Privacy Policy
Effective Date: 22 February 2026 · Last Updated: 17 October 2026
1. Who We Are
AbsQueue (“AbsQueue”, “we”, “us”, or “our”), operated by ABSQUEUE PTE. LTD. (UEN 202626493K), runs absqueue.com, a marketplace connecting customers with independent beauty service professionals in Singapore and Malaysia.
Data Protection Officer (DPO) Contact
For all personal data protection enquiries, please contact our DPO at:
Email: [email protected]
This Privacy Policy explains how we collect, use, disclose, and protect your personal data. AbsQueue operates in Singapore and Malaysia, and the law that applies to you depends on where you are:
- In Singapore, the Personal Data Protection Act 2012 (PDPA) and its subsidiary legislation, as administered by the Personal Data Protection Commission (PDPC).
- In Malaysia, the Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024, as administered by the Personal Data Protection Commissioner (JPDP). This applies to your data because we deal commercially with people in Malaysia, and it applies whether or not AbsQueue holds a Malaysian company registration.
Most of what follows is the same under both laws, and we have written it once rather than twice. Where Malaysia requires something Singapore does not, that section says so explicitly.
By using absqueue.com, you acknowledge that you have read and understood this Privacy Policy.
2. Personal Data We Collect
We collect personal data from two groups of users: Customers (individuals browsing and contacting professionals) and Professionals (beauty professionals listing their services).
2.1 Data You Provide Directly
All Users:
- Name
- Email address
- Password (stored in encrypted form via Firebase Authentication)
- Authentication data when you sign in using Google OAuth, including your name, email address, and the link to your Google profile photo
Professionals (additional):
- Profile photograph
- Portfolio images (photos of your work)
- Neighbourhood or general location (e.g., “Tampines”, “Jurong East”)
- Service listings, descriptions, and pricing
- Contact handles: phone number, WhatsApp number, and/or Instagram username (voluntarily provided and displayed publicly on your profile)
- A brief professional biography
- If you switch on in-app payments, the PayNow mobile number you want to be paid to, the name of its account holder, a history of changes to those details, and records of the payments we collect for you, the fees and refunds on them, and the payouts we make to you.
Customers (additional):
- When you make a booking, we collect the phone number you provide, and for a house call or hotel booking, the address or hotel and room where the service takes place.
- How you found a Professional, if you choose to answer that question when you book with them.
- If you pay for a booking through AbsQueue, the amount, time and status of your payment and of any refund, and the payment reference HitPay gives us. We never receive your banking login or card details.
2.2 Data Collected Automatically
When you use absqueue.com, we and our technology partners may collect:
- Pages viewed and features used (via PostHog)
- The website, app or link that brought you to AbsQueue, including any campaign tags in the link and whether you opened it inside an app such as Instagram or TikTok. We also note whether you use the installed AbsQueue app and whether you came from one of our notifications or emails.
- If a link carries an advertising click ID, we record only which kind of click ID it was, such as Facebook's or Google's, never the ID itself.
- Browser type and device type
- General geographic region (derived from IP address)
- Session cookies and functional cookies necessary for the website to operate
- When you click a link in one of our emails, we also record that click so we can stop sending emails that people no longer find useful. We do not track whether you open our emails.
We do not use advertising cookies, cross-site tracking cookies, or marketing pixels.
2.3 Google Calendar Data (Professionals, Optional)
Professionals may choose to connect a Google Calendar account from their dashboard settings. If you do, we access your Google Calendar through Google's calendar.events.owned permission, which only covers calendars you own and lets us:
- Create a calendar event on your connected calendar when a booking is confirmed
- Delete that calendar event if the booking is later cancelled
We do not read, list, or otherwise access any of your existing calendar events. We store your Google Calendar access token and refresh token so we can keep making these updates on your behalf. These tokens are not shared with any third party and are not used for advertising, profiling, or to train any AI or machine learning model. You can disconnect Google Calendar at any time from your dashboard settings, which revokes our access and stops any further updates.
AbsQueue's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Why We Collect Your Data
We collect and use personal data only for the purposes listed below. We will not use your data for a new purpose without notifying you first.
| Purpose | Data Used | Applies To |
|---|---|---|
| Creating and managing your account | Name, email, password / OAuth token | All users |
| Displaying your public professional profile | Display name, photo, location, services, pricing, contact handles, portfolio | Professionals |
| Enabling customers to discover and contact professionals | Professional profile data | Professionals |
| Sending messages you need to use your account, such as email verification, password resets, security alerts, and notice of changes to our Terms or this Policy | Email address | All users |
| Sending Professionals emails about their own profile and bookings, such as reminders to finish setting up a profile, a notice when their calendar has no open times, a notice when a customer has asked to be told when they open times, and a monthly summary of their bookings and followers | Email address, name, and counts of bookings, followers and profile visits | Professionals |
| Telling Professionals about demand for their profile, such as how many times it was opened in the last two weeks without a time to book, and inviting them to open times on AbsQueue | Email address, name, counts of profile visits, followers and returning clients, and the average price of your completed bookings, never the identity of any visitor | Professionals, who can switch these emails off |
| Emailing Customers when a Professional they follow opens new times, and sending a summary every two weeks of the Professionals they follow who have open times | Email address, name, and the Professionals you follow | Customers who follow a Professional, including the automatic follow made when they book |
| Asking Customers to review a booking after it is completed | Email address, name, and booking details | Customers |
| Checking that our emails arrive and stay useful, and stopping emails that bounce, are reported as spam, or are repeatedly ignored | Delivery, bounce, complaint and link-click records | Everyone we email |
| Syncing your confirmed bookings to your personal calendar | Google Calendar access and refresh tokens | Professionals who opt in |
| Helping a Professional recognise you for a booking you made with them | Your Google profile photo, shown only to that Professional | Customers who sign in with Google |
| Arranging and managing your booking | Your full name, phone number, email address, and booking details (services, time, location) | Customers |
| Telling a Professional or Studio how you found them, such as through Instagram or a link they shared | A short label for how you arrived, such as Instagram, never the full web address or any advertising identifier, and your answer if you tell us how you found them | Customers who book |
| Showing a Professional how many appointments you have had with them, counting your bookings and walk-ins | Your account and phone number, used only to match your earlier appointments with that same Professional | Customers who book or walk in |
| Collecting payment for a booking on the Professional's behalf, making refunds, and showing your payment and refund in My Bookings and on your receipt | Name, email address, booking details, and payment amount, status and reference | Customers who pay through AbsQueue |
| Paying Professionals the money we collect for them, checking that each payout reaches the right person, and showing them their earnings | PayNow mobile number, account holder name, earnings, fee, refund and payout records, and the first names of the Customers whose bookings were paid | Professionals who switch on in-app payments |
| Preventing fraud on payouts, such as emailing you when your PayNow details change and pausing payouts for 12 hours afterwards | Email address, PayNow details and their change history | Professionals who switch on in-app payments |
| Alerting our team when a payout or refund needs attention | A reference, the amount, and a PayNow number masked to its last digits | Professionals who switch on in-app payments |
| Keeping the accounting and tax records the law requires | Payment, refund, fee and payout records | Everyone who pays or is paid through AbsQueue |
| Improving platform performance and user experience | Usage analytics, such as pages viewed, features used, clicks, and session recordings. These are linked to your account and email address when you are signed in, and to an anonymous identifier when you are not. We also use this to understand which links and apps bring people to AbsQueue. | All users |
| Detecting and preventing fraud, abuse, and security incidents | Account activity, login data | All users |
| Complying with legal obligations | All data as required by law | All users |
| Responding to your enquiries or complaints | Name, email, message content | All users |
Note on Professional Contact Handles: Phone numbers, WhatsApp numbers, and Instagram usernames submitted by Professionals are displayed publicly on professional profiles to enable direct customer contact. By submitting this information, Professionals consent to its public display. Professionals can update or remove this information at any time via their dashboard.
Note on Professional Location: Neighbourhood-level location (not exact address) is displayed publicly to help customers find nearby professionals. We do not collect or display your precise GPS coordinates.
4. How We Collect Your Data
- Registration and profile forms: when you create an account or set up a professional profile
- Google OAuth: when you choose to sign in with Google (we receive your name, email, and a link to your Google profile photo from Google)
- Google Calendar connection: when a Professional chooses to connect Google Calendar from their dashboard, we receive an access token and refresh token from Google so we can create and delete calendar events on their behalf
- Automatic collection: through cookies and analytics tools when you browse absqueue.com
- Payment confirmations: when you pay for a booking, HitPay tells us whether the payment succeeded, its amount and its reference
- Voluntary submission: when you contact us via email or submit a support request
5. Consent and Your Choices
5.1 How Consent Is Obtained
By creating an account on absqueue.com, you consent to the collection and use of your personal data as described in this Privacy Policy.
For Professionals, by submitting contact handles (phone, WhatsApp, Instagram) and location information for public display, you provide deemed consent to that public display.
5.2 Withdrawing Consent
You may withdraw consent to our use of your personal data at any time by:
- Deleting your account (which removes your profile and personal data from active use), or
- Emailing [email protected] to make a specific withdrawal request
Consequence of withdrawal: Withdrawal of consent may mean we can no longer provide you with access to AbsQueue's services. For Professionals, withdrawal will result in your profile being taken down.
If you are a Professional and withdraw consent to our use of your PayNow details, we switch in-app payments off for you and can pay out your earnings once you give us details we can pay to.
We will process withdrawal requests within a reasonable time and inform you of any consequences before acting on your request.
5.3 Emails We Send and How to Stop Them
We send two kinds of email. Account emails are the messages you need to use AbsQueue, such as verification, security alerts, messages about a booking you made, and notice of changes to our Terms or this Policy. You cannot switch these off while you have an account, and they never contain advertising.
Notification emails tell you about activity that matters to you. For Professionals, they cover your profile setup, your schedule, customers asking for your times, demand for your profile, and a monthly summary. For Customers, they cover new times from Professionals you follow. Every notification email has a link that lets you switch that type of email off, and you can also email [email protected] to stop them.
We act on an unsubscribe straight away, and always within the 10 business days that Singapore's Spam Control Act 2007 allows. When you unsubscribe or delete your account, we keep a scrambled copy of your email address on a do-not-email list so that we never email you by mistake later, and we use that list for no other purpose.
6. Sharing Your Data with Third Parties
We do not sell your personal data. We share personal data only in the following circumstances.
6.1 Professionals and Studios You Book With
When you make a booking, we share your full name, phone number, email address, and the details of that booking with the Professional who will serve you. If you book at a Studio (a shop or business that lists its services on AbsQueue), we also share them with that Studio's administrators, who can view them for that booking so they can manage appointments and contact you about it. A Studio can see only the bookings made at that Studio, not bookings you make with a Professional independently. Professionals and Studios may use your details only to provide, manage, or follow up on the booking, and not for unrelated marketing without your separate consent.
We may also tell the Professional or Studio how you found them, using a short label such as Instagram or their own shared link. If you answer our question about how you found them when you book, we may show them your answer as well. We also show the Professional how many appointments you have had with them, counted only from their own bookings and walk-ins.
If you pay for a booking through AbsQueue, the Professional can also see that the booking is paid, the amount, and whether it was refunded.
When you follow a Professional, or ask to be told when they open new times, we tell that Professional your name so they know who is waiting for them.
6.2 Service Providers and Technology Partners
We use the following third-party services that may process your personal data on our behalf:
| Service | Purpose |
|---|---|
| Google Firebase Authentication | Account authentication |
| Google Cloud Firestore | Profile and listing data storage |
| Firebase Storage | Portfolio image hosting and delivery |
| Railway | Application hosting |
| PostHog (EU) | Product analytics on how the Platform is used, hosted in the European Union |
| Resend | Sending our emails, and recording whether each one was delivered, bounced or was reported as spam. Resend tracks neither the links you click nor whether you open an email. AbsQueue itself records the clicks on the links in its update emails. |
| HitPay | Processing Professional subscription payments, and Customer payments and refunds for bookings paid through AbsQueue. HitPay is a payment institution licensed by the Monetary Authority of Singapore, and it also uses this data to meet its own legal duties, such as anti-money-laundering checks. |
| Telegram | Sending our own team alerts when a payout or refund needs attention. These alerts carry a reference, an amount and a masked PayNow number, never a full PayNow number or any Customer's details. |
| Our bank | Sending payouts to Professionals by PayNow, which requires the Professional's PayNow number and the payout amount. |
| OneMap | Looking up a Singapore postal code to find the address and map position |
| LocationIQ | Looking up a Malaysian postcode or address to find the map position |
| Google Calendar API | Syncing a Professional's confirmed bookings to their calendar (optional, Professionals only) |
HitPay also acts on its own account for its legal duties as a licensed payment institution.
These service providers are contractually required to handle your personal data in a manner consistent with the PDPA and are not permitted to use your data for their own purposes.
6.3 Legal Disclosure
We may disclose personal data if required to do so by Singapore law, court order, or regulatory authority, or where we believe in good faith that disclosure is necessary to protect our legal rights or the safety of users.
6.4 Business Transfers
If AbsQueue undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and any resulting changes to this Privacy Policy.
7. Cross-Border Data Transfers
AbsQueue uses cloud-based services, including Google Firebase, Railway, PostHog, and Resend, and some of these providers may store or process your personal data outside Singapore. For example, PostHog stores our analytics data in the European Union, and Resend, which delivers our emails, processes them in the United States. Your personal data may therefore be transferred to, stored in, and processed in countries outside Singapore. Telegram may process our team's payment alerts outside Singapore.
We take steps to ensure that your personal data receives a standard of protection comparable to that provided under the PDPA, including by engaging only with service providers that have appropriate data protection commitments in place.
If you are in Malaysia: Malaysia removed its list of approved destination countries in June 2025, so a transfer out of Malaysia now rests on the protections actually in place rather than on the destination being pre-approved. Your data is transferred to and processed in Singapore and in the regions our cloud providers operate from. We rely on our contracts with those providers, which oblige them to protect your data to a standard comparable to Malaysian law, to notify us of any breach, and to use your data only as we instruct.
8. Data Retention
We retain your personal data only for as long as it is necessary for the purposes set out in this Policy, or as required by law.
| Data Type | Retention Period |
|---|---|
| Active account data (profile, listings) | While your account is active |
| Account data after closure | 30 days after account deletion, then permanently deleted, except for payment and payout records, which we keep as set out below |
| Portfolio images | Until removed by the Professional or account closure |
| Usage analytics, linked to your account when you are signed in and to an anonymous identifier when you are not | 24 months rolling, except session recordings, which are kept for 30 days |
| How you found a Professional for a booking, including any answer you gave us | For as long as the booking record is kept |
| Payment, refund, fee and payout records, including the PayNow number and name each payout was sent to | 5 years from the end of the financial year in which the payment or payout was made, as Singapore's accounting and tax laws require, including after you close your account |
| Current PayNow details | Until you replace them, switch in-app payments off, or close your account, then deleted, except where they form part of the payout records above |
| Replaced PayNow details | 12 months after the change, unless they were used for a payout |
| Telegram alerts | Deleted automatically from the chat after 1 month |
| Email correspondence and support records | 2 years from the date of last communication |
| Security and fraud logs | 12 months |
| Google Calendar access and refresh tokens | Until you disconnect Google Calendar or close your account, then deleted |
| Email delivery, bounce, complaint and link-click records | 12 months from the date of the email |
| Do-not-email list, holding a scrambled form of your email address | For as long as we send email, so that an unsubscribe or account deletion is always respected |
When personal data is no longer required, we will securely delete or anonymise it.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encrypted storage and transmission (HTTPS / TLS)
- Firebase Authentication with industry-standard security protocols
- Access controls limiting who within our team can access personal data
- Regular review of data access practices
Full PayNow numbers are stored separately from your public profile and are visible only to the AbsQueue staff who make payouts.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
Data Breach Notification: In the event of a data breach that is likely to result in significant harm to individuals, or that affects a significant number of individuals, we will notify the PDPC and affected users in accordance with our obligations under the PDPA.
If you are in Malaysia: breach notification is not discretionary and runs to a fixed clock. Where a breach causes or is likely to cause significant harm, we will notify the Personal Data Protection Commissioner as soon as practicable and in any case within 72 hours of becoming aware of it, and we will notify you directly within 7 days of that notification.
10. Your Rights Over Your Data
These rights are available to you under Singapore's PDPA and under Malaysia's PDPA alike, except where a specific right is marked otherwise:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right of Correction: You may request that we correct any inaccuracies in your personal data. Many corrections can be made directly through your account dashboard.
- Right to Withdraw Consent: You may withdraw consent to our use of your personal data at any time, subject to legal or contractual restrictions.
- Right to Data Portability (Malaysia): If you are in Malaysia, you may ask us to transmit your personal data to another service provider, where that is technically feasible and the receiving format is compatible. This right came into force in Malaysia in June 2025. In Singapore the equivalent regulations are still pending finalisation by the PDPC, and we will update this section when they take effect.
- Right to Limit Processing (Malaysia): If you are in Malaysia, you may ask us to limit how we process your personal data, and you may withdraw consent to processing for direct marketing at any time.
To exercise any of these rights, email us at [email protected] with the subject line “Data Rights Request”. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request.
11. Cookies and Tracking Technologies
11.1 What We Use
| Technology | Type | Purpose | Consent Required |
|---|---|---|---|
| Session cookies | Essential / Functional | Keeping you logged in during your session | No |
| Firebase Authentication tokens | Essential | Maintaining your authenticated session | No |
| PostHog (EU) cookie and local storage | Analytics | Understanding how the Platform is used and where it can be improved | No |
| Visit source (local and session storage) | Analytics | Remembers how you first arrived at AbsQueue for up to 90 days, and how you arrived on this visit until you close the tab, so a later booking can be credited to that source | No |
PostHog stores a first-party cookie and a local storage entry on your device, both holding a random identifier that lets us tell one visit from another. When you are signed in, we link that identifier to your account so we can see how the Platform is used across your visits. PostHog also records how pages are used, including clicks, scrolling and page changes, as heatmaps and session recordings, and it keeps session recordings for 30 days. Session recordings replay what was shown on the page, with anything you type into a form field hidden, and they also capture browser console messages, performance data and error reports. We switch session recording and browser analytics off on the page where you review a visit. We still record whether you opened, started, submitted or skipped the review, linked to your account, but never your ratings or what you wrote. PostHog is set not to store your IP address. The data is held in the European Union, and we do not use it for advertising or to track you across other websites.
11.2 Managing Cookies
You can control cookies through your browser settings. Disabling essential cookies may prevent parts of AbsQueue from functioning correctly.
12. Children's Data
AbsQueue is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a person under 18 has provided us with personal data, please contact us at [email protected] and we will take steps to delete that data promptly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:
- Update the “Last Updated” date at the top of this Policy
- Notify registered users by email at least 14 days before the change takes effect
Your continued use of absqueue.com after the effective date of any changes constitutes your acceptance of the updated Policy.
14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:
AbsQueue
Data Protection Officer
Email: [email protected]
Website: absqueue.com
We are committed to working with you to resolve any concerns about your personal data.
Related Policies
This document was last reviewed on 17 October 2026. AbsQueue is committed to complying with the Singapore Personal Data Protection Act 2012 (PDPA). For complex personal data situations, consult a qualified Singapore-licensed lawyer.