Privacy Policy

Nonya Keys Pte. Ltd. ("Nonya Keys", "we", "us", "our") is committed to protecting the personal data of individuals who engage with our services or visit our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). Please read this document carefully. If you have any questions, reach out to us at [email protected].

1. Who We Are

Nonya Keys Pte. Ltd. is a residential leasing advisory and stewardship company operating in Singapore. Our registered office is at 25 Emerald Hill Road, Singapore 229308. We act as the data controller for personal data collected through our website and during service engagements.

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Full name and contact details (email address, phone number)
• Residential address or preferred area of interest in Singapore
• Enquiry and message content submitted through our contact form
• Service engagement records (correspondence, tour summaries, lease documents handled)
• Website usage data collected via cookies and analytics tools

We do not collect sensitive personal data such as NRIC numbers, financial account information, or health-related data through standard service enquiries.

3. How We Collect Data

Personal data is collected through the following means:

• Enquiry forms submitted on our website
• Direct correspondence via email, phone, or in-person meetings
• Cookies and analytics tools during website visits (subject to your cookie preferences)
• Information shared during service delivery (tours, lease reviews, stewardship coordination)

4. Legal Basis for Processing

We process your personal data on the following bases under the PDPA:

• Consent: Where you have provided explicit consent, such as submitting an enquiry form or accepting our cookie policy
• Contractual necessity: Where processing is required to deliver the service you have engaged us for
• Legitimate interest: For service improvement, follow-up communications, and internal business records

5. How We Use Your Data

Your personal data may be used for the following purposes:

• Responding to enquiries and scheduling service engagements
• Delivering Heritage District Property Tours, Lease Structuring, and Estate Stewardship services
• Sending post-engagement follow-up communications and satisfaction reviews
• Maintaining accurate service records for ongoing stewardship clients
• Improving the quality and relevance of our services
• Complying with applicable legal and regulatory obligations

We do not use your personal data for automated profiling or use it for purposes beyond those stated above without obtaining renewed consent.

6. Data Retention

We retain personal data only for as long as necessary for the stated purposes or as required by law. Enquiry records are retained for 24 months unless a service engagement is initiated. Service engagement records are retained for a period of 5 years following the conclusion of the engagement. You may request deletion of your data at any time subject to legal retention requirements.

7. Data Sharing and Third Parties

We do not sell your personal data to any third party. We may share limited personal data with:

• Technology and IT service providers who process data on our behalf under data processing agreements
• Analytics service providers (Google Analytics) on an anonymised basis
• Professional advisors (legal, accounting) where required for business operations
• Regulatory authorities where disclosure is required by law

We do not share personal data with landlords, property managers, or third-party contractors without your explicit consent.

8. Data Protection Measures

We take reasonable measures to protect your personal data from unauthorised access, use, or disclosure:

• Secure data storage with access limited to authorised personnel
• Encrypted transmission of data via SSL/HTTPS on our website
• Regular internal review of data handling practices
• Prompt notification to affected individuals in the event of a data breach, as required under the PDPA

9. Cookies

Our website uses cookies to improve your browsing experience and to understand how visitors use our site. For full details on the types of cookies used and how to manage your preferences, please refer to our Cookie Policy.

10. Your Rights

Under Singapore's PDPA, you have the following rights in respect of your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right of correction: Request correction of inaccurate or incomplete data
• Right of withdrawal: Withdraw consent for data processing where processing is based on consent
• Right to data portability: Request your data in a machine-readable format where technically feasible
• Right to lodge a complaint: Contact Singapore's Personal Data Protection Commission (PDPC) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies before sharing any personal data.

12. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through our website, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated effective date. Continued use of our website or services following such updates constitutes acceptance of the revised policy.

14. Contact

For any privacy-related questions, concerns, or requests, please contact our Data Protection Officer at:

Nonya Keys Pte. Ltd.
25 Emerald Hill Road, Singapore 229308
Email: [email protected]

You may also contact Singapore's PDPC at www.pdpc.gov.sg if you wish to raise a concern with the regulatory authority.