Policy draft · operator details and local legal review required before publication
Privacy and data protection notice
How Daily Minimart handles personal data for accounts, listings, messages, orders, safety and legal obligations.
Who is responsible
Data controller/operator: [insert the registered legal entity name, registration number and business address]. Data Protection Officer: [insert the DPO name or role and a monitored contact email or postal address]. These required operator details have not yet been configured on this site and must be completed before publication. For Singapore users, this notice is intended to describe practices under the Personal Data Protection Act 2012 (PDPA); other regional sites must also be reviewed against the laws of their own country.
Data we handle
Depending on how you use the service, we may handle account identifiers and contact details (such as username and email); authentication records (password hashes and security settings); listings, images, profile and storefront content; messages, offers, favorites, reports and support records; order, item, payment-status, recipient, phone, delivery-address and buyer-note details; and technical, security and activity records such as IP address, timestamps, browser/session data and actions taken on the site. Do not place sensitive personal data in public listings or messages unless it is necessary.
Purposes and legal basis
We use personal data to create and administer accounts; publish and manage listings; let buyers and sellers communicate; process carts, orders, returns and payment status; send transactional or security notices; prevent abuse, investigate reports, secure the service, maintain records, and respond to legal requests. We will notify you of purposes and obtain or rely on consent where required by applicable law. Optional marketing, if introduced, will be handled separately with the required choice and unsubscribe method.
Who receives data
A seller receives the buyer details needed to arrange an order, such as recipient name, phone, delivery address and buyer note. Buyers and sellers may see information you choose to publish or send to them. Service providers may process data for hosting, email delivery, security, analytics or payment services. PayPal handles its own payment processing under its terms and privacy notice when PayPal is used. We may disclose information where required by law, to protect users or the service, or to establish or defend legal claims. We do not sell personal data as a data-broker service.
Cookies, security and overseas processing
The site uses session cookies needed for sign-in, security and site functions. Technical and activity records may be used to protect accounts and investigate misuse. We use reasonable administrative, technical and organisational safeguards appropriate to the data, but no internet transmission or storage system can be guaranteed completely secure. Hosting, email or payment providers may process data outside your country. Before such transfers, the operator must put in place protections required by the applicable law, including Singapore PDPA transfer-limitation requirements where relevant.
Retention and your choices
We keep personal data only for as long as reasonably needed for the purposes above, account and transaction records, safety investigations, dispute handling, and legal or accounting requirements, then delete or de-identify it when appropriate. This application does not currently publish fixed retention periods; the operator must set and implement a retention schedule. Subject to applicable law and exceptions, you may request access to or correction of your personal data and may withdraw consent where processing is based on consent. Some data must be retained or a service may no longer be available. Direct requests to the DPO contact above once it has been published.
Breach and policy updates
The operator will assess suspected personal-data breaches and notify the PDPC and affected individuals when notification is required under the PDPA, including applicable timing requirements. We may update this notice when practices or laws change; material changes will be communicated by an appropriate notice. The notice version and effective date should be maintained by the operator.
Marketplace: Singapore · Review the policy that applies to your country.