not sell personal data to third parties.

Stripe

Payment processing

Handles card, PayNow, and GrabPay transactions. Your payment details are processed directly by Stripe and never stored on our servers.

Resend

Email delivery

Sends booking confirmations, reminders, and contact form responses on our behalf.

Cloudflare R2

File storage

Stores uploaded vaccination records and pet photos securely.

Railway

Application hosting

Our application and database are hosted on Railway's Singapore region servers.

Google Maps

Map embed on About page

Embeds an interactive map of our boarding location. When you view our About page, your browser loads map content directly from Google, which receives your IP address and standard browser metadata.

Data Accuracy

We take reasonable steps to ensure personal data we collect and hold is accurate, complete, and up to date. If you believe that any personal data we hold about you is inaccurate, incomplete, or misleading, please contact us to request a correction.

You may also update your account information at any time by logging into your account.

Your Rights

  • AccessYou may request a copy of your personal data held by us.
  • CorrectionYou may request corrections to inaccurate or incomplete data.
  • Withdrawal of ConsentYou may withdraw consent for data collection. Note: withdrawing consent for essential booking data may prevent us from providing boarding services.

Breach Notification

In the event of a data breach that is likely to result in significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals within 72 hours of becoming aware of the breach.

We maintain security measures to protect your personal data, including encrypted data transmission, secure authentication, and regular security reviews.

For more information, visit the PDPC website.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

Have questions about your data?

Get in touch and we'll be happy to address any concerns about how we handle your personal information.