Privacy Policy

Compliant with Singapore's data protection law.

What we collect

Booking enquiries ask for your name, email, phone number, event date, venue address, postal code, headcount, and optional party details. We also record your consent (version and timestamp) and a hashed form of your IP address for audit purposes.

How we use it

To respond to your enquiry, confirm and service your booking, issue invoices, send transactional updates, and — only with separate opt-in — marketing emails.

Children's data

Parties involve minors. We only collect data about the organising adult; headcount and age bands for ride suitability are aggregated and not linked to identifiable children.

Retention

Enquiry and booking data is retained for up to 3 years after the event date, then securely deleted. Payment records are retained for 5 years as required by Singapore tax law.

Cross-border transfer

We use service providers (e.g. Resend, HitPay, Twilio, Supabase) that may process data outside Singapore. Transfers are covered by contractual data protection safeguards.

Your rights

You may request access, correction, or deletion of your personal data, or withdraw consent, by emailing dpo@kidodo.sg. Data-subject requests are acknowledged within 7 business days.

Breach notification

In the event of a notifiable data breach, we will inform the relevant authorities and affected individuals within 3 calendar days of assessment.