Privacy Notice

When you order from us, we save your name, phone number, and (if you ask for delivery) your address. We keep a record of what you ordered so we don't have to ask you the same questions twice.

We do not sell your data, share it with marketers, or send mass emails. We use it to cook, deliver, and occasionally message you on WhatsApp — that's it.

If anything below is unclear, just WhatsApp us on +65 9644 3352 and we'll explain in plain English.

From you, directly:

• Your name — so we know who's collecting or who the courier should ask for.
• Your phone number — the WhatsApp number you message us from. Almost everything we do runs through this.
• Your delivery address — only if you ask us to arrange Grab or Lalamove.
• Your order — dishes, quantities, spice level, dietary notes, the date you want it for.
• Payment confirmation — the screenshot or reference number you send after paying via PayNow or PayLah!. We don't see your bank balance or card details.
• Anything you tell us — allergies, family preferences, "no coriander", "extra spicy for my dad". We write it down so we don't forget.

From your visit to this website:

• A small first-party cookie (a random string called ar_vid) so we can tell a repeat visit from a brand-new one. No name, no email — just a random ID stored on your device.
• Which pages you visited, in what order, how long you stayed, and how far you scrolled. So we know which pages help and which we should rewrite.
• Which "Order on WhatsApp", "Call", or "Email" button you tapped, and where on the page it was. This is how we measure whether the website is actually helping people reach out.
• Your approximate city, worked out from your IP address. We don't keep your full IP — just the city and country.
• Your browser, device, and operating system. Useful when something looks broken only on, say, older Android phones.
• How you got to the site — Google, Instagram, a friend's WhatsApp link — using the standard referrer the browser sends and the campaign tags we set on our own outbound links.
• Plus the usual web-server logs (full IP, browser, pages visited) kept by our hosting provider for 30–90 days for security and uptime — these don't feed the dashboard above.

And what we don't collect from your visit: your name, your email, your phone number, your precise location, or anything your browser might have autofilled into a form. None of that is even technically possible without you typing it into a message to us.

• To take and prepare your order — confirm what you want, what time, and what to charge.
• To get the food to you — pass your name, phone, and address to Grab or Lalamove if you've asked for delivery.
• To send you an invoice — if you've asked for one (catering, office orders).
• To remember you next time — so when you message us again, we already know your spice level and that you don't eat onion.
• To ask if you'd like the same again — very occasionally. One message, easy to say no, never a mass-blast.
• To respond to reviews and questions — if you've left a Google review or asked us something publicly.

We don't profile you, target ads at you, or pass your details to anyone outside the people in the next section.

• WhatsApp / Meta — all order conversations happen on WhatsApp, so Meta naturally sees the messages between us. Their privacy notice applies to that channel.
• Grab and Lalamove — we share your name, phone, and delivery address with whichever courier service you've asked us to book.
• PayNow and PayLah! (DBS) — these are bank-to-bank transfers. We see the confirmation; the banks handle the rest.
• Our hosting provider — runs this website and the order system. They process data on our instructions and don't use it for their own purposes.
• Singapore tax authorities — if we're legally required to keep records for tax or food-safety reasons.

We don't sell, rent, or share your data with anyone else. We don't run advertising pixels on this site.

• Order history and contact details — for as long as you're a customer, and a reasonable period after. If you'd like us to delete everything, message us and we will.
• Invoices and payment confirmations — at least five years, because Singapore tax law requires it.
• WhatsApp messages — stay on our phone until we clear them. WhatsApp's own retention is governed by Meta.
• Web-server logs — a short rolling window (typically 30–90 days) for security and debugging.

Under Singapore's Personal Data Protection Act (PDPA), you can ask us to:

• Tell you what we hold about you — your contact details, your order history.
• Correct anything that's wrong — a wrong spelling of your name, an old address.
• Delete your data — except records we're legally required to keep (e.g. invoices for tax).
• Stop messaging you — say the word and we won't send the "would you like this again?" notes.

WhatsApp us on +65 9644 3352 or email [email protected] with the request. We aim to respond within a few days.

If you feel we haven't handled your data properly, you can raise it with us first, and ultimately with Singapore's Personal Data Protection Commission (PDPC).

Our own measurement. The same server that delivers this page also keeps a quiet record of which pages get visited, how long people stay, what they click, and which "Order on WhatsApp" or "Call" button gets tapped. The data sits in our own database — it isn't shared with a third-party analytics company.

The cookie we set. A single first-party cookie called ar_vid — a random string with no personal information in it — lets us tell whether you're a returning visitor. It lives on your device for about a year, or until you clear your browser data. We also use your browser's session storage for a short-lived session ID; it disappears the moment you close the tab.

Why we measure at all. So we can answer questions like: which dishes do people scroll past, where do new visitors come from, which page on the menu actually helps. Plain product feedback for a small kitchen — nothing more.

Google Analytics. We may also load Google Analytics 4 to see aggregate trends — daily visitor totals, popular pages. It's configured with IP anonymisation on and no advertising features. If you'd rather not be counted, most browsers have a "Do Not Track" setting, or any ad-blocker will quietly skip it.

What we don't do. No advertising pixels (Meta, TikTok, Google Ads — none). No third-party trackers reading what you do on this site. No session-replay services watching your cursor. No reverse phone-number lookups. No selling of any data to anyone.

In your browser, not ours. Your order builder — the dishes you've added before sending to WhatsApp — sits in your own browser's local storage. We don't see it until you actually send the message.

If we change the meaningful parts of this notice — what we collect or who we share it with — we'll update the "Last updated" date at the top of the page. Small wording tweaks won't bump the date.