Privacy Policy

Last updated: 22 October 2026. This Policy replaces the Privacy Policy last revised on 11 August 2026.

1. About this Policy

1.1 This Policy explains how Home Pros Pte. Ltd. (UEN 202118507K), which operates Homees at homees.co ("Homees", "we", "us"), collects, uses, discloses and protects personal data under the Personal Data Protection Act 2012 ("PDPA").

1.2 It covers:

(a) visitors to the Website;

(b) members who create a free account and use My Home;

(c) people who contact us by the contact form or by email;

(d) individuals at businesses whose details appear in Listings; and

(e) people whose public Google reviews are shown on Listings.

1.3 Words defined in our Terms of Use have the same meaning here.

2. The short version

2.1 We collect only what we need to run a free directory and your private Home Profile.

2.2 We do not sell or rent personal data.

2.3 We do not share homeowners' personal data with contractors. A contractor learns about you only if you contact them yourself.

2.4 We send marketing only if you tick the marketing box. You can change your mind at any time.

2.5 You can ask to see, correct or delete your data by emailing contact@homees.co.

3. Personal data we collect, why, on what basis, and for how long

3.1 The table below lists each type of personal data we collect, what we use it for, the basis on which we use it, and how long we keep it.

Account details: full name, email address, Singapore mobile number, password (stored in hashed form by our authentication provider) · Purpose: Create and run your account; sign you in; verify your email; reset your password; send service messages; show you contractors' contact details; keep the account secure · Legal basis / consent: Your consent, given when you sign up after being told these purposes (PDPA ss 13–14, 20) · Retention: While your account is open, then deleted or anonymised within 12 months after closure

Marketing preference: whether you ticked "I'd like to receive marketing promotions, member deals and home tips from Homees", and when you gave or withdrew consent · Purpose: Send marketing promotions, member deals and home tips, only if you opted in; keep proof of your choice · Legal basis / consent: Your express, opt-in consent (unticked by default). You may withdraw at any time (PDPA s 16; Part 9 for messages to Singapore telephone numbers) · Retention: Preference: while your account is open. Record of consent or withdrawal: 2 years so we can prove and honour it

Home Profile details: home type, flat type, town, year built, floor area, last renovation, installed systems · Purpose: Build your maintenance schedule, reminders, condition score and cost estimates · Legal basis / consent: Your consent, given when you enter the details · Retention: While your account is open. You can edit or delete details at any time. Deleted with your account (see Account details row)

Your records in My Home: jobs (title, category, contractor name, dates, costs, your private rating, notes), items and appliances (brand, model, purchase date, warranty expiry, last service), notes, renovation projects and tasks (budgets, costs, dates), saved contractors · Purpose: Store and show your records to you; calculate your dashboard and reminders · Legal basis / consent: Your consent, given when you enter the records · Retention: While your account is open. You can delete individual records at any time. Deleted with your account

Messages to us: name, email, subject and message sent through the contact form, and emails to contact@homees.co · Purpose: Answer you; handle listing corrections, takedown requests and complaints; keep a record of what was agreed · Legal basis / consent: Deemed consent: you give the data voluntarily for that purpose (PDPA s 15) · Retention: 2 years after the matter is closed

Technical and usage data: IP address, browser and device type, pages visited, referring page, a random analytics session ID, and page-performance timings · Purpose: Keep the Website working and secure; protect it from bots and abuse; measure usage in aggregate; fix problems · Legal basis / consent: Deemed consent by your use of the Website (PDPA s 15); and, where they apply, the PDPA exceptions for legitimate interests and business improvement · Retention: Analytics session ID: 30 minutes. Other technical data: retention set by our hosting and analytics providers, normally under 90 days

Business contact details in Listings: names of individuals who appear in a business's public materials (for example sole proprietors), business phone, email, address, website and social media links · Purpose: Publish Listings so that homeowners can find and contact the business; verify and correct Listings · Legal basis / consent: Mostly business contact information, to which most PDPA obligations do not apply (PDPA s 4(5)). Other personal data is publicly available (PDPA First Schedule) or provided by the business · Retention: While the business is listed, then 12 months after removal. A short record of a removal request is kept to prevent re-listing

Google reviews: reviewer's name as shown on Google, star rating, review text and date · Purpose: Show public reviews of listed businesses, with attribution · Legal basis / consent: Publicly available data (PDPA First Schedule) · Retention: Refreshed at each Google sync. A review removed from Google is removed from Homees at the next sync

Requests from businesses: name, role and email of the person who writes to claim, correct or remove a Listing · Purpose: Verify the request and act on it · Legal basis / consent: Deemed consent: given voluntarily for that purpose (PDPA s 15) · Retention: 2 years after the request is closed

3.2 What we do not collect. We do not ask for NRIC, FIN or passport numbers. We do not collect payment card or bank details, because there are no payments on the Website. We do not collect your precise location. The Website has no quote requests, promotions, online transactions or job applications, so we collect no data for them.

3.3 Ask Homees. When we inspected the Website's code on 22 October 2026, Ask Homees worked out its answers inside your browser from our own Listings, guides and FAQs, and did not send your questions to us or to anyone else. Please do not type personal details into Ask Homees.

3.4 Other people's data. If you enter another person's personal data (for example, a family member's name in a note), please make sure that you are entitled to give it to us.

3.5 Accuracy. Please keep your account details up to date. You can correct them by contacting us. We take reasonable steps to make sure that personal data we use to make decisions about you, or disclose, is accurate and complete.

4. How we use personal data

4.1 We use personal data only for the purposes in clause 3, and for these related purposes: to comply with the law and with requests from authorities; to establish, exercise or defend legal claims; and to protect the Website, our users and the businesses we list from fraud and misuse.

4.2 If we want to use your personal data for a new purpose, we will tell you and, where the PDPA requires, ask for your consent first.

4.3 Service messages. While you hold an account, we will send you messages needed to run it, for example email verification, password resets, security alerts and notice of changes to our Terms or this Policy. These are not marketing. You cannot opt out of them while you keep your account.

5. Consent and withdrawing consent

5.1 You give consent when you sign up, enter details in My Home, tick the marketing box or send us a message. We also rely on deemed consent where you give us data voluntarily for an obvious purpose.

5.2 You may withdraw your consent at any time by emailing contact@homees.co. We will tell you what will happen if you withdraw. For example, without your account details we cannot keep your account open. We will act on a withdrawal within 10 business days and will confirm it to you.

5.3 Withdrawing consent does not affect what we did before you withdrew, or data we must keep by law.

6. Marketing and Do Not Call

6.1 We send marketing promotions, member deals and home tips only if you ticked the marketing box when you signed up or later agreed in writing. We send marketing only by email.

6.2 If we send marketing to a Singapore telephone number (by call, SMS or WhatsApp), we do so on the basis of the clear and unambiguous consent you gave in writing or another accessible form. Without that consent, we check the Do Not Call Registry before sending any message. Each marketing message identifies Homees and tells you how to contact us and how to opt out.

6.3 Each marketing email has an unsubscribe link. You can also opt out by emailing contact@homees.co. We stop marketing to you as soon as practicable and in any case within the time required by the PDPA and the Spam Control Act 2007.

7. Who we share personal data with

7.1 Service providers. We use service providers to run the Website, under contracts that require them to protect personal data and to use it only on our instructions. When we inspected the code and network behaviour of the test site on 22 October 2026, we found the following:

Supabase · What it does for Homees: Database and user authentication (sign-up, sign-in, password reset) · Personal data involved: Account details, Home Profile, My Home records, contact-form messages

Lovable · What it does for Homees: Website platform and hosting; first-party analytics script ("/~flock.js", sent through the Website's own "/~api/analytics" endpoint); page-performance telemetry script ("/__l5e/events") · Personal data involved: Technical and usage data. The analytics script's default destination is the analytics service Tinybird processed by Lovable's analytics provider

Cloudflare · What it does for Homees: Content delivery and security (bot protection); image storage (Cloudflare R2) · Personal data involved: IP address and technical data

Google · What it does for Homees: Embedded map on the Contact page · Personal data involved: When the map loads, Google receives your IP address and technical data and may set its own cookies under Google's privacy policy

Supabase (built-in email service) · What it does for Homees: Sends account emails (verification, password reset) and any marketing emails · Personal data involved: Name and email address

7.2 We did not find on the test site: Google Analytics, Google Tag Manager, Meta (Facebook) Pixel, Hotjar, Microsoft Clarity, Sentry, PostHog, any third-party chat widget, reCAPTCHA or any payment processor.

7.3 Contractors. We do not give homeowners' personal data to contractors. If you call, WhatsApp or email a contractor, you share your details with that contractor directly, and the contractor is responsible for how it uses them.

7.4 Others. We may also disclose personal data:

(a) to our professional advisers, such as lawyers and auditors, under a duty of confidence;

(b) to regulators, law enforcement agencies and courts where the law requires or allows it; and

(c) to a buyer or successor of the Homees business, or a prospective one, as permitted by the PDPA for business asset transactions. The data will remain protected under this Policy.

7.5 We do not sell, rent or trade personal data, and we do not share it with reward, loyalty, co-branded or other marketing partners.

8. Transfers outside Singapore

8.1 Some of our service providers store or process data outside Singapore. Our database and authentication provider, our hosting and security providers and our email provider may process data in Singapore, elsewhere in the Asia-Pacific region or in the United States.

8.2 When personal data is transferred outside Singapore, we make sure that the recipient is bound to protect it to a standard comparable to the PDPA. We do this by contract terms, binding corporate rules or recognised certifications, as required by section 26 of the PDPA and the Personal Data Protection Regulations 2021.

9. Cookies and similar technologies

9.1 We use a small number of cookies and browser-storage items. The table below lists what we found on the test site on 22 October 2026.

session-id (cookie) · Set by: Website analytics script (/~flock.js) · What it does: Groups page views into one visit using a random ID, so that we can count usage in aggregate · How long: 30 minutes

sb-[project]-auth-token (browser local storage) · Set by: Supabase authentication · What it does: Keeps you signed in · How long: Until you sign out or the session expires

__cf_bm (cookie) · Set by: Cloudflare · What it does: Tells people apart from bots, for security · How long: 30 minutes

Google cookies · Set by: Google, through the map embedded on the Contact page · What it does: Display the map · How long: Set by Google

9.2 We found no advertising or cross-site tracking cookies set by us.

9.3 You can block or delete cookies and browser storage in your browser settings. If you do, signing in will not work.

10. Data about listed businesses

10.1 Listings contain business information taken from public sources (the business's own website, its Google Business Profile and the ACRA register) or sent to us by the business. Much of it is business contact information, which the PDPA largely excludes from its obligations.

10.2 Business phone numbers and email addresses are shown to signed-in members, so that homeowners can contact the business directly.

10.3 A business, or an individual named in a Listing, may ask us to correct, update or remove information by emailing contact@homees.co (businesses should quote their UEN). See clause 9.4 of the Terms of Use.

10.4 Google reviews are reproduced from Google. Requests to change or remove a review should go to Google. A review that Google removes is removed from Homees at our next sync.

11. How we protect personal data

11.1 We make reasonable security arrangements to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal and loss. These include encryption in transit (HTTPS), minimum password rules (at least 12 characters, with upper- and lower-case letters, a number and a symbol), access controls that limit each member's account data to that member, and regular review of who on our team can access personal data.

11.2 No method of transmission or storage is completely secure. Please keep your password safe.

12. How long we keep personal data

12.1 We keep personal data only as long as we need it for the purposes in clause 3, or as long as the law requires. After that, we delete it or anonymise it so that it no longer identifies you. Retention periods for each type of data are shown in the table in clause 3.

12.2 Backups are overwritten on a rolling cycle of 30 days, so deleted data may remain in backups until then.

13. Data breaches

13.1 If we suspect a data breach, we will act quickly to contain it and will assess whether it must be notified. We aim to finish the assessment within 30 days.

13.2 If a breach is likely to cause significant harm to the people affected, or affects 500 or more people, we will notify the Personal Data Protection Commission as soon as practicable, and in any case within 3 calendar days after deciding that it is notifiable. Where a breach is likely to cause significant harm to you, we will also tell you, unless the law says otherwise.

14. Your rights: access, correction and account deletion

14.1 Access. You may ask for a copy of your personal data that we hold, and for information about how it has been used or disclosed in the past year.

14.2 Correction. You may ask us to correct an error or omission in your personal data. Where it is needed, we will also send the corrected data to organisations to which we disclosed it in the past year.

14.3 Deletion. You may ask us to close your account and delete your data, as set out in clause 16 of the Terms of Use.

14.4 How to ask. Email contact@homees.co from your registered email address. We may need to verify your identity before we act.

14.5 When we will reply. We will respond as soon as reasonably possible, and normally within 30 days. If we need longer, we will tell you within 30 days when we expect to respond. We may charge a reasonable fee for an access request, and if we do we will tell you the fee before we process the request. We do not currently charge for access requests. There is no fee for a correction request.

14.6 Complaints. If you are not satisfied with how we handle your personal data, please contact our Data Protection Officer first. You may also complain to the Personal Data Protection Commission (www.pdpc.gov.sg).

15. Children

15.1 Membership is for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe that a child has given us personal data, please contact us and we will delete it.

16. Data Protection Officer

16.1 Our Data Protection Officer can be contacted at:

Data Protection Officer: Data Protection Officer, Home Pros Pte. Ltd.

Home Pros Pte. Ltd., 8 Burn Road, #08-16 Trivex, Singapore 369977

Email: contact@homees.co

Available during Singapore business hours: Monday to Friday, 9:00 AM – 6:00 PM.

17. Changes to this Policy

17.1 We may update this Policy. The new version will be posted on the Website with a new "Last updated" date. If a change is material, we will email members before it takes effect.

18. Governing law

18.1 This Policy is governed by the laws of Singapore.