Privacy Policy
Last Updated: 25 February 2026
1. Introduction
This Privacy Policy describes how HomeGigs Private Limited (UEN: 202545582W), operating as BoxPls ("BoxPls", "we", "us", or "our"), collects, uses, discloses, and protects your personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA").
By using our website (boxpls.sg), mobile applications, and services (collectively, the "Platform"), you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
2. Personal Data We Collect
We collect the following categories of personal data:
2.1 Account information. Name, email address, phone number, and account credentials.
2.2 Delivery information. Pickup and delivery addresses, delivery instructions, and parcel descriptions.
2.3 Payment information. Payment is processed by Stripe, our third-party payment processor. BoxPls does not collect or store your credit card numbers, debit card numbers, or bank account details. We receive only transaction confirmations and payment status from Stripe.
2.4 Usage data. Information about how you interact with the Platform, including pages visited, features used, and time spent on the Platform.
2.5 Device and technical data. IP address, browser type, operating system, device identifiers, and app version.
2.6 Communication data. Records of your communications with our support team, including emails, chat messages, and feedback.
2.7 Location data. For BoxPls drivers operating our in-house fleet, we collect precise location data including background location when the app is active or running in the background. This data is collected to enable real-time delivery tracking, route optimization, and dispatch efficiency for business operations. Location data is protected in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA) and is used solely for operational purposes. It is not sold or shared with third parties except as required for service delivery or by law.
3. How We Collect Your Personal Data
3.1 Directly from you. When you create an account, place a delivery order, contact our support team, or submit feedback.
3.2 Automatically. Through cookies, analytics tools, and similar technologies when you use the Platform.
3.3 From third parties. From our payment processor (Stripe) regarding transaction status, and from analytics providers regarding Platform usage patterns.
4. Purposes for Collecting, Using, and Disclosing Your Personal Data
We collect, use, and disclose your personal data for the following purposes:
4.1 To provide and manage our delivery services, including matching you with Delivery Partners, processing orders, and facilitating deliveries.
4.2 To process payments and issue refunds.
4.3 To communicate with you about your orders, account, and our services, including service updates and support responses.
4.4 To improve and optimize the Platform, including analyzing usage patterns, fixing bugs, and developing new features.
4.5 To ensure the safety and security of our Platform and users.
4.6 To comply with applicable laws, regulations, and legal obligations.
4.7 To send you marketing communications about our services and promotions, where you have consented to receive such communications.
5. Disclosure of Personal Data
We may disclose your personal data to the following parties:
5.1 Delivery Partners. We share your name, phone number, and delivery address(es) with the assigned Delivery Partner to facilitate your delivery.
5.2 Payment processor. We share necessary transaction information with Stripe to process payments.
5.3 Service providers. We may share personal data with third-party service providers who assist with hosting, analytics, customer support, and email communications. These providers are contractually obligated to protect your personal data.
5.4 Legal and regulatory authorities. We may disclose personal data where required by law, regulation, legal process, or government request.
5.5 Business transfers. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.
6. Data Retention
6.1 We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.
6.2 Account data is retained for as long as your account is active. After account deletion, we may retain certain data for up to 12 months for legal and operational purposes.
6.3 Transaction records are retained for up to 7 years in accordance with Singapore's accounting and tax requirements.
7. Data Security
7.1 We implement reasonable security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.
7.2 These measures include encryption of data in transit (SSL/TLS), secure cloud infrastructure, and access controls.
7.3 While we take reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your personal data.
8. Cookies
8.1 The Platform uses cookies and similar technologies to enhance your experience, analyze usage, and support our services.
8.2 You can manage cookie preferences through your browser settings. Disabling cookies may affect certain features of the Platform.
9. Third-Party Links
9.1 The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.
9.2 We encourage you to review the privacy policies of any third-party services you access through the Platform.
10. International Data Transfers
10.1 We primarily store and process personal data in Singapore. Where data is transferred outside of Singapore, we take reasonable steps to ensure that it receives a standard of protection comparable to that under the PDPA.
11. Your Rights Under the PDPA
Under the PDPA, you have the following rights:
11.1 Access. You may request access to the personal data we hold about you.
11.2 Correction. You may request that we correct any inaccurate or incomplete personal data.
11.3 Withdrawal of consent. You may withdraw your consent for us to collect, use, or disclose your personal data at any time. Please note that withdrawal of consent may affect our ability to provide certain services to you.
11.4 To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to your request within 30 days.
12. Marketing Communications
12.1 We may send you marketing communications about our services and promotions if you have consented to receive them.
12.2 You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails, updating your account preferences, or contacting us at support@boxpls.sg.
12.3 Opting out of marketing communications does not affect service-related communications (e.g. order confirmations, delivery updates).
13. Changes to This Privacy Policy
13.1 We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws.
13.2 We will notify you of material changes by posting the updated policy on the Platform with a revised "Last Updated" date.
13.3 Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.
14. Account Deletion
You may delete your BoxPls account and all associated personal data at any time directly through the app:
Open the BoxPls app → Go to Profile → Scroll down → Tap Delete Account.
Upon deletion, your personal data will be permanently removed from our systems within 7 days, except where retention is required by law (e.g. transaction records for accounting purposes).
If you encounter any issues, you may also submit a deletion request to contact@boxpls.sg.
15. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a complaint regarding our handling of your personal data, please contact:
Data Protection Officer
HomeGigs Private Limited
65 Pavilion View, Singapore
Email: support@boxpls.sg