Privacy policy

1. Who we are

We are ConcertCam SG, a concert camera phone rental service based in Singapore.

2. What we collect at booking

We collect only the personal information necessary to reserve and hand over the phone, verify your identity, and ensure device return:

• Full name: to identify the renter and prepare the rental agreement.
• Email address and phone number: for booking confirmations, reminders, and arranging pickup and return.
• Residential address: verified at pickup against your identity document, and for recovery in the event a phone is not returned.
• Last 3 digits and letter of NRIC (e.g. 567D): for identity verification at pickup. We never collect the full NRIC number, and we never take photos or copies of your identity document.
• PayNow name: to match your payment to your reservation.
• E-signature image: proof that you accepted the rental terms and agreement.
• IP address and browser details: recorded at the time of signing and when confirming pickup or return, for verification and audit log integrity.
• Handover condition photos: at pickup and return, the owner takes 3 photos of the phone (back, front, screen on) to record its condition. Faces, ID cards, and notifications are kept out of the photos. They are stored privately and shown to you on your private booking page.
• Private booking page and confirmation records: each booking has a private booking page (link sent by email). When you confirm pickup and return there, we record the time, your ticks, IP address, and browser (user agent) as evidence of the confirmation. The link stops working 60 days after the return date.
• Booking details: your chosen dates, chosen camera phone model, and selected add-ons.

3. Why we collect your data

We collect and use your personal data strictly for these purposes:

• To reserve and hand over the phone for your selected dates.
• To verify your identity at in-person pickup.
• To match your S$50 PayNow reservation payment with your booking.
• To contact you regarding your booking, reminders, and return logistics.
• To maintain accurate accounting, tax, and legal business records.

4. Payments

We match your S$50 PayNow reservation payment using our bank's automated payment alert, which includes the payer name, payment amount, timestamp, and transaction reference. Credit card and debit card details are never collected or processed by our website.

5. Who processes personal data for us

We do not sell, rent, or trade your personal information to third parties for marketing. Personal data is processed solely by the infrastructure providers that power our operations:

• Neon: cloud PostgreSQL database hosting our booking database (Singapore region as configured).
• Vercel: web hosting and serverless application infrastructure.
• Resend: email provider acting on our behalf to send booking emails (confirmation with the signed agreement PDF, pickup details, confirm pickup, return reminder, and confirm return). Resend keeps a copy of sent emails for a limited time under its own data retention policy.
• Cloudflare R2: encrypted cloud object storage for rental agreement e-signature images and handover condition photos.
• Google: Gmail for receiving bank payment notifications; Google sign-in authentication for internal staff access only.
• Telegram: automated booking alerts sent to our private, internal staff chat, which include your name and phone number so staff can prepare your reservation.

Our providers (Vercel hosting, Neon database, Cloudflare R2 storage, Resend email) may store or process data outside Singapore; we use reputable providers with contractual safeguards so it gets a comparable standard of protection.

Ticketmaster provides concert listings only and receives no personal data from us.

We disclose personal data to law enforcement or statutory authorities only where required by Singapore law (such as filing a police report for an unreturned device).

6. Data retention

We retain personal data only as long as necessary for the purpose it was collected or to fulfill legal requirements:

• Private booking page: the link sent by email stops working 60 days after the return date.
• Unpaid holds: booking requests where payment is not received have all personal details permanently removed 30 days after the hold expires.
• Completed rentals: 12 months after the booking closes, we delete the handover photos, condition notes, confirmation IP address and browser details, contact details, partial NRIC, address, PayNow name, and signature.
• Email log: a record that an email was sent (type of email and time, no email content) is kept with the booking record and deleted with it.
• Accounting and tax records: booking reference, dates, amounts, deposit refund or deduction details, and name are kept for 5 years in compliance with Inland Revenue Authority of Singapore (IRAS) requirements, then deleted.
• Staff chat alerts: Telegram booking alert messages sent to our staff chat are deleted within 12 months.

7. Phone data and return process

Your concert memories belong entirely to you. At return, you sign out of every account you added, delete your photos and videos, and empty the bin (Samsung Gallery → ☰ menu → Recycle bin → Empty; vivo Albums → Recently deleted → Delete all).

Alternatively, you can optionally consent to ConcertCam SG keeping the concert videos left on the phone and using short clips on its website and social media. Consent can be withdrawn anytime at support@concertcamsg.com.

ConcertCam SG checks for and removes any remaining accounts or personal files before the next rental.

8. Your rights under the PDPA

Under the Singapore Personal Data Protection Act (PDPA), you have the right to:

• Request access to the personal data we hold about you and information about how it has been used.
• Request correction of any error or omission in your personal data.
• Withdraw your consent for the collection, use, or disclosure of your personal data at any time.

You can ask to access or correct your personal data, or withdraw consent, by emailing support@concertcamsg.com. We respond to verified requests within 30 days.

Withdrawing consent to data we need for a rental (ID check, contact details, agreement) means we may not be able to rent to you. Withdrawing the optional video consent doesn't affect your rental.