Who this policy covers
Century 99 Pte Ltd (UEN 199204425N) is responsible for personal data in its possession or under its control. This policy explains how we handle personal data in connection with this website and related enquiries under Singapore’s Personal Data Protection Act 2012 (PDPA).
If an enquiry becomes a valuation or another professional instruction, the engagement terms and any additional privacy notices will explain the relevant work and information requirements. This website policy does not replace those terms.
Personal data we may collect
- Enquiry information: your name, company, email address, optional telephone number, requested service and the details you choose to include, such as a property address.
- Correspondence and instruction records: messages you send us, our replies and information needed to discuss or carry out an agreed instruction.
- Technical information: IP addresses, browser and device information, request details and security logs processed by our website hosting provider, Cloudflare.
- Optional analytics information: page visits and website interactions processed through Google Analytics when you allow analytics.
Please provide only what is needed. Do not include NRIC or passport numbers, bank statements or confidential attachments in the initial website enquiry. If you supply another person’s personal data, ensure you have the authority to do so and inform them of the relevant purpose.
How the website enquiry form works
The form prepares your message locally in your browser. Selecting “Prepare message” does not submit the enquiry to our website server or automatically deliver it to Century 99. Select WhatsApp or email, review the prepared message and send it in that application. Your email provider or WhatsApp may process the information when the message is opened or sent.
The website does not save your enquiry fields in its own browser storage. Once you send a message, it may be retained in the relevant correspondence systems. WhatsApp, your email provider and other service providers apply their own privacy terms to their services.
Why we collect, use or disclose personal data
We handle personal data for purposes that are reasonable and relevant to your enquiry or instruction, including:
- Responding to questions, providing quotations and clarifying your requirements.
- Arranging access and inspections, communicating with authorised contacts and carrying out an agreed valuation or related service.
- Managing the business relationship, records, billing and any dispute or complaint.
- Operating, securing and maintaining the website and, if you consent, understanding how it is used.
- Meeting applicable legal, regulatory and professional obligations.
We will notify you of a new purpose and seek consent where required before using your personal data for it. Submitting an enquiry is not a general consent to unrelated marketing.
Consent and withdrawal
Where consent is required, we collect, use or disclose personal data with your consent. The PDPA also permits certain processing without consent in specified circumstances; where applicable, those provisions and their safeguards apply.
You may withdraw consent by giving reasonable notice to [email protected]. Specify the processing or communication concerned. We will explain the likely consequences, which may include being unable to respond to an enquiry or continue a requested service, and stop the relevant processing unless continued processing is required or authorised by law. Withdrawal does not automatically require deletion of records that we must or may lawfully retain.
Cookies and optional Google Analytics
Google Tag Manager loads only after you select “Allow” in the analytics notice. It delivers the configured Google Analytics tags for measuring visits and interactions, such as contact-link clicks. We do not send enquiry names, email addresses, telephone numbers, property addresses or message text as analytics event data.
Your choice is stored in browser local storage under c99-analytics. If you allow analytics, Google may set cookies such as _ga and _ga_*. You may decline analytics and still use the site and enquiry form.
Use to change your choice. Withdrawing analytics consent stops future loading of the Google container and attempts to clear the site’s Google Analytics cookies. It does not automatically remove information already lawfully processed by a provider. You can also manage cookies through your browser.
Transfers outside Singapore
Cloudflare, Google, WhatsApp and email or support providers may process information outside Singapore. Where we transfer personal data overseas, we are required to meet the PDPA’s Transfer Limitation Obligation, including ensuring a standard of protection comparable to that required under the PDPA, unless a permitted exception applies. Depending on the transfer, appropriate contractual or other legally recognised safeguards may be required.
Protection, accuracy and retention
We are required to make reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure and similar risks. This website uses HTTPS. No internet transmission or storage system can be guaranteed completely secure.
We take reasonable steps to ensure personal data is accurate and complete where it is likely to be used to make a decision affecting you or disclosed to another organisation. Please tell us if relevant details change.
We retain personal data only while it serves a legal or business purpose, such as handling an enquiry, performing an instruction, meeting record-keeping obligations or resolving a dispute. When retention is no longer necessary, the data should be securely disposed of or the means of associating it with an individual removed. There is no single retention period for every type of record.
Access and correction requests
Subject to applicable PDPA exceptions, you may request access to personal data about you in our possession or under our control, and information about how it was used or disclosed during the year before your request. You may also request correction of errors or omissions.
Send a written request to [email protected], with enough detail to identify the relevant records or correction. We may need to verify your identity or authority before disclosing information, and may clarify the scope with you. Do not send identity documents unless requested through an appropriate channel.
We will respond as soon as reasonably possible. If we cannot respond within 30 days after receiving the request, we will inform you in writing within that period of when we can respond. Where permitted, a reasonable fee may apply to an access request; we will give a written estimate before proceeding. Requests remain subject to the statutory exceptions and safeguards, including protection of other people’s personal data.
Personal data breaches
Where a suspected breach concerns personal data in our possession or under our control, we will assess the incident and take appropriate steps to contain it and address the risks. If it is assessed as notifiable under the PDPA, we will notify the Personal Data Protection Commission (PDPC) as soon as practicable and no later than three calendar days after the day of that assessment.
Where required, affected individuals will be notified as soon as practicable, at the same time as or after the PDPC notification. Whether notification is required depends on the statutory criteria, including significant harm or significant scale, and any applicable exceptions.
Data protection enquiries and complaints
For the attention of our Data Protection Officer, send privacy enquiries, access or correction requests, consent withdrawals and complaints to:
Century 99 Pte Ltd
Email: [email protected]
Telephone / WhatsApp: +65 9116 8232
Address: 20 Upper Circular Road, #04-03A The Riverwalk, Singapore 058416
Business hours: Monday to Friday, 09:00–18:00, excluding public holidays.
Use the subject “PDPA enquiry” and describe the matter, the relevant interaction and your preferred contact method. We will review the concern and respond. If it remains unresolved, you may contact the PDPC about the available complaint or review process.
Changes and official guidance
This policy was last updated on . Material changes will be reflected on this page. A revised policy does not by itself provide consent for a new use of personal data where consent is required.
For the underlying requirements, see the Personal Data Protection Act 2012, the Personal Data Protection Regulations 2021, and the PDPC’s overview of the PDPA.