People Places A Brighter Tomorrow

中文

PeoplePlacesA Brighter Tomorrow

Legal

Privacy policy

Last reviewed

This policy explains how personal data is collected, used, disclosed and protected when you use jennyxie.com (the Site), in line with the Personal Data Protection Act 2012 (PDPA).

The Site is operated by or on behalf of Xie Meizhong, Jenny (Jenny), a property salesperson (CEA registration no. R029803H) with ERA Realty Network Pte Ltd (estate agent licence no. L3002382K) (ERA). Jenny is responsible for personal data collected through the Site. If you go on to use ERA’s services, ERA’s own data protection policy also applies to the personal data processed for that work.

1. What is collected

What you give. Through the enquiry form: your name, mobile number and email address, and anything else you choose to add, such as the property you are asking about, your budget, preferred locations, number of bedrooms, timing and your message. Through the newsletter form: your email address. With both, the consent choices you make (see section 3).

What is collected automatically.

  • Your IP address and basic request information are used briefly to protect the forms from abuse and to limit repeated submissions.
  • When you subscribe to the newsletter, a keyed, one-way code derived from your IP address is kept with the subscription record so that abuse can be detected. Your IP address itself is not stored with the record, but the code is still treated as personal data.
  • If you arrive through a link that carries campaign tags (for example, utm_source), those tags are stored with your enquiry so that Jenny knows which campaign it came from.
  • The companies that host and secure the Site keep technical logs, such as IP address, time, pages requested and browser type, for security and to keep the Site working.

The Site does not use advertising or analytics trackers. See the Cookies notice.

What you should not send. Please do not send NRIC or passport numbers, bank or card details, or health information through the Site. If they are needed later in a transaction, they will be requested through a proper channel.

2. Why it is collected

Personal data collected through the Site is used to:

  1. reply to your enquiry and give you the information, viewings or assistance you ask for;
  2. if you go on to engage ERA’s services, carry out the estate agency work, including the checks and record-keeping that the law requires of estate agents and salespersons;
  3. contact you by phone call, SMS or WhatsApp about property services, market updates and new launches, only if you ticked that box;
  4. send you the email newsletter, only if you ticked that box;
  5. keep an accurate record of what you consented to, and when;
  6. keep the Site and its forms secure, and prevent abuse; and
  7. comply with the law, respond to lawful requests from authorities such as the CEA or the Personal Data Protection Commission (PDPC), and establish, exercise or defend legal claims.

Personal data is not used for any other purpose without your consent, unless the PDPA permits or requires it.

The enquiry form has three separate checkboxes, each for a different purpose. Only the first, which allows Jenny to reply to your enquiry, is required. The other two, for marketing by phone, SMS or WhatsApp and for the email newsletter, are optional and are never ticked in advance.

Each time a form is submitted, the Site records the date and time, the version of the form, the boxes you ticked, and the exact wording that was shown beside each box. That record is kept so that what you agreed to can be shown accurately later. How Do Not Call obligations are handled is set out in the PDPA and Do Not Call notice.

4. Who it is shared with

Personal data is shared only as far as each purpose needs:

  • ERA, where needed for estate agency work carried out through ERA, and for ERA’s supervision of its salespersons and its own legal obligations;
  • service providers that host, secure and deliver the Site, and that operate the customer-relationship platform used to manage enquiries, which process it on Jenny’s behalf to provide those services;
  • other parties to a transaction, such as a co-broking salesperson, a developer’s appointed marketing agency, a lawyer, a bank or a valuer, only where needed for your transaction and, where the law requires, with your agreement; and
  • authorities and other persons, where the law requires or permits it.

Personal data is never sold, rented or traded.

5. Transfers outside Singapore

The Site’s records are stored on servers in Singapore. The Site is delivered through Cloudflare, a network and security provider that may process request information, such as IP addresses, in other countries.

6. How it is protected

Reasonable security arrangements are used to protect personal data, including encryption in transit (HTTPS), restricted access to stored records, protection of the forms against cross-site request forgery and automated abuse, and security headers that prevent third-party scripts from running on the Site. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

If a data breach occurs, it will be assessed, and the PDPC and affected individuals will be notified where the PDPA requires.

7. How long it is kept

Personal data is kept only for as long as it is needed for the purpose it was collected for, or for as long as it is needed for legal or business purposes, such as keeping the records the law requires for estate agency transactions. Consent records are kept for as long as the related personal data is held, and for a reasonable period afterwards so that compliance can be shown. Personal data that is no longer needed for any of these purposes will be deleted or anonymised.

You may ask:

  • for access to the personal data about you that is held, and for information about how it has been used or disclosed in the past year;
  • for correction of any error or omission in it; and
  • to withdraw your consent to any purpose, including marketing, at any time.

To make a request, use the contact details in section 12. Your identity may need to be verified first. A reasonable fee may be charged for an access request; if so, you will be told the amount before the request is processed. Requests are answered as soon as reasonably possible, and in any case within 30 days, or you will be told within that time when a response can be given.

If you withdraw consent, the likely consequences will be explained to you; for example, withdrawing consent to be contacted about an enquiry means it cannot be pursued. Withdrawing consent does not affect personal data that must be kept to meet a legal obligation.

9. Children

The Site is intended for adults. If you are under 18, please ask a parent or guardian to get in touch for you.

10. Other websites

Links to other websites and services, including WhatsApp, news publishers and developers, lead to places with their own privacy practices. This policy does not cover them.

11. Changes to this policy

This policy may be updated from time to time. The date at the top of the page shows when it was last updated. Any change that affects how existing personal data is used will be applied only as the PDPA allows.

12. Contact

Privacy questions and requests about the Site should be sent to Jenny, who is the contact for data protection for the Site, through the contact page or by calling or messaging her CEA-registered number, +65 8613 3111.

For personal data held by ERA, contact ERA’s data protection officer through ERA’s website. If you are not satisfied with the response to a request, you may contact the PDPC.