Privacy notice

Who we are

BLACKED OUT LLP (UEN T26LL0062K), a limited liability partnership registered in Singapore, registered office 15 Eunos Crescent, #07-2829, Singapore 400015. In this notice, "we" and "us" mean BLACKED OUT LLP.

What we collect, and why

When you send an enquiry

The enquiry form asks for your name and email address, and about the event itself: the occasion, how you want the room to feel, the date, rough guest numbers, the venue, and which package you are drawn to. We use this to prepare a concept document and reply to you. We cannot answer an enquiry without a name and an email.

When you order at one of our events

If you order drinks or food at an event we are running, we record the items, your table number and the order total so the bar and kitchen can serve you. If you pay by PayNow and upload a payment screenshot, that image is stored in a private storage bucket and is not publicly accessible. A payment screenshot may show your name and bank reference; please do not upload anything showing more than the transfer itself.

When you create an account

Accounts are optional and exist so you can see your own past orders. Sign-in uses either a one-time link sent to your email, or Google. We receive your email address and, if you use Google, the basic profile information Google returns. We never receive your password.

When you browse the site

We measure how the site is used with our own analytics, stored in our own database. We do not use Google Analytics, advertising pixels, or any third-party tracking tag. We record the page path, the type of interaction, a random session identifier, and the host a visitor arrived from — for example "instagram.com", never the full link. Query strings are stripped before storage and automated traffic is discarded. This is not used to build a profile of you and is not sold or shared.

What we do not do

• We do not sell personal data. We never have.
• We do not run advertising or retargeting pixels.
• We do not send marketing email unless you ask us to.
• We do not collect payment card details. We never see a card number.

Who else can see it

We use service providers to run the site: Supabase for the database, authentication and file storage, and Vercel for hosting. They process data on our instructions in order to provide those services. Some processing may take place outside Singapore; where it does, we rely on those providers' contractual data protection terms. We do not otherwise disclose personal data, except where the law requires it.

How long we keep it

Enquiries are kept while we are in contact and for a reasonable period afterwards, in case you come back to us. Order and payment records are kept for as long as Singapore tax and accounting rules require. Analytics records are kept in aggregate. Specific retention periods are being finalised and will be stated here.

Your rights

Under the PDPA you may ask us for a copy of the personal data we hold about you and how it has been used, ask us to correct anything inaccurate, and withdraw consent at any time. Withdrawing consent may mean we can no longer respond to an enquiry or keep an account open. Write to blackedoutsg@gmail.com and we will respond within 30 days.

Cookies

We use a small number of strictly necessary cookies: one to keep you signed in if you have an account, and one to hold your basket between pages. There are no advertising or tracking cookies.

Data protection officer

Our data protection officer is Ho Jun Xi, reachable at blackedoutsg@gmail.com. Address any access, correction or withdrawal request, or any complaint about how we handle personal data, to that address and mark it for the attention of the data protection officer.

Contact

Questions, requests or complaints about personal data: blackedoutsg@gmail.com. If you are not satisfied with our response, you may contact the Personal Data Protection Commission Singapore.