Privacy policy

1. Introduction & Data Protection Officer

F&L ENGINEERING PTE LTD (trading as “ibuykitchen”, “we”, “us”, or “our”) is committed to safeguarding the personal data of our customers, commercial partners, and website visitors in compliance with the Personal Data Protection Act 2012 of Singapore (“PDPA”).

If you have questions regarding this Privacy Policy, wish to withdraw consent, or wish to request access to or correction of your personal data, please contact our appointed Data Protection Officer (DPO):

2. Personal data we collect

We collect only the information necessary to evaluate your kitchen equipment, provide commercial valuation quotes, and coordinate physical collection:

• Contact Information: Your name, phone number (mobile/WhatsApp), email address, and company or outlet name.
• Premises & Logistics Data: Your outlet address, 6-digit postal code, loading bay height restrictions, and tenancy handover schedule.
• Equipment Records: Photographs, equipment lists, brand details, and condition notes submitted via our quote form or WhatsApp.
• Technical & Usage Data: Internet protocol (IP) addresses, browser types, and anonymized site interaction metrics collected via Google Analytics (only after consent is granted).

3. Purpose of data collection and use

We collect, use, and disclose your personal data strictly for the following business purposes:

• Reviewing uploaded photos and technical details to generate equipment valuation quotes.
• Contacting you via WhatsApp, phone call, or email to clarify specifications or discuss pricing.
• Scheduling on-site inspections, vehicle access permits with building management, and collection logistics.
• Executing equipment purchase handover agreements and processing bank transfer or PayNow disbursements.
• Protecting our web services against spam, abuse, and automated bot traffic via Cloudflare Turnstile.

We do not sell, rent, or trade your personal data to third parties for advertising or commercial marketing purposes.

4. Third-party data intermediaries & infrastructure

To operate our platform securely, we utilize reputable service providers that act as data intermediaries under data processing agreements:

• Hosting & File Storage: Vercel Inc. (Next.js edge network and Vercel Blob storage in Singapore region `sin1`).
• Anti-Bot Verification: Cloudflare Inc. (Cloudflare Turnstile privacy-preserving verification).
• Transactional Email: Resend Inc. (routing incoming quote requests to our operations team).
• Analytics: Google LLC (Google Analytics 4, operating strictly with Consent Mode v2 and IP anonymization).

5. Cookies and analytics consent

Our website implements Google Consent Mode v2. By default, all analytics and advertising storage cookies remain denied. Google Analytics scripts only track page engagement if you explicitly click “Accept” on our cookie consent banner.

You can change or reset your cookie preferences at any time by clicking “Cookie settings” in the footer of any page.

6. Retention and security of personal data

We retain personal data only for as long as necessary to fulfill the business and legal purposes for which it was collected. Inquiry photographs and unaccepted quote records are routinely purged after 90 days. Records relating to completed commercial transactions and tax invoices are retained for five (5) years in accordance with Inland Revenue Authority of Singapore (IRAS) statutory requirements.

We employ rigorous technical safeguards, including HTTPS TLS 1.3 encryption, Content Security Policies, rate limiting, and restricted administrative access to protect personal data from unauthorized access or loss.

7. Your rights under the PDPA

Under the PDPA, Singapore residents have the right to request:

• Access to your personal data in our possession or control and information regarding how it has been used.
• Correction of any error or omission in your personal data.
• Withdrawal of consent for the continued collection, use, or disclosure of your personal data.
• Deletion of your personal data, subject to statutory record retention obligations.

To exercise any of these rights, please submit a written request to our DPO at sales@ibuykitchen.com.sg. We will respond within thirty (30) business days.