Data Usage Policy
Last updated: 25 April 2026
MimiDirect is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore. This policy explains what data we collect, why we collect it, and how we use and protect it.
1. Data Controller
MimiDirect is the data controller responsible for personal data collected through this Platform. We are a direct hire facilitation platform operating in Singapore.
2. What Personal Data We Collect
From employers and enquirers:
- Full name
- Contact number
- Email address
- Hiring requirements and preferences
From helper profiles:
- Full name and photograph
- Nationality, age, and date of birth
- Skills, work experience, and employment type
- Salary expectations
- Physical details (height, weight) where voluntarily provided
- Religion, marital status, mother tongue, and current location where voluntarily provided
Automatically collected data:
- Browser type, IP address, and device information
- Pages visited and time spent on the Platform
- Referring URL
3. Why We Collect This Data
We collect personal data for the following purposes:
- Matching and facilitation: To help employers find suitable helpers and to enable direct contact between parties
- Communication: To respond to enquiries and provide updates on helper availability
- Platform improvement: To analyse how the Platform is used and improve the user experience
- Legal compliance: To comply with Singapore laws and regulations, including MOM requirements where applicable
- Safety and security: To detect and prevent fraudulent or harmful activity on the Platform
4. Legal Basis for Processing
Under the PDPA, we process personal data on the following bases:
- Consent: Where you submit your data via our enquiry form or helper profile listing, you consent to its use as described in this policy
- Legitimate interests: To operate and improve the Platform and to prevent fraud
- Legal obligation: Where we are required to retain or share data by Singapore law
5. How We Share Your Data
We do not sell your personal data. We may share data in the following limited circumstances:
- Between employers and helpers: Contact details are shared with the other party when a mutual interest to connect is established
- Service providers: We use Supabase (cloud database) and Vercel (hosting) to operate the Platform. These providers process data on our behalf under appropriate data processing agreements
- Legal requirements: We may disclose data if required by law, court order, or a government authority in Singapore
Helper profile information (name, photo, skills, nationality, etc.) is displayed publicly on the Platform to facilitate direct hire.
6. Data Retention
We retain personal data only for as long as necessary for the purposes described above:
- Enquiry form submissions are retained for up to 2 years for follow-up and record-keeping
- Helper profiles are retained while the helper is listed as available, and for up to 1 year after de-listing
- Server logs and analytics data are retained for up to 90 days
You may request early deletion at any time — see our Data Deletion Policy.
7. Cookies
The Platform uses essential cookies to maintain session state and improve functionality. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some Platform features may not function correctly as a result.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Row-level security and access controls on our database
- Restricted internal access to personal data on a need-to-know basis
No data transmission over the internet is completely secure. While we take all reasonable steps, we cannot guarantee absolute security.
9. Your Rights Under the PDPA
Under Singapore's PDPA, you have the right to:
- Access personal data we hold about you
- Correct inaccurate personal data
- Withdraw consent at any time (subject to legal or contractual restrictions)
- Request deletion of your personal data — see our Data Deletion Policy
To exercise any of these rights, contact us via our homepage enquiry form or WhatsApp.
10. Cross-Border Data Transfers
Our infrastructure is hosted on servers located in the Asia-Pacific region (Singapore zone). Data may be processed by service providers in other jurisdictions. Where such transfers occur, we ensure they are subject to appropriate data protection safeguards consistent with the PDPA.
11. Changes to This Policy
We may update this policy from time to time. The updated version will be posted on this page with a revised date. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.
12. Contact
For any data-related enquiries or to exercise your PDPA rights, contact us via the enquiry form on our homepage or via WhatsApp.