1. Introduction
UniopX operates Block Kaching (blockkaching.com). This Privacy Policy explains how we collect, use, disclose and protect your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and its amendments.
2. Personal Data We Collect
- Identity data: Name, profile photo
- Contact data: Email address, mobile number, Singapore postal code
- Transaction data: Booking history, payment amounts, service listings
- Financial data: PayNow number (for Provider payouts). We do not store full payment card details — handled by Stripe
- Usage data: IP address, device identifiers, browser type, pages visited
- Communications data: Messages sent through our Platform chat
3. How We Use Your Personal Data
- To create and manage your account
- To facilitate transactions between Buyers and Providers
- To process payments and disburse Provider payouts via PayNow
- To send booking confirmations, notifications and alerts
- To comply with Singapore law including PDPA, Payment Services Act and AML regulations
- To detect and prevent fraud, abuse and illegal activity
- To improve our Platform and user experience
We will not use your personal data for direct marketing without your explicit consent.
4. Disclosure of Personal Data
- Other users: Your display name, block number, rating and listings are visible to other users
- Stripe: Payment data is processed by Stripe Singapore Pte. Ltd.
- Legal authorities: Singapore government agencies or law enforcement where required by law, including STRO for flagged transactions
- Service providers: Third parties assisting Platform operations, under confidentiality obligations
We do not sell your personal data to third parties.
5. Data Retention
- Account data: Duration of account + 2 years after closure
- Transaction records: 7 years from transaction date (tax compliance)
- Audit logs: 5 years for compliance and dispute resolution
- Chat messages: 2 years from last message in a booking
6. Data Security
- All data stored in AWS Singapore (ap-southeast-1) for PDPA data residency compliance
- Row-level security on all database tables
- Encrypted data transmission via HTTPS/TLS
- Access controls on a need-to-know basis
In the event of a data breach likely to cause significant harm, we will notify the PDPC and affected individuals as required under the PDPA mandatory breach notification regime.
7. Your Rights Under the PDPA
You have the right to access, correct, and request deletion of your personal data. To exercise these rights, contact javier@uniopx.com. We will respond within 10 business days.
8. Children's Privacy
Block Kaching is not intended for persons under 18 years of age. We do not knowingly collect data from minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated at least 14 days before taking effect.
10. Contact and Complaints
Data Protection Officer — UniopX / Block Kaching
Email: javier@uniopx.com
You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC).