NexDoor Privacy Policy
1. INTRODUCTION
1.1 This External Privacy Policy (“Policy”) sets out the basis upon which Nexdoor Pte Ltd (“Nexdoor”, “Company”, “we”, “us”, “our”) collects, uses, discloses and processes Personal Data in accordance with the Personal Data Protection Act 2012 (“PDPA”), the Estate Agents Act, regulations issued by the Council for Estate Agencies (“CEA”), and all other applicable laws and regulatory requirements in Singapore.
1.2 Nexdoor operates primarily through digital platforms and systems and is committed to ensuring that Personal Data is protected in compliance with statutory and regulatory obligations.
1.3 This Policy applies to all clients, prospective clients, customers, salespersons, employees, job applicants and any other individuals whose Personal Data is in the possession or under the control of Nexdoor.
2. DEFINITION OF PERSONAL DATA
2.1 “Personal Data” means data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which Nexdoor has or is likely to have access.
2.2 Personal Data may include, without limitation: name, NRIC/FIN/passport number (where required by law), contact details, property transaction details, financial information, employment information, mortgage details, CPF information, IP addresses and device data.
3. COLLECTION OF PERSONAL DATA
3.1 Nexdoor may collect Personal Data directly from you or through third parties including property developers, financial institutions, law firms, government agencies, referral partners and publicly available sources.
3.2 Where you provide Personal Data relating to a third party, you represent and warrant that you have obtained the necessary consent for such disclosure.
3.3 Nexdoor may also collect Personal Data through its websites, digital forms, cloud-based platforms and communication channels.
4. PURPOSES OF COLLECTION, USE AND DISCLOSURE
4.1 Nexdoor may collect, use and disclose Personal Data for purposes including but not limited to:
(a) Facilitating property sales, purchases, leasing and related transactions;
(b) Liaising with developers, financial institutions, conveyancing lawyers and government authorities;
(c) Fact-finding of potential clients’ real estate needs;
(d) Analyse website visitors;
(e) Sourcing for interested clients based on their budget goals and real estate preferences;
(f) Conducting due diligence, identity verification and anti-money laundering checks;
(g) Complying with obligations under the Estate Agents Act, CEA regulations and other applicable laws;
(h) Marketing property-related services (subject to consent and DNC compliance);
(i) Recruitment and internal administrative purposes;
(j) IT security, system administration and service improvement.
5. DISCLOSURE TO THIRD PARTIES
5.1 Without derogating from any of the above, Nexdoor may also disclose your personal data to the following third parties: (a) Partners (b) Developers (c) Co-brokers (d) Insurers (for group insurance purposes) (e) Regulators and law enforcement authorities (f) Government agencies (such as HDB, CPF, SLA etc) (g) Industry associations (such as CEA) (h) Lawyers (i) Auditors (j) Third-party service providers and consultants (k) Credit, debit, and charge card companies, banks, and other payment processors (l) Any agent acting on Nexdoor’s behalf in the provision of its services
5.2 Nexdoor may also disclose your personal data to the above parties in any of the following circumstances: (a) Where required by law (b) In connection with any legal proceedings, or prospective legal proceedings (c) To establish, exercise, or defend Nexdoor’s legal rights (d) To third parties providing services to Nexdoor or on its behalf (e) With your consent (f) For purposes of disaster recovery
6. CLOUD STORAGE AND OVERSEAS TRANSFER
6.1 Nexdoor may store and process Personal Data using reputable cloud service providers including but not limited to Google Workspace and Microsoft 365.
6.2 Where Personal Data is transferred outside Singapore, Nexdoor shall ensure that such transfer is in accordance with the PDPA and that comparable protection standards are maintained.
7. PROTECTION OF PERSONAL DATA
7.1 Nexdoor implements reasonable physical, administrative and technical security arrangements to safeguard Personal Data, including access controls, encryption technologies and cybersecurity safeguards.
7.2 While reasonable efforts are made, no method of transmission or storage is completely secure.
8. RETENTION OF PERSONAL DATA
8.1 Personal Data shall be retained only for as long as necessary for legal, regulatory, tax, audit and business purposes.
8.2 Nexoor may retain transaction-related documents in accordance with CEA record-keeping requirements.l
9. CONTACTING YOU
9.1 Where you have provided us with your Singapore telephone number(s) and such number(s) are registered on the Do Not Call (“DNC”) Registry, by submitting our contact, enquiry or registration forms, or by otherwise indicating your consent, you expressly and unambiguously consent to Nexdoor Pte Ltd contacting you using the communication details you have provided (including via voice calls, SMS, WhatsApp or other messaging applications) for the purposes stated in this Privacy Policy.
10. ACCESS AND CORRECTION OF PERSONAL DATA
10.1 In accordance with the Act, you have the right to: (a) check whether Nexdoor Pte Ltd holds any personal data relating to you and, if so, obtain copies of such data; and (b) request Nexdoor to correct any personal data relating to you that is inaccurate for the purpose for which it is being used.
10.2 Nexdoor reserves the right to charge a reasonable administrative fee to process requests under Paragraph 10.1(a). Once the fee is paid, your request will be processed within a reasonable time.
10.3 To verify the personal data you have submitted to Nexdoor or to check how your personal data is used, our security procedures may require proof of identity before any information is disclosed. Such proof may include your full name, contact number, and NRIC, Passport, or FIN number. Please keep these details secure, as you are responsible for any requests made using your personal information.
10.4 Nexdoor will respond to an access or correction request within 30 days from the date the request is received. If we are unable to respond within this period, Nexdoor will inform you in writing of the timeframe by which your request will be addressed.
11. DATA BREACH MANAGEMENT
11.1 In the event of a notifiable data breach, Nexdoor will conduct an assessment and notify the Personal Data Protection Commission and affected individuals where required under the PDPA.
11.2 Nexdoor will implement remedial actions to mitigate potential harm and prevent recurrence.
12. LIMITATION OF LIABILITY AND INDEMNITY
12.1 To the fullest extent permitted by law, Nexdoor shall not be liable for any indirect, incidental, consequential, special or punitive damages arising out of or in connection with the collection, use, disclosure or processing of Personal Data.
12.2 Nexdoor shall not be responsible for unauthorised access attributable to factors beyond its reasonable control, including but not limited to cyberattacks, system failures, telecommunications disruptions or acts of third parties.
12.3 Nothing in this Policy excludes liability which cannot be excluded under applicable law.
12.4 You agree to indemnify and hold harmless Nexdoor, its directors, officers and salespersons from and against any claims, losses, damages, liabilities, costs and expenses (including legal costs on a full indemnity basis) arising from:
(a) Any breach of this Policy by you;
(b) Any inaccurate or incomplete Personal Data provided by you;
(c) Any unauthorised disclosure of Personal Data by you.
13. GOVERNING LAW
13.1 This Policy is governed by and shall be construed in accordance with the laws of Singapore. You hereby submit to the non-exclusive jurisdiction of the Singapore courts.
14. MISCELLANEOUS
14.1 This Policy only applies to the collection and use of Personal Data by Nexdoor Pte Ltd. It does not cover third-party sites to which we provide links, even if such sites are co-branded with our logo. Nextdoor does not share your Personal Data with third-party websites. Nextdoor is not responsible for the privacy and conduct practices of these third-party websites, so you should read their own privacy policies before disclosure of any Personal Data to these websites.
15. CONTACTING THE DATA PROTECTION OFFICER
15.1 In accordance with the PDPA, Nexdoor has established internal procedures for receiving and responding to enquiries and complaints relating to Personal Data protection. Any consent you have provided to Nexdoor for the collection, use or disclosure of your Personal Data shall remain valid until such time as it is withdrawn in writing.
15.2 You may withdraw your consent at any time by submitting a written request to our Data Protection Officer. Upon receipt of your withdrawal request, Nexdoor will cease collecting, using or disclosing your Personal Data for the relevant purpose(s), unless such collection, use or disclosure is required or authorised under applicable law.
15.3 Please note that withdrawing consent may affect Nexdoor’s ability to continue providing services to you.
15.4 All requests, enquiries or complaints should be directed to: Data Protection Officer Nexdoor Pte Ltd
Email: admin@nexdoor.sg
16. AMENDMENTS
16.1 Nexdoor reserves the right to amend this Policy at any time to ensure continued legal and regulatory compliance.
16.2 The updated Policy shall be published with the revised effective date.1