Privacy Policy

1. Introduction

Heronwick operates in compliance with Singapore's Personal Data Protection Act 2012 (PDPA) and related regulations. We are committed to maintaining the confidentiality, security, and accuracy of your personal data.

This policy applies to all personal data we collect through our website, email communications, telephone conversations, and in-person consultations. By engaging our services or providing us with your personal data, you consent to the collection, use, and disclosure of your personal data in accordance with this policy.

2. Data We Collect

We collect personal data that you voluntarily provide to us when you:

• Inquire about our services through our website contact form, email, or telephone
• Engage us for property search, lease readiness review, or tenancy management services
• Participate in consultations or property viewings
• Subscribe to updates or communications from us

Types of Personal Data

The personal data we may collect includes:

• Contact information: name, email address, telephone number, mailing address
• Employment information: employer name, work location, relocation details
• Housing preferences: desired neighborhoods, property types, budget considerations
• Family information: household size, children's ages (if relevant to property selection)
• Financial information: budget range, employer housing allowances (as necessary for property matching)
• Identification documents: passport or identity card (required for lease execution)

3. How We Use Your Data

We collect and use your personal data for the following purposes:

• To provide our property search, lease readiness, and tenancy management services
• To communicate with you about properties, viewings, and service delivery
• To facilitate lease negotiations and documentation on your behalf
• To coordinate property viewings, inspections, and maintenance matters
• To improve our services based on client needs and feedback
• To comply with legal and regulatory requirements
• To send you relevant updates about our services (only with your consent)

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary to fulfill our service agreement with you
• Legitimate interests: Processing is necessary for our legitimate business interests while respecting your privacy rights
• Legal obligation: Processing is necessary to comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your personal data in the following circumstances:

• Property Owners and Landlords: We share relevant information with property owners when arranging viewings or negotiating leases on your behalf
• Service Providers: We may engage third-party service providers (such as maintenance contractors or legal advisors) who require access to certain information to perform their services
• Legal Requirements: We may disclose your information when required by law, court order, or government authority
• Professional Advisors: We may share information with lawyers, accountants, or other professional advisors when necessary for service delivery

All third parties with whom we share your data are required to maintain appropriate security measures and use your information only for the purposes specified by us.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Active Service Period: Throughout your engagement with our services
• Post-Service Period: Up to seven years after service completion for legal and regulatory compliance purposes
• Inquiry Data: Information from inquiries that do not result in service engagement is retained for up to two years

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure storage systems with restricted access controls
• Regular security assessments and updates
• Staff training on data protection and confidentiality obligations
• Incident response procedures for potential data breaches

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

8. Your Rights

Under Singapore's PDPA, you have the following rights regarding your personal data:

• Right of Access: Request access to the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Withdraw Consent: Withdraw your consent for specific uses of your data at any time
• Right to Erasure: Request deletion of your data in certain circumstances

To exercise any of these rights, please contact us at privacy@heronaros. We will respond to your request within 30 days.

9. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website usage. For detailed information about our cookie practices, please refer to our Cookie Policy.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a child has provided us with personal data, please contact us immediately so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notification to active clients

Your continued use of our services after changes to this policy constitutes acceptance of the updated terms.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

If you believe we have not addressed your data protection concerns adequately, you have the right to lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.