Privacy Policy

Introduction

Kebun Lodge ("we", "us", "our") is committed to the responsible handling of personal data collected from clients, website visitors, and enquiring parties. This Privacy Policy explains what data we collect, why we collect it, and how it is stored, protected, and used.

This policy is governed by Singapore's Personal Data Protection Act 2012 (PDPA). By using our website or engaging our services, you agree to the practices described below. For any privacy-related questions, please contact us at [email protected].

This policy was last updated on 28 February 2025 and applies to all Kebun Lodge services and the website at kebunlloodge.live.

Data We Collect

We collect the following categories of personal data:

• Identity data: Name, initials, or other identifiers provided when submitting our enquiry form.
• Contact data: Email address and telephone number provided through our contact form or in correspondence.
• Service data: Information about your property requirements, tenancy details, or lease documents shared with us during an engagement.
• Technical data: IP address, browser type, and pages visited, collected automatically when you access our website.
• Cookie data: Preferences stored in browser cookies where consent is given. See our Cookie Policy for detail.

We collect data by lawful means — through direct submission via our contact form, through correspondence by email or phone, and through automatic website tracking tools where consent applies. We do not collect sensitive personal data (such as financial account details or health information) through our website.

Data retention: Contact and service data is retained for a period of three years from the conclusion of an engagement or last contact, after which it is securely deleted. Technical and cookie data is retained for up to twelve months.

How We Use Your Data

We process personal data for the following purposes:

• Responding to enquiries and communicating about our services
• Delivering the Garden District Residence Search, Lease Review, or Estate Custodianship service you have engaged
• Managing tenancy documentation and correspondence on your behalf
• Improving our website and understanding how it is used
• Fulfilling legal obligations, including PDPA compliance and IRAS stamp duty requirements

The legal basis for processing is consent (where you have submitted a form or agreed to cookies), contract performance (where we are engaged to provide a service), and legitimate interest (for website analytics and service improvement).

We do not use your personal data for marketing communications without your explicit consent, and we do not sell your data to any third party.

Data Sharing

We share personal data only in the following circumstances:

• With landlords and their agents — when required as part of the lease review or tenancy formation process, and only with your knowledge and consent.
• With service contractors — for custodianship engagements, we share relevant property details with landscape, pool, and maintenance contractors. Personal contact details are not shared without consent.
• With government bodies — where required by Singapore law, such as IRAS for stamp duty processing.
• With analytics providers — anonymised technical data may be processed by web analytics tools. No personally identifiable information is included.

Data Protection

We apply the following measures to protect personal data in our custody:

• All digital records are stored in password-protected, encrypted storage accessible only by named team members
• Printed document archives are stored in a secure, locked location at our Ridout Road premises
• Email communications with clients are conducted over encrypted connections
• Access to client records is limited to the adviser assigned to the relevant engagement

In the event of a data breach, we will notify affected individuals and the Personal Data Protection Commission (PDPC) within the timeframes required under Singapore's PDPA, where the breach involves a notifiable breach threshold.

Cookies

Our website uses cookies to support basic functionality and, where consent is given, to understand how the site is used. Please see our Cookie Policy for a full description of the cookies we use, their purpose, and how to manage your preferences.

Your Rights Under Singapore's PDPA

As a data subject under Singapore's Personal Data Protection Act, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of consent: Withdraw consent for processing where consent is the legal basis
• Portability: Request transfer of your data to another organisation in a structured format

To exercise any of these rights, please contact [email protected]. We will respond within 30 days. If you believe your data rights have not been respected, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

Third-Party Links

Our website may contain links to external services, including Google Maps. We are not responsible for the privacy practices of third-party websites. Please review the privacy policy of any third-party site before submitting personal data.

Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us so that it can be removed.

Changes to This Policy

We may update this Privacy Policy from time to time. The revised policy will be published on this page with an updated "Last Updated" date. Continued use of our website or services after the revision date constitutes acceptance of the updated policy.