Privacy policy

Updated 17 September 2026. This policy describes the hanaaircon.com website operated by Hana Aircon & Engineering Pte Ltd.

Information used to provide the service

Account and booking records may include your username, name, email, phone number, service address, appointment details, requested service, unit count, staff notes and optional profile image. We use this information to manage accounts, respond to enquiries, arrange services and maintain operational records.

Signing in with Google or Facebook uses that provider's authentication service. The information available depends on the provider and permissions, such as an account identifier, profile information and email. We do not ask for your Google or Facebook password on our own login forms.

Bookings and access

Staff use booking and customer records to manage services. Signed-in My Bookings shows records linked to that account. A separate public lookup remains available: someone who knows a matching mobile number can retrieve the latest recorded appointment time. Rate limits reduce repeated attempts but do not verify ownership of a number. Contact us if you have concerns about this lookup.

Cookies, analytics and external services

Essential cookies support sessions, sign-in and form security. Pages also load Google Analytics and Google Ads tags for measurement; these may use cookies and process browsing information. Some pages load Google reCAPTCHA, and the site uses externally hosted fonts or assets. Requests to these providers can disclose information such as IP address and browser details.

Browser controls can restrict cookies or trackers, although blocking essential cookies may prevent sign-in or booking. This policy is not itself a cookie-consent control.

When you open WhatsApp or social-media links, those services handle your interaction under their own policies. Service emails, hosting and backup systems also process data needed to operate the website.

AI-assisted services

When staff use the internal HanaBot assistant, the application sends their message and selected customer names and appointment times to OpenAI for a response. This is distinct from a customer's own AI assistant: information you share with that assistant is also handled under its provider's policies. Do not send passwords or login codes in messages.

Security records and retention

Server and application logs may record IP addresses, request times, paths, errors and operational activity. Public-lookup throttling keeps keyed hashes of IP/phone identifiers and short-lived counters rather than raw identifiers in its limiter store; other service records and logs can still contain personal information.

Website log rotation is configured for 90 daily rotations, with encrypted off-server archives retaining 90 daily snapshots. Archives can include older rotated records, so this is not a guarantee that every log entry disappears after 90 days. Database and application backups also retain copies for recovery. Account and booking records do not currently have an automatic fixed-age deletion schedule.

We use access controls and encrypted exported backups, but no system is risk-free. Encryption of exported backups does not mean every record on a running server is encrypted against the hosting operator.

Providers and overseas processing

Hosting, backup, email, analytics, authentication, AI and messaging providers may process information outside Singapore. Do not assume all information stays on the website server. Provider-specific processing and retention depend on the service and its settings.

Privacy requests

Use our contact page or call +65 8200 7824 and identify your message as a privacy request. You may ask about access, correction, deletion or withdrawal of consent. We may need to verify your identity before discussing or changing records. What can be provided or removed depends on applicable law, necessary service records and backup limitations; we do not promise immediate erasure from all backups.

Please tell us if you believe information is inaccurate or has been misused. Material changes to this description will be reflected on this page.