← All policies

POLICIES & TERMS

Privacy Policy

Version 3.1 · updated 2 Oct 2026

1. What Honestfix does today

Honestfix is a directory for comparing home-service providers and contacting them directly. You don't need an account to use it. Quote requests, paid leads and SMS verification are not available. We will update this policy before introducing additional data collection for those services.

2. Who we are

Honestfix is run by Elephant & Ostrich LLP, a Singapore limited liability partnership, contactable at hello@honestfix.sg. This is the organisation responsible for your personal data under the PDPA.

3. What we collect, and why, in each flow

Searching. When you search, we store the text you typed (in a cleaned-up form), the time, what the search led to, and a random session identifier. We use it to see what people look for and to improve search. We don't ask for your name, and we don't link a search to an account, because there are no accounts.

The words people search for. Honestfix keeps the cleaned words people type in search: lowercase, shortened, and stripped of any name, phone number, postcode or email. We keep them for up to 14 months, with no session identifier, to understand what people look for and which trades to add. They are not linked to you.

Browsing and clicks. Our own event log records the event name (for example a page view, or a click on a Call, WhatsApp or Website button), the page, the provider it concerns, the time, and whether the visitor looks like a person or a bot. It does not record your IP address, your name, your phone number or your email, or what you type. If you have accepted cookies, it also carries the random session identifier described in §8.

Claiming a business listing. If you claim your listing, we collect your business name search, the website you verify control of, a verification record and account and session identifiers, and, where it matches, your business registration number (UEN) from ACRA's public register. Purpose: to confirm you're entitled to manage that listing and unlock the vendor portal. Claiming requires ticking a box to accept the vendor terms (Terms of Use §9). We record the version you accepted and the date, and ask you to accept again if the terms change materially.

Correcting or removing a listing. Anyone can ask us to correct a fact or remove a listing through Corrections. We record the request (what was asked, who asked, and their name plus an email or mobile number) so we can act on it and show we did. We also keep a hashed version of your IP address for abuse controls. We check a correction against its source before changing anything. A listing comes off Honestfix when the business asks and we have confirmed the request is from the business. Until then, a removal request does not hide the listing.

Feedback. We record the page, your vote, your optional comment and optional reply email, together with a session identifier, your browser's user-agent text and the submission time. This helps us improve the site and investigate abuse.

4. Reviews, reviewer names and automated reading

Honestfix shows up to the latest 50 Google reviews for each provider. Each review is shown with the reviewer's first name and initial, as Google shows it, together with the date, stars, text and any reply from the business. This information is already public on Google. We collect it from there.

We read these reviews with automated tools to find the job that was done and how it went, and an AI system writes a short summary of each provider's reviews. The summary is marked as AI-written on the provider's page. If a review or a summary shows your personal data and you want it looked at, contact hello@honestfix.sg or use Corrections.

5. Purposes

We collect and use your personal data only for: confirming a provider's right to manage a listing, handling corrections and removal requests, responding to feedback, protecting the service against abuse, and understanding usage through our event log and, if you accept it, Google Analytics. We use the information for the purposes described in this policy.

6. Who we share it with

We do not send customer requests to providers. When you contact a provider through its website, email or phone, that provider handles the information you give it under its own arrangements. We do not sell your personal data.

Processors and third parties.

  • Cloudflare hosts our infrastructure and processes data on our instruction as a data processor, not as an independent controller of your personal data. Cloudflare's Data Processing Addendum, part of its standard terms, is the safeguard for this.
  • Google Analytics, from Google, receives page views and the buttons you use. In the EEA and the UK it does so only after you press Accept in the cookie bar; elsewhere it does so unless you press Decline (see §8).
  • Google Fonts: pages load fonts from Google's font servers, so Google receives your IP address and browser details when a page loads.
  • cdnjs (run by Cloudflare): the map on a provider's page loads its map code from cdnjs when the map comes into view.

7. Cross-border transfer

Elephant & Ostrich LLP's owner works from outside Singapore, and Cloudflare's and Google's infrastructure may process or store data outside Singapore. Under the PDPA's transfer limitation obligation, we rely on Cloudflare's Data Processing Addendum as the safeguard for data Cloudflare processes outside Singapore. Where our own personnel access data from outside Singapore, that access is by Elephant & Ostrich LLP staff under this same policy, not a transfer to a separate organisation.

8. Cookies and other browser storage

When you first visit, a small cookie bar tells you about analytics cookies and lets you accept or decline. In the EEA and the UK nothing is set until you accept; elsewhere, Singapore included, analytics runs unless you decline. You can change your choice at any time with "Cookie choices" in the footer.

Your choice: hf_consent. This first-party cookie stores only whether you accepted or declined ("granted" or "denied"). It lasts six months. It is needed to remember your choice.

Session: hf_sid. Honestfix sets a first-party cookie named hf_sid, with a lifetime of up to one year, on the same terms as analytics: after you accept in the EEA and the UK, and unless you decline elsewhere. It is a random identifier for your browser. It is used for our event log, abuse controls and recognising the browser associated with a verified business claim. It is not your name or email address. If you decline, it is not set and any existing one is ignored.

Google Analytics. Google Analytics 4 is loaded on every page using Google's consent mode. In the EEA and the UK it starts with cookies off and sends Google only cookieless, anonymous counts until you accept; elsewhere it starts with cookies on. When on, it sets cookies such as _ga and receives page views and button clicks so we can measure traffic. If you decline, cookies are cleared and it stops setting them. We do not use Google signals or advertising personalisation.

Your choices. You can also clear cookies and site storage or block them through your browser settings. Blocking cookies can affect abuse controls. Provider websites you visit have their own cookie practices.

9. Advertising

Advertising is not currently enabled. We will update this policy and implement applicable consent requirements before enabling it, including any advertising cookies.

10. Symptom search and AI

If you describe a problem in your own words to find the right trade (for example "water dripping under sink"), we store the text as described in §3. If we can't match it from our own list of terms, that text may also be sent to an AI model run on Cloudflare's infrastructure to work out which trade you mean.

11. How long we keep it

This is the one retention table for Honestfix. Every other page that mentions how long we keep something points back here.

WhatKept forThen
Our event log (page views and button clicks)14 monthsDeleted; third-party analytics retention is controlled separately
The cleaned words people type in search (no names, phone numbers, postcodes or emails; normalised; a count, with no session identifier)Up to 14 months after the term was last searchedDeleted
Feedback24 monthsDeleted. Email addresses are removed from feedback records after 90 days
Agent-call logs (MCP endpoint usage)13 monthsDeleted
Corrections sent through the vendor portal12 months after they are reviewedDeleted
Correction and removal requests3 yearsDeleted. This is our evidence that we acted on a request
Vendor accounts and claim verificationKept while the listing stays claimedDeleted 12 months after the claim ends or the account is closed
Unverified claim tokens (a claim started but never completed)30 daysDeleted

12. Your rights: access and correction

Under the PDPA, you can ask what personal data we hold about you, or ask us to correct or delete it, or withdraw consent for a specific use. Contact hello@honestfix.sg. For a fact on a listing (a registration, a licence status, contact details), see Corrections instead. For removal of a listing, use Corrections. A listing comes off Honestfix when the business asks and we have confirmed the request is from the business. Until then, a removal request does not hide the listing. For a request about your own personal data, we aim to respond within 30 days. If more time is needed, we will explain the expected timeframe. Requests remain subject to applicable legal requirements and exceptions.

13. Marketing

We do not send marketing messages through the site. We will explain any future marketing collection and applicable consent choices before you sign up.

14. Data Protection Officer

Data Protection Officer, Elephant & Ostrich LLP, hello@honestfix.sg

15. Changes

If this policy changes, the date and version at the top of this page change with it.

16. Contact

hello@honestfix.sg

Questions? Open the help chat, or use Talk to a person on the Help page. You can also write to hello@honestfix.sg.

← All policies
Was this page useful?