Privacy Policy

Last Updated: October 2025

Introduction

Comfort Zone is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our boarding house accommodation services or visit our website.

By using our services or providing us with your personal information, you agree to the practices described in this policy. We comply with Singapore's Personal Data Protection Act (PDPA) and maintain appropriate measures to protect your information.

1. Information We Collect

Personal Data

We collect the following types of personal information:

  • Contact Information: name, email address, phone number, mailing address
  • Identification: passport or national identification numbers (for lease agreements)
  • Financial Information: payment details, bank account information (for rent payments)
  • Emergency Contacts: names and contact information of designated emergency contacts
  • Communication Data: messages sent through our contact forms or email correspondence

Usage Data

When you visit our website, we automatically collect:

  • IP address and browser type
  • Pages visited and time spent on pages
  • Device information and operating system
  • Referring website addresses

2. How We Collect Information

We collect personal data through:

  • Direct Interactions: When you fill out contact forms, make inquiries, or sign rental agreements
  • Automated Technologies: Through cookies and similar tracking technologies on our website
  • Third Parties: From property agents or references you provide during application processes
  • Public Sources: From publicly accessible databases for identity verification purposes

3. How We Use Your Information

We use your personal data for the following purposes:

Service Delivery

  • Processing accommodation applications and rental agreements
  • Managing property access and security systems
  • Coordinating maintenance requests and property services
  • Processing rent payments and managing accounts

Communication

  • Responding to inquiries and providing customer support
  • Sending important updates about your accommodation
  • Notifying you of changes to policies or services
  • Marketing communications (only with your consent)

Legal Compliance

  • Meeting regulatory and legal requirements
  • Maintaining financial records as required by law
  • Responding to legal processes and government requests

4. Legal Basis for Processing

We process your personal data based on:

  • Consent: You have given clear consent for us to process your personal data for specific purposes, such as marketing communications
  • Contract: Processing is necessary for the performance of our rental agreement with you
  • Legitimate Interest: Processing is necessary for our legitimate business operations, such as property management and service improvement
  • Legal Obligation: Processing is necessary to comply with Singapore laws and regulations

5. Data Retention

We retain your personal data for different periods depending on the purpose:

  • Contact Form Submissions: 3 years from date of inquiry
  • Rental Agreements: 5 years after termination of tenancy
  • Financial Records: 7 years as required by Singapore tax law
  • Marketing Data: Until you withdraw consent or request deletion
  • Website Usage Data: Typically 12-24 months

After retention periods expire, we securely delete or anonymize personal data unless longer retention is required by law.

6. Data Protection Measures

We implement appropriate technical and organizational security measures:

Security Measures

  • Encryption of sensitive data during transmission and storage
  • Secure servers protected by firewalls and access controls
  • Regular security audits and vulnerability assessments
  • Employee training on data protection practices
  • Restricted access to personal data on a need-to-know basis

Breach Notification

In the event of a data breach that may result in high risk to your rights, we will notify affected individuals and the Personal Data Protection Commission within 72 hours of becoming aware of the breach.

7. Data Sharing and Disclosure

We may share your personal data with:

Service Providers

  • Property maintenance and repair contractors
  • Payment processing services
  • Background check and verification services
  • IT service providers and hosting companies

Legal Requirements

We may disclose your information when required by:

  • Court orders or legal processes
  • Government agencies or regulatory authorities
  • Law enforcement for investigation purposes

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

8. Your Rights

Under Singapore's Personal Data Protection Act, you have the following rights:

  • Right to Access: Request copies of your personal data we hold
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
  • Right to Data Portability: Receive your personal data in a structured, commonly used format
  • Right to Object: Object to processing of your personal data for certain purposes
  • Right to Withdraw Consent: Withdraw consent for marketing communications or other consent-based processing
  • Right to Lodge a Complaint: File a complaint with the Personal Data Protection Commission if you believe your rights have been violated

To exercise any of these rights, please contact us at: [email protected]

9. Cookies and Tracking

Our website uses cookies and similar technologies. We use:

  • Essential Cookies: Necessary for website functionality (always active)
  • Analytics Cookies: Help us understand how visitors use our site
  • Marketing Cookies: Track visitors across websites for advertising purposes
  • Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through our Cookie Policy page or your browser settings.

10. Third-Party Services

Our website may contain links to third-party websites or use third-party services:

  • Payment processors (for secure rent payments)
  • Google Analytics (for website analytics)
  • Social media platforms (for sharing content)

These third parties have their own privacy policies. We are not responsible for their privacy practices and recommend reviewing their policies before providing them with your information.

11. International Data Transfers

We primarily store and process data within Singapore. If data is transferred internationally, we ensure:

  • The receiving country has adequate data protection laws
  • Appropriate safeguards are in place through contractual agreements
  • Transfers comply with PDPA requirements

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

  • Post the updated policy on our website with a revised "Last Updated" date
  • Notify you of material changes via email or prominent website notice
  • Obtain your consent for changes that require it under applicable law

Continued use of our services after policy updates constitutes acceptance of the revised policy.

13. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

Comfort Zone

41 Serangoon Road, Singapore 218044

Phone: +65 6892 4173

Privacy Email: [email protected]

We aim to respond to all inquiries within 30 days.