Privacy Policy

1. Who We Are

Carriage is a Singapore-based digital platform that connects family caregivers with licensed Care Professionals, financial support resources, and caregiver training. We are currently operating in beta.

References to "Carriage", "we", "us", or "our" in this policy refer to Carriage and its team. We are committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and its subsequent amendments.

2. Data We Collect

We collect personal data that you provide directly, as well as data generated through your use of our platform.

Data you provide

• Name, email address, and contact number
• Information about your caregiving situation (e.g. who you are caring for, their condition, your caregiving duration)
• Employment and employer information (for CHAS or employer-covered sessions)
• Financial information relevant to subsidy eligibility assessments
• Preferences and intake responses submitted during onboarding

Data generated through use

• Session scheduling and attendance records
• Platform usage data (pages visited, features used, session duration)
• Device and browser information
• Communications between you and Carriage support

Data we do not collect directly

Session content between you and your Care Professional is governed by professional confidentiality obligations. Carriage does not routinely access, store, or review the content of your care sessions.

3. How We Use Your Data

We use your personal data only for purposes that are reasonable and appropriate, including:

• Matching you with a suitable Care Professional based on your needs
• Facilitating session bookings and reminders
• Assessing your eligibility for subsidies under CHAS, employer-funded programmes, or other government schemes
• Processing payments and reimbursements
• Communicating service updates, appointment confirmations, and important notices
• Improving our platform, services, and user experience
• Complying with applicable Singapore laws and regulations
• Responding to your enquiries and feedback

We will not use your data for purposes beyond those stated without your consent.

4. PDPA Compliance

Carriage complies with the Personal Data Protection Act 2012 (PDPA), as administered by the Personal Data Protection Commission (PDPC) of Singapore.

In accordance with the PDPA, we will:

• Collect personal data only with your knowledge and consent, or as otherwise permitted by law
• Inform you of the purposes for which your data is collected at or before the point of collection
• Use and disclose your data only for the purposes you have consented to
• Ensure your data is accurate and complete where it is likely to be used for a decision affecting you
• Protect your data with reasonable security arrangements
• Retain your data only for as long as necessary for the stated purposes or as required by law
• Allow you to access and correct your personal data upon request

5. Sensitive Health Data

Because Carriage operates in the mental health and caregiving space, some of the information you share may be sensitive in nature — including details about your emotional wellbeing, caregiving challenges, or the health conditions of the person you care for.

We treat this information with heightened care:

• Sensitive data is accessed only by authorised personnel and Care Professionals directly involved in your care
• We do not sell or commercially exploit any health-related information
• Session content shared with your Care Professional is protected by professional confidentiality obligations
• Disclosure of sensitive information will only occur where required by law (e.g. mandatory reporting obligations), where there is serious risk of harm, or with your explicit consent

Our Care Professionals are bound by the ethical standards of their respective professional bodies in Singapore, including obligations under the Singapore Association for Counselling (SAC) and relevant MOH-registered guidelines.

6. Sharing of Data

We do not sell your personal data. We may share it in the following limited circumstances:

Care Professionals

Your intake information and relevant background details are shared with the Care Professional assigned to you, to facilitate appropriate and informed support.

Government and subsidy bodies

Where you apply for financial subsidies (e.g. CHAS, MOH, MSF, or AIC schemes), we may be required to share relevant information with the administering authority to verify eligibility or process claims.

Employers

If your sessions are funded through an employer programme, we may confirm session attendance to the relevant employer or insurer. We will not share session content or clinical notes.

Service providers

We engage trusted third-party providers for functions such as cloud hosting, video conferencing, and payment processing. These providers are contractually obligated to protect your data and use it only as directed by us.

Legal obligations

We may disclose your data if required by Singapore law, court order, or regulatory authority, or where necessary to protect the safety of any individual.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

• Account and session records are retained for a minimum of 5 years from the date of your last session, in line with general professional record-keeping standards in Singapore
• Financial and subsidy-related records may be retained for up to 7 years for accounting and audit purposes
• If you request deletion of your account, we will remove your data within 30 days, except where retention is required by law

8. Your Rights

Under the PDPA, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request that inaccurate or incomplete data be corrected
• Withdrawal of consent — Withdraw consent for use of your data at any time, subject to legal or contractual obligations
• Data portability — Request that your data be provided to you in a common machine-readable format (where applicable under the PDPA)

To exercise any of these rights, please contact our Data Protection Officer at the details in Section 13. We will respond within 30 days.

9. Security

We implement reasonable security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption of data in transit (TLS/HTTPS)
• Access controls limiting data access to authorised personnel only
• Regular review of our security practices as our platform matures

As a beta-stage platform, we are continuously improving our security infrastructure. If you become aware of any security vulnerability or incident, please contact us immediately at hello@carriagesg.com.

10. Cookies

We use cookies and similar technologies to operate our platform and understand how users interact with it. This includes:

• Essential cookies — Required for the platform to function (e.g. session management)
• Analytics cookies — Help us understand usage patterns so we can improve the experience

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

11. Children's Privacy

Carriage's services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

12. Changes to This Policy

As Carriage grows and our services evolve — particularly during our beta phase — this Privacy Policy may be updated. We will notify registered users of material changes via email and post the updated policy on our website with a revised "Last updated" date.

Your continued use of the platform after changes are notified constitutes your acceptance of the updated policy.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact:

We take all privacy enquiries seriously and will respond within 30 days of receiving your request.