Privacy Policy

1. INTRODUCTION & STATUTORY COMPLIANCE

1.1. This Privacy Policy governs the collection, use, disclosure, processing, and protection of your personal data by LFA Pte. Ltd. (“we”, “us”, or “our”) in strict compliance with the Personal Data Protection Act 2012 of Singapore (“PDPA”) and its advisory guidelines issued by the Personal Data Protection Commission (“PDPC”).

1.2. By engaging our services, accessing our website, executing contracts, or communicating with us, you acknowledge and consent to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy and Singapore law.

2. TYPES OF PERSONAL DATA COLLECTED

2.1. In accordance with the PDPA, “personal data” refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which an organisation has or is likely to have access.

2.2. Depending on the nature of your interaction with us, we may collect:

(a) Identity & Contact Data: Full legal name, residential address, email address, telephone contact details, and NRIC/FIN/Passport number (processed strictly where required under Singapore law, regulatory obligations, or identity verification for property site access);

(b) Project & Spatial Specifications: Property address (including HDB/condominium development details), floor plans, architectural layout specifications, design briefs, timeline constraints, and budget parameters;

(c) Financial & Transactional Data: Bank account details, credit/debit card details, payment history, billing addresses, tax identification, and transaction records;

(d) Technical & Digital Data: IP addresses, browser types, device identifiers, time-zone settings, cookies, and digital usage patterns captured when interacting with our digital assets; and

(e) Third-Party Data: Personal data provided by you regarding co-homeowners, family members, or legal representatives, provided you warrant that appropriate authorisation has been obtained.

3. PURPOSE OF COLLECTION, USE, AND DISCLOSURE

3.1. Pursuant to the PDPA, we collect, use, and disclose your personal data solely for purposes that a reasonable person would consider appropriate in the circumstances, including:

(a) Service Delivery: Fulfilling contractual obligations relating to interior architecture, design consultations, space planning, project management, contractor coordination, and site supervision;

(b) Customer Support: Responding to inquiries, quotation requests, feedback, and post-renovation service requests;

(c) Business Administration: Managing accounting, billing, invoicing, auditing, debt recovery, and internal risk management;

(d) Regulatory Compliance: Complying with applicable Singapore laws, regulations, codes of practice, or statutory orders issued by court or government authorities;

(e) Marketing Communications: Providing updates on completed portfolios, promotional events, and industry developments where express consent has been granted, or as permitted under the PDPA and Do Not Call (DNC) Provisions; and

(f) Analytics & Digital Optimisation: Enhancing website security, user interface performance, and evaluating digital marketing effectiveness.

3.2. Integrated Third-Party Authentication: If you register or authenticate an account via third-party providers (such as Google, Apple, or Facebook), we process personal data made available through those services in accordance with your explicit permission settings on those platforms.

3.3. Disclosure to Third Parties: We may disclose your personal data to carefully vetted third parties, including independent sub-contractors, material vendors, payment gateways, professional advisors (legal, tax, audit), and IT service providers strictly to perform functions necessary for our service delivery. All third parties are contractually bound to maintain strict confidentiality and safeguard your personal data in compliance with the PDPA.

3.4. Analytics & Behavioural Tracking: We use web analytics tools, such as Microsoft Clarity and Microsoft Advertising, to monitor website activity via behavioural metrics, session replays, and heatmaps to optimise website security and usability. For details on Microsoft’s data handling, please review the Microsoft Privacy Statement.

4. DO NOT CALL (DNC) REGISTRY COMPLIANCE

4.1. We comply with the Do Not Call (DNC) provisions under the PDPA. We will not send marketing or promotional messages to your Singapore telephone number via voice call, SMS/MMS, or fax unless:

(a) We have obtained your unambiguous consent in writing or other recorded form; or

(b) The communication is exempt under applicable PDPC regulations or guidelines.

5. CONSENT, WITHDRAWAL OF CONSENT & EXCEPTIONS

5.1. Consent: By submitting personal data to us, you consent to its processing for the purposes outlined herein.

5.2. Withdrawal: You may withdraw your consent for any or all collection, use, or disclosure of your personal data at any time by writing to our Data Protection Officer. Upon receipt, we will notify you of the likely consequences of such withdrawal (e.g., our inability to fulfil active design contracts, proceed with site works, or honour warranty obligations).

5.3. Exceptions: Please note that under the PDPA, we may collect, use, or disclose personal data without consent in specific limited circumstances defined by law (e.g., to respond to emergencies, for legal investigations, or where mandated by Singapore regulatory bodies).

6. ACCESS, CORRECTION, AND ACCURACY

6.1. Access Requests: Under the PDPA, you are entitled to request access to your personal data in our possession or control, as well as information about how such data has been or may have been used or disclosed by us within a year before the request date.

6.2. Correction Requests: You may request that we correct an error or omission in your personal data.

6.3. Administrative Fees: We reserve the right to charge a reasonable administrative fee to process formal access requests, in accordance with the PDPA regulations.

6.4. Data Accuracy: You are responsible for ensuring all personal data provided to us is accurate and complete. You must notify our Data Protection Officer promptly of any changes to your personal details.

7. PROTECTION, SECURITY & DATA BREACH NOTIFICATION

7.1. Protection Measures: To safeguard your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks, we have implemented robust physical, technical, and administrative measures, including encrypted storage, firewall controls, and strict role-based access controls.

7.2. Data Breach Notification: In the event of a security incident resulting in a data breach affecting personal data in our custody, we will evaluate the breach and notify the Personal Data Protection Commission (PDPC) and affected individuals where required under the Mandatory Data Breach Notification regime of the PDPA.

8. RETENTION OF PERSONAL DATA

8.1. We will cease to retain documents containing your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that:

(a) The purpose for which that personal data was collected is no longer being served by retention; and

(b) Retention is no longer necessary for legal or business purposes.

9. INTERNATIONAL TRANSFERS OF PERSONAL DATA

9.1. Should your personal data be transferred outside of Singapore (e.g., for cloud storage servers, software platforms, or international vendor fulfilment), we will take steps to ensure that the recipient organisation provides a standard of protection to the transferred personal data that is comparable to the protection provided under the PDPA.

10. THIRD-PARTY LINKS

10.1. Our website may contain links to third-party sites. This Privacy Policy applies solely to LFA Pte. Ltd. We are not responsible for the data protection practices of third-party websites and strongly encourage you to review their individual privacy statements.

11. REVISIONS TO THIS POLICY

11.1. As part of our commitment to legal compliance, we periodically review and update this Privacy Policy. Any modifications will be published on our website with a revised effective date.

12. DATA PROTECTION OFFICER & CONTACT DETAILS

12.1. In accordance with the PDPA, we have designated a Data Protection Officer (DPO) to oversee our compliance with personal data protection laws. For any queries, access/correction requests, or feedback regarding your personal data, please contact:

LFA Pte. Ltd.

Attn: Data Protection Officer

Email: enquiry@lfa.com.sg

Address: 153 Neil Road, #01-01, Singapore S088881