Privacy Policy

Last updated: 13 August 2026

This policy explains how Tototokyo Pte. Ltd., trading as Tintin Painting (UEN 202630526H), collects, uses, discloses and protects your personal data. We are bound by the Singapore Personal Data Protection Act 2012 (PDPA).

We are a small painting contractor. We collect the minimum we need to quote your job, turn up at the right address, do the work, and honour the warranty afterwards. We do not sell your data to anyone, ever.

1. What we collect

Depending on how you contact us, we may collect:

• Contact details — your name, mobile number, email address.
• Property details — the address of the property to be painted, flat or unit type, approximate floor area, and access arrangements (lift lobby, gate code, key collection).
• Job information — the rooms and surfaces to be painted, colour choices, paint grade selected, condition of existing walls, and any special requirements you tell us about.
• Photographs — photos of walls, ceilings, mould, cracks or water damage that you send us, and photos we take during the site visit and during the job. These are used for quoting, for our own quality records, and for warranty claims.
• Message history — your WhatsApp, SMS, email or Facebook messages with us, including any photos or voice notes you send.
• Payment records — the amount paid, date, and payment method (PayNow reference, bank transfer reference or cheque number). We do not collect or store your credit card or bank account numbers.
• Website usage data — see section 7 below.

2. How we use it

• To prepare and send you a quotation.
• To arrange and attend the free site visit.
• To schedule your job and inform our painters where to go and what to do.
• To order the correct paint in the correct colours and quantities.
• To issue invoices and receipts and to keep accounting records.
• To contact you about your job while it is in progress, and afterwards about touch-ups or warranty rectification.
• To respond to your questions, feedback or complaints.
• To keep a record of what paint, colour code and batch was used on your walls, so that a future touch-up matches.
• To improve our service, pricing and website.
• To comply with legal, tax and accounting obligations.

If we ever want to use your photographs in our marketing — on our website, Instagram, Facebook or Carousell — we will ask you separately and in writing first, and you can say no without it affecting your job or your warranty. We will not identify your unit number or full address in any marketing material.

3. WhatsApp and messaging

Most of our customers contact us on WhatsApp, and it is our main channel. Please note:

• WhatsApp is operated by Meta Platforms, not by us. When you message us, Meta processes that message under its own privacy policy, which we do not control.
• We keep our WhatsApp conversation with you on the business phone and, where relevant, save quotes, addresses and job photos into our own records.
• Please do not send us NRIC numbers, bank account details, credit card numbers or passwords over WhatsApp. We will never ask you for any of these.

4. Who we share it with

We share the minimum necessary, only with:

• Our painters and any subcontracted crew — your name, address, contact number, access instructions and the scope of work, so they can reach you and do the job.
• Our paint supplier — colour codes and quantities only. Not your name or address, unless a direct site delivery is arranged, in which case the delivery address is shared.
• Our accountant and, where required, IRAS or other Singapore authorities — invoicing and payment records, for tax and statutory compliance.
• Service providers who run our tools — for example our website host, email provider and analytics providers (see section 7). They process data on our instructions.

We do not sell, rent or trade your personal data. We do not pass your contact details to other contractors, interior designers, renovation firms or lead-generation platforms.

5. Transfers outside Singapore

Some of the services we use — website hosting, email, messaging and analytics — store data on servers outside Singapore. Where that happens, we take reasonable steps to satisfy ourselves that the recipient provides a standard of protection comparable to the PDPA, as required by Section 26 of the Act.

6. How long we keep it

• Enquiries that do not become jobs: up to 12 months, then deleted.
• Completed job records (address, scope, paint and colour used, photos): kept for the duration of the workmanship warranty plus a reasonable period afterwards, so that we can honour touch-ups and match colours. Normally up to 3 years.
• Invoices, receipts and accounting records: at least 5 years, as required by Singapore tax law.

When we no longer need your data for any legal or business purpose, we delete it or anonymise it.

7. Website, cookies and advertising

Our website may use cookies and similar technologies for the following purposes:

• Essential — to make the site work and remember basic preferences.
• Analytics — to understand which pages people read and where visitors come from, so we can improve the site. This is aggregated and does not identify you personally.
• Advertising — if we run Google Ads or Meta advertising, those platforms may set cookies to measure whether an advert led to an enquiry, and to show our adverts to people who have visited our site.

You can block or delete cookies in your browser settings. You can opt out of personalised Google advertising at adssettings.google.com. Blocking cookies will not stop you from using the site or contacting us.

8. Marketing messages and the Do Not Call Registry

When you send us an enquiry, we will contact you about that enquiry — that is the whole point of you contacting us, and it is not marketing.

We will only send you promotional messages (for example, a seasonal offer) if you have clearly agreed to receive them. You can tell us to stop at any time by replying STOP on WhatsApp or SMS, or by emailing us. We will action it and will not charge you or penalise you for it.

We check Singapore Do Not Call (DNC) Registry obligations before sending any marketing message to a Singapore number.

9. How we protect it

We take reasonable and practical steps to protect your data, including password or biometric locks on the business phone and laptop, restricting access to job records to the people who need them, and not writing customer addresses in publicly visible places. No system is perfectly secure, but we treat your address and contact number as information that could put you at risk if mishandled, and we act accordingly.

10. Your rights

Under the PDPA you may:

• Ask what we hold about you and how it has been used or disclosed in the past year.
• Ask us to correct anything that is wrong or out of date.
• Withdraw your consent to us using your data for a particular purpose. Please note that if you withdraw consent for us to hold your job records, we may no longer be able to honour a warranty claim, because we will not have a record of what was painted or with what.

Write to us using the details below. We will respond as soon as reasonably possible, and in any case within 30 days. There is no charge for a reasonable request.

11. Contact us

If you are not satisfied with how we have handled your personal data, you may contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

12. Changes to this policy

We may update this policy from time to time. The version in force is always the one published on this page, and the date at the top tells you when it last changed. If we make a significant change to how we use your data, we will say so clearly rather than quietly editing the page.

← Back to Tintin Painting