Privacy notice
Last updated 1 October 2026
letsbuywith is a group-buy tool for Singapore. This notice explains what personal data we handle, why, and for how long, in line with Singapore's Personal Data Protection Act 2012 (PDPA).
Who is responsible for what
Organisers (the people who run a store on letsbuywith) decide what to sell and who to sell to. When you order from an organiser's group buy, the organiser is the one collecting your details, and we store and process them on the organiser's behalf. For organisers' own accounts, letsbuywith is responsible.
What we collect
If you order from a group buy
- Your name, phone number and email address, and any note you add to your order.
- What you ordered, your collection point or delivery choice, and your order's payment and collection status.
- A screenshot of your PayNow transfer, if you choose to upload one.
- If you tick "save my details", the details from that order, kept by that store for faster checkout next time.
If you run a store
- Your name, email address and password (stored only as a one-way hash).
- Your store's name, logo, contact email, and PayNow mobile number or UEN.
- The name on your PayNow account, used only to check payment screenshots and never shown to buyers.
- A log of actions taken in your store's back office, with the IP address they came from, for security.
We do not collect buyers' IP addresses, and we don't ask for anything an order doesn't need.
Why we use it
- To take your order, show you a PayNow QR for it, and email you about it.
- To let the organiser see who has ordered, paid and collected, and place the bulk order.
- To sign organisers in securely, including a one-time code sent by email at each login.
- To keep the service working and safe.
We do not sell personal data, use it for advertising, or share it with other stores.
Payments
Buyers pay organisers directly by PayNow. letsbuywith never receives, holds or sees your bank details, and we are not a payment service.
Who processes data for us
- Laravel Cloud — hosting and database, in Singapore.
- Cloudflare — file storage (logos, product photos, payment screenshots), domain name service, and cookieless visitor statistics.
- Resend — sending emails such as order confirmations and login codes. Emails are processed outside Singapore.
- Anthropic — where an organiser uses payment checks, an uploaded payment screenshot is read automatically to compare the amount and reference with the order. Screenshots are not used to train models.
Where data leaves Singapore, we rely on these providers' contractual commitments to protect it to a standard comparable to the PDPA.
Cookies
We use only the cookies the site needs to work: a session cookie, a security token for forms, your language choice, and, if an organiser ticks "remember me", a login cookie. Our visitor statistics are cookieless. We use no advertising or tracking cookies.
How long we keep it
- Order details (buyer name, phone, email, notes, payment screenshot) are removed automatically 12 months after the group buy closes. The order's items and totals are kept for the organiser's accounts.
- Saved details are kept while you keep ordering from that store, and removed after 2 years without an order — or as soon as you ask.
- Organiser accounts are kept until the organiser asks us to close the store, when we remove it and everything in it.
Your choices
You can ask to see, correct or delete your personal data. For an order, the quickest route is the organiser you ordered from. You can also write to us at hello@letsbuywith.sg, and we will respond within 30 days. You can remove saved details yourself from the link in your order email.
Contact
Questions about this notice or about how your data is handled go to our data protection contact at hello@letsbuywith.sg.