Privacy Notice

When you order from us, we save your name, phone number, and (if you ask for delivery) your address. We keep a record of what you ordered so we don't have to ask you the same questions twice.

We do not sell your data, share it with marketers, or send mass emails. We use it to cook, deliver, and occasionally message you on WhatsApp — that's it.

If anything below is unclear, just WhatsApp us on +65 9644 3352 and we'll explain in plain English.

From you, directly:

• Your name — so we know who's collecting or who the courier should ask for.
• Your phone number — the WhatsApp number you message us from. Almost everything we do runs through this.
• Your delivery address — only if you ask us to arrange Grab or Lalamove.
• Your order — dishes, quantities, spice level, dietary notes, the date you want it for.
• Payment confirmation — the screenshot or reference number you send after paying via PayNow or PayLah!. We don't see your bank balance or card details.
• Anything you tell us — allergies, family preferences, "no coriander", "extra spicy for my dad". We write it down so we don't forget.

From your visit to this website:

• A small first-party cookie (a random string called ar_vid) so we can tell a repeat visit from a brand-new one. No name, no email — just a random ID stored on your device.
• Which pages you visited, in what order, how long you stayed, and how far you scrolled. So we know which pages help and which we should rewrite.
• Which "Order on WhatsApp", "Call", or "Email" button you tapped, and where on the page it was. This is how we measure whether the website is actually helping people reach out.
• Your approximate city, worked out from your IP address, and a shortened version of that address — the last part is stripped off before it is saved, so what remains points at a neighbourhood rather than a device. The full address is used for the city lookup and then discarded; it is never written down.
• Your browser, device, and operating system. Useful when something looks broken only on, say, older Android phones.
• How you got to the site — Google, Instagram, a friend's WhatsApp link — using the standard referrer the browser sends and the campaign tags we set on our own outbound links.
• Plus the usual web-server logs (full IP, browser, pages visited) kept by our hosting provider for 30–90 days for security and uptime — these don't feed the dashboard above.

And what we don't collect from your visit: your name, your email, your phone number, your precise location, or anything your browser might have autofilled into a form. None of that is even technically possible without you typing it into a message to us.

If you order a bento at /bento/:

• Your name, email address and mobile number — typed into the checkout form. The email is where your receipt and collection code go; the mobile is how we reach you if something goes wrong on the day.
• Which pickup point you chose, and what you ordered.
• Any notes you add — allergies, "no onion", anything that changes what goes in the box.
• A one-way hash of your IP address, not the address itself. It exists to spot a burst of junk orders from one place. It cannot be turned back into an IP.
• Whether you ticked the menu-reminder box, so we honour it.

Your bank details never touch us. Payment runs on Stripe's own hosted page, by PayNow. We are told the amount, the method and a reference — never an account number.

If you send us feedback from /bento/:

• What you wrote, and which of the four things it was about — a pickup point, timing, the food, or something else.
• Your email address, only if you chose to give one. It is optional, and it is used for two things: to reply, and — if you asked us to come to a particular block — to tell you when we start going there. Nothing else. You can stop the second at any time from our unsubscribe page.
• A rating out of five, if you gave one. It is for the kitchen. We do not publish it and it never appears as a review score anywhere.
• A one-way hash of your IP address, on the same terms as above.
• If you sent it from your order page, which order and which day it was about — that is what makes it useful.

You do not have to give a name, and we do not ask for one.

• To take and prepare your order — confirm what you want, what time, and what to charge.
• To get the food to you — pass your name, phone, and address to Grab or Lalamove if you've asked for delivery.
• To send you an invoice — if you've asked for one (catering, office orders).
• To remember you next time — so when you message us again, we already know your spice level and that you don't eat onion.
• To ask if you'd like the same again — very occasionally. One message, easy to say no, never a mass-blast.
• To respond to reviews and questions — if you've left a Google review or asked us something publicly.

We don't profile you, target ads at you, or pass your details to anyone outside the people in the next section.

• WhatsApp / Meta — all order conversations happen on WhatsApp, so Meta naturally sees the messages between us. Their privacy notice applies to that channel.
• Grab and Lalamove — we share your name, phone, and delivery address with whichever courier service you've asked us to book.
• PayNow and PayLah! (DBS) — these are bank-to-bank transfers. We see the confirmation; the banks handle the rest.
• Stripe — handles every bento payment. You scan Stripe's PayNow QR with your bank app, so no payment details pass through us. We pass Stripe your email and the order total so it can send you to the right place and take the right amount. Stripe is PCI-DSS certified and has its own privacy notice.
• Titan — our email host. Every receipt, reminder and collection email is sent and stored through them.
• Anthropic — when we draft a "we haven't seen you in a while" message, we ask an AI to help word it. It is sent your first name only, roughly how long since you last ordered, how many times you have ordered, and the names of dishes you have had. It is never sent your phone number, your email, your address or your payment details. Nothing is sent automatically — a message only exists because we asked for one, and one of us reads it before it ever reaches you.
• Our hosting provider — runs this website and the order system. They process data on our instructions and don't use it for their own purposes.
• Singapore tax authorities — if we're legally required to keep records for tax or food-safety reasons.

We don't sell, rent, or share your data with anyone else. We don't run advertising pixels on this site.

• Order history and contact details — for as long as you're a customer, and a reasonable period after. If you'd like us to delete everything, message us and we will.
• Invoices and payment confirmations — at least five years, because Singapore tax law requires it.
• WhatsApp messages — stay on our phone until we clear them. WhatsApp's own retention is governed by Meta.
• Web-server logs — a short rolling window (typically 30–90 days) for security and debugging.
• Bento orders — kept as part of your order history, on the same terms as everything else above.
• The contents of bento emails — the wording of each receipt or reminder is cleared after six months. The record that it was sent, and whether it arrived, is kept; the words are not.
• Bento feedback — what you wrote and any email address you left are cleared after twelve months. What stays is the anonymous shape of it: that somebody asked for a particular block, on a particular date, with a particular rating. That is what tells us where to go next, and it identifies nobody.
• Menu-reminder opt-outs — kept indefinitely, on purpose. It is the only way to be sure an unsubscribe is never quietly undone.

Under Singapore's Personal Data Protection Act (PDPA), you can ask us to:

• Tell you what we hold about you — your contact details, your order history.
• Correct anything that's wrong — a wrong spelling of your name, an old address.
• Delete your data — except records we're legally required to keep (e.g. invoices for tax).
• Stop messaging you — say the word and we won't send the "would you like this again?" notes.

WhatsApp us on +65 9644 3352 or email [email protected] with the request. We aim to respond within a few days.

If you feel we haven't handled your data properly, you can raise it with us first, and ultimately with Singapore's Personal Data Protection Commission (PDPC).

Our own measurement. The same server that delivers this page also keeps a quiet record of which pages get visited, how long people stay, what they click, and which "Order on WhatsApp" or "Call" button gets tapped. The data sits in our own database — it isn't shared with a third-party analytics company.

The cookie we set. A single first-party cookie called ar_vid — a random string with no personal information in it — lets us tell whether you're a returning visitor. It lives on your device for about a year, or until you clear your browser data. We also use your browser's session storage for a short-lived session ID; it disappears the moment you close the tab.

Why we measure at all. So we can answer questions like: which dishes do people scroll past, where do new visitors come from, which page on the menu actually helps. Plain product feedback for a small kitchen — nothing more.

Google Analytics. We may also load Google Analytics 4 to see aggregate trends — daily visitor totals, popular pages. It's configured with IP anonymisation on and no advertising features. If you'd rather not be counted, most browsers have a "Do Not Track" setting, or any ad-blocker will quietly skip it.

What we don't do. No advertising pixels (Meta, TikTok, Google Ads — none). No third-party trackers reading what you do on this site. No session-replay services watching your cursor. No reverse phone-number lookups. No selling of any data to anyone.

In your browser, not ours. Your order builder — the dishes you've added before sending to WhatsApp — sits in your own browser's local storage. We don't see it until you actually send the message.

If we change the meaningful parts of this notice — what we collect or who we share it with — we'll update the "Last updated" date at the top of the page. Small wording tweaks won't bump the date.