Privacy Policy

Our Commitment to Your Privacy

At Harmoniion, we are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect your information when you interact with our accommodation services.

We comply with Singapore's Personal Data Protection Act (PDPA) and other applicable data protection regulations to ensure your information is handled responsibly and transparently.

Information We Collect

Personal Data We Collect

• Contact Information: Name, email address, phone number, residential address
• Identity Information: NRIC/FIN/Passport number (for tenancy agreements), date of birth
• Financial Information: Bank account details, payment card information, credit history
• Usage Data: IP address, browser type, pages visited, time spent on site
• Communication Data: Messages sent through contact forms, email correspondence, feedback
• Cookie Data: Preferences, session information, analytics data

How We Collect Information

• Directly from you when you submit forms, make inquiries, or sign agreements
• Automatically through cookies and similar technologies when you visit our website
• From third parties such as credit agencies, previous landlords, or employment references
• Through property viewings and resident interactions

How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: Processing applications, managing tenancies, providing accommodation services
• Communication: Responding to inquiries, sending important updates, customer service
• Legal Compliance: Meeting regulatory requirements, tenancy documentation, tax obligations
• Marketing: Sending promotional materials (with your consent), service improvements
• Analytics: Understanding website usage, improving user experience, market research
• Security: Preventing fraud, maintaining property security, resident safety

Legal Basis for Processing

We process your data based on:

• Consent: For marketing communications and optional data processing
• Contract: To fulfill tenancy agreements and provide requested services
• Legitimate Interest: For business operations and service improvements
• Legal Obligation: To comply with Singapore laws and regulations

How We Protect Your Data

We implement comprehensive security measures to protect your personal data:

• Encryption of sensitive data during transmission and storage
• Secure servers with firewall protection and regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Staff training on data protection and confidentiality obligations
• Incident response procedures for potential data breaches

In the event of a data breach that may impact your rights and freedoms, we will notify you and the Personal Data Protection Commission within 72 hours as required by law.

Data Sharing and Third Parties

We may share your data with:

• Service Providers: Property management systems, payment processors, maintenance contractors
• Professional Advisors: Lawyers, accountants, auditors acting on our behalf
• Government Authorities: When required by law or for regulatory compliance
• Business Partners: With your consent, for joint services or programs

We ensure all third parties are contractually bound to protect your data and use it only for specified purposes. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Retention

We retain your personal data for:

• Contact form submissions: 3 years from last interaction
• Tenancy records: 5 years after tenancy ends
• Financial records: 7 years for tax and regulatory compliance
• Marketing data: Until consent is withdrawn
• Website analytics: 2 years from collection

After the retention period, we securely delete or anonymize your data unless longer retention is required by law.

Your Rights

Under the Personal Data Protection Act, you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a structured, commonly used format
• Object: Object to certain types of data processing
• Withdraw Consent: Withdraw consent at any time for consent-based processing
• Complain: Lodge a complaint with the Personal Data Protection Commission

To exercise any of these rights, please contact us using the information below. We will respond to your request within 30 days.

International Data Transfers

Your data may be transferred to and processed in countries outside Singapore for:

• Cloud storage and backup services
• International payment processing
• Global analytics platforms

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy assessments, to maintain the same level of data protection.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes through our website or email. The "Last Updated" date at the top indicates the most recent revision.