Privacy Policy

1. Introduction

Hello There Boo (“we”, “us”, “our”) operates a matchmaking service connecting Singapore-based individuals with potential partners, including individuals based overseas (such as in Vietnam and Malaysia). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our website, sign up as a client, or otherwise interact with our matchmaking services.

This policy is intended to comply with the Singapore Personal Data Protection Act 2012 (PDPA) and applicable regulations issued by the Personal Data Protection Commission (PDPC). By submitting your information to us or using our services, you acknowledge that you have read and understood this Privacy Policy.

If you are located outside Singapore, additional local data protection laws may also apply to your information, and we will take reasonable steps to comply with them where relevant.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Contact and identity information — full name, phone number, email address, date of birth, nationality, and residential address.

Photos and videos — profile photographs, introduction videos, or other media you submit for matchmaking purposes.

Verification documents — identification documents (such as NRIC, passport, or work pass) and other background-verification materials used to confirm identity, age, marital status, or eligibility for our matchmaking service. We collect these only where necessary to establish your identity or eligibility to the standard our service requires (see Section 3A on our handling of NRIC and identity documents).

Payment and financial information — billing details, payment card information (processed via third-party payment processors), and transaction history.

Sensitive personal information — details you voluntarily share for matchmaking purposes, which may include health information, family background, religious or cultural preferences, relationship history, lifestyle preferences, and partner-preference criteria.

Technical data — IP address, browser type, device information, and website usage data collected through cookies or similar technologies when you visit our website.

3. How We Collect Personal Data

We collect personal data through direct submission via our website sign-up and registration forms; consultations or interviews (in person, by phone, or by video call); documents you upload or send to us for verification; and ongoing communications throughout the matchmaking process.

3A. Our Handling of NRIC and Identity Documents

Consistent with PDPC guidelines on the collection, use, and disclosure of NRIC numbers, we collect your NRIC or other national identity information, and copies of identity documents, only where it is necessary to accurately verify your identity, age, or marital status for our matchmaking service. Where possible, we verify these documents rather than retaining full copies, we retain only the minimum information needed, and we store such documents securely with restricted access. We do not use your NRIC number for any purpose other than the verification purposes described here.

4. Purposes for Collecting and Using Personal Data

We collect and use your personal data to: assess your eligibility and suitability for our matchmaking services; create and manage your client profile; identify, recommend, and facilitate introductions to potential matches; verify identity and reduce the risk of fraud or misrepresentation; process payments and manage billing; communicate with you regarding your account, matches, and our services; improve our services and conduct internal analysis; and comply with legal or regulatory obligations.

5. Consent

We will only collect, use, or disclose your personal data with your consent, except where permitted or required by law without consent (for example, to comply with a court order). You may withdraw your consent at any time by contacting us using the details in Section 12, subject to legal or contractual restrictions. Withdrawing consent may affect our ability to continue providing matchmaking services to you.

Given the nature of our service, we treat sensitive personal information (such as health, religious background, or relationship history) with additional care. We collect such information only where it is directly relevant to facilitating a suitable match, through a separate, specific opt-in rather than bundled into general sign-up, and you may decline to provide specific sensitive details.

6. Disclosure of Personal Data

We do not sell your personal data. We may disclose personal data to the following categories of recipients where necessary for the purposes in Section 4:

Prospective matches — with your specific consent given at profile creation, limited profile information (such as photos, age, occupation, and preferences) may be shared with prospective matches as part of the introduction process. You control what is shown. Sensitive details, full contact information, and verification documents are not shared without your specific consent.

Overseas matchmaking partners or agents — where applicable, we may engage partner agencies or representatives based overseas (including in Vietnam and Malaysia) to assist in identifying or coordinating potential matches. Where this applies, we will inform you and obtain your consent before your personal data is shared, and we bind those partners by contract to protect your data (see Section 7).

Service providers — third parties who support our operations, such as payment processors, IT and hosting providers, and verification or background-check providers, who are contractually bound to protect your data and use it only for the purposes we specify.

Legal and regulatory authorities — where required by law, regulation, or valid legal process.

7. Overseas Transfer of Personal Data

Because our matchmaking services may involve introductions with individuals based overseas, your personal data may be transferred to, stored in, or processed in countries outside Singapore, including Vietnam and Malaysia. In accordance with the PDPA’s Transfer Limitation Obligation, before transferring personal data overseas we will ensure the recipient is bound by legally enforceable obligations (typically a written contract) to protect your personal data to a standard comparable to the PDPA, and we will obtain your consent where required.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. As a guide, we aim to securely destroy or anonymise verification documents within a reasonable period after your membership ends and there is no longer a legal or business need to retain them. Once personal data is no longer needed and there is no legal requirement to retain it, we will securely destroy or anonymise it.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, or disposal. This includes restricting access on a need-to-know basis and using secure systems for storing sensitive documents such as identification and verification materials. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Breach Notification

We maintain procedures to detect and respond to data breaches. In the event of a data breach, we will assess it in accordance with the PDPA and, where the breach is likely to result in significant harm to affected individuals or is of a significant scale, we will notify the PDPC and affected individuals as required by law and within the timeframes set out in the PDPA.

11. Your Rights

Subject to applicable exceptions under the PDPA, you have the right to: request access to the personal data we hold about you; request correction of inaccurate or incomplete personal data; withdraw consent to our collection, use, or disclosure of your personal data; and request that we delete your personal data, subject to our legal and contractual obligations. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 12. We may require you to verify your identity before processing such requests, and we will respond within a reasonable timeframe as required under the PDPA.

12. Data Protection Officer and Contact

We have designated a Data Protection Officer (DPO) responsible for overseeing our compliance with the PDPA. If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Jian Lai Goh, Co-Founder
Hello There Boo
Email: jianlai.goh@hellothereboo.com

13. Marketing Messages and Do Not Call

If you have consented, we may send you marketing communications about our services. Where we send marketing messages to Singapore telephone numbers (including calls, SMS, or messaging apps), we will comply with the Do Not Call provisions of the PDPA, including checking the relevant registers and honouring opt-outs, unless an applicable exemption applies. You may opt out of marketing communications at any time using the unsubscribe method provided or by contacting us.

14. Cookies and Website Tracking

Our website may use cookies and similar tracking technologies to improve user experience, remember preferences, and analyse website traffic. You can manage or disable cookies through your browser settings, though this may affect certain website functions.

15. Eligibility and Age Restriction

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete it promptly.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised “Last updated” date. We encourage you to review this policy periodically.