Your data, plainly put.

Esteem Auto Medics Pte Ltd (“we”, “us”) respects your personal data and handles it in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA). This policy explains what we collect through this website, why, and what you can do about it.

What we collect, and why

Reporting an accident

When you submit an accident report without an account, we collect:

• Your name and contact number
• Your vehicle’s plate number
• A description of what happened
• Photos you upload of the damage

This is used to open a case, assign it a reference number, and let our staff review and convert it into a job. We only ask for what’s needed to do that.

Tracking your car

To look up a job’s status, you enter your vehicle plate and a job reference together — both, not either alone. That is a deliberate security measure, so one piece of information on its own can’t be used to look up someone else’s job. This is a read-only lookup against a job already created by our staff, so it isn’t new data collection, but the plate and reference pair is logged briefly for rate limiting (to stop automated lookup abuse), tied to your IP address.

Requesting a quote

The quote form does not send anything to us or store anything on our servers. It opens WhatsApp with your details pre-filled, and from that point you are messaging us directly — governed by WhatsApp’s own privacy terms, not ours.

Staff accounts

Our own staff have individual login accounts, not shared logins, to manage jobs. Every action a staff member takes on a job — advancing its stage, adding a note, uploading a photo — is attributed to that specific staff account and logged, so there is always a clear record of who did what.

How long we keep it

Job records and photos are retained while work is active. After a job is completed, it remains active for 30 days, then moves to the staff archive for 30 more days before its records and private photos are deleted. Accident reports that are not converted to a job are deleted within 60 days of submission. This is a deliberate storage-cost and data-minimisation decision — we don’t hold onto customer records or photos indefinitely.

Who we share it with

• Our database and file-storage provider processes and stores this data on our behalf, under standard contractual safeguards for handling personal data.
• We do not sell personal data, and we do not share it with anyone for marketing purposes.
• If you contact us via WhatsApp, that conversation is also subject to WhatsApp and Meta’s own privacy policy — we don’t control that layer.

How we protect it

• Two-factor lookup on the job tracker (plate and reference together) so a single guessed value can’t expose someone else’s job.
• Rate limiting on lookups and submissions to prevent automated abuse.
• Role-based staff access — junior staff can’t see or do more than their role allows.
• Every privileged action is attributed and logged, so there is no way to make an untraceable change to a customer’s job.

Your rights

Under the PDPA, you can ask us:

• What personal data we hold about you
• To correct inaccurate data
• To withdraw consent for us to hold it, where we are not legally required to keep it

To do any of this, contact us by phone or WhatsApp on 8115 9753, or message the workshop directly:

Ask about my data

Changes to this policy

We’ll update this page if what we collect or how we handle it changes, and date the update below.

Last updated: 2 September 2026