Privacy Policy
At Oasis Residences, we are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information in accordance with Singapore's privacy laws.
Data Controller Information
Oasis Residences
Privacy Officer
Our dedicated privacy officer handles all data protection inquiries and ensures compliance with Singapore's Personal Data Protection Act (PDPA) and international privacy standards.
Contact: Available Monday-Friday, 9 AM - 6 PM SGT
Information We Collect
We collect different types of personal data to provide our boarding house accommodation services and improve your experience with us.
Contact Information
- Full name and preferred name
- Email address
- Phone number (mobile and alternative)
- Mailing address and emergency contacts
Legal Basis: Contract performance and legitimate interest for accommodation services
Accommodation Data
- Accommodation preferences and requirements
- Stay duration and check-in/out dates
- Special needs and accessibility requirements
- Service requests and concierge usage
Legal Basis: Contract performance and legitimate interest for service delivery
Financial Information
- Payment method details (encrypted)
- Billing and invoicing information
- Transaction history and payment records
- Credit check and verification data (if applicable)
Legal Basis: Contract performance and legal obligation for financial compliance
Website Usage Data
- IP address and browser information
- Pages visited and time spent
- Device type and operating system
- Cookie and session data
Legal Basis: Legitimate interest for website improvement and security
How We Use Your Information
Service Delivery
- Process accommodation bookings and reservations
- Provide personalized concierge services
- Manage housekeeping and maintenance schedules
- Handle billing and payment processing
Communication
- Respond to inquiries and provide customer support
- Send booking confirmations and updates
- Share important facility information
- Conduct satisfaction surveys (with consent)
Legal Compliance
- Meet Singapore Housing Board requirements
- Maintain financial and tax records
- Ensure security and safety protocols
- Respond to legal requests when required
Service Improvement
- Analyze website usage and user experience
- Develop new services and amenities
- Improve operational efficiency
- Enhance safety and security measures
Data Protection Measures
Technical Security
Data Encryption
All sensitive data is encrypted using AES-256 encryption both in transit and at rest, ensuring maximum protection against unauthorized access.
Secure Servers
Data is stored on secure servers located in Singapore with redundant backups, 24/7 monitoring, and regular security audits.
Access Controls
Multi-factor authentication and role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis.
Organizational Security
Staff Training
All staff receive regular training on data protection principles, privacy regulations, and secure data handling procedures.
Confidentiality Agreements
All employees and contractors sign confidentiality agreements and are bound by strict data protection policies and procedures.
Incident Response
We have comprehensive incident response procedures to address any potential data breaches within 72 hours as required by law.
Data Retention Periods
| Data Type | Retention Period | Reason |
|---|---|---|
| Contact form submissions | 3 years | Customer service and follow-up |
| Accommodation records | 7 years | Legal and regulatory compliance |
| Financial transactions | 7 years | Tax and accounting requirements |
| Marketing communications | Until consent withdrawn | Ongoing marketing consent |
| Website analytics | 26 months | Service improvement analysis |
Automatic Deletion: Data is automatically deleted when retention periods expire unless there are legal requirements to retain it longer.
Your Privacy Rights
Under Singapore's Personal Data Protection Act (PDPA) and international privacy standards, you have several important rights regarding your personal data.
Right to Access
Request a copy of all personal data we hold about you, including how it's being used and who it's shared with.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data when it's no longer needed or if you withdraw consent.
Right to Data Portability
Receive your personal data in a structured, commonly used format for transfer to another service.
Right to Object
Object to processing of your personal data for direct marketing or other purposes based on legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent, without affecting lawfulness of prior processing.
How to Exercise Your Rights
To exercise any of these rights, please contact our privacy officer using the details below. We will respond to your request within 30 days.
Third-Party Services
We use carefully selected third-party services to provide better functionality and improve our services. Each service has its own privacy policy governing how they handle your data.
Analytics Services
Google Analytics helps us understand website usage patterns and improve user experience through anonymous data collection.
Data Shared: Anonymous usage statistics
Purpose: Website optimization
Payment Processing
Secure payment processors handle financial transactions using industry-standard encryption and PCI DSS compliance.
Data Shared: Payment information (encrypted)
Purpose: Transaction processing
Communication Services
Email and messaging services help us communicate effectively while maintaining security and deliverability standards.
Data Shared: Contact information
Purpose: Service communications
External Links: We recommend reviewing the privacy policies of any third-party services we link to or use, as they are not covered by this privacy policy.
Privacy Questions & Concerns
Contact Our Privacy Officer
Response Commitment
- Initial acknowledgment within 48 hours
- Full response within 30 days
- Secure handling of all privacy requests
Complaints: If you're not satisfied with our response, you can file a complaint with Singapore's Personal Data Protection Commission (PDPC).
Policy Updates
How We Handle Changes
We may update this privacy policy periodically to reflect changes in our services, legal requirements, or data protection practices. We are committed to maintaining transparency about any changes.
Version History
Updated to reflect enhanced data protection measures and expanded service offerings for boarding house accommodation.
Archive Access: Previous versions of this policy are available upon request for transparency and compliance purposes.