Privacy Policy
Last updated 5 February 2026
This Privacy Policy was last updated on 5 February 2026. It explains how personal data is collected, used, disclosed, stored, and protected when you visit this website, submit an enquiry, request a consultation, download materials, or otherwise interact with us. By using this website or providing information to us, you agree to the practices described in this Privacy Policy, as well as any related notices shown to you at the point of collection.
We operate under the Alvin Choo brand and may reference the Alvin Choo Sales Group and affiliated representatives. Where estate agency work is carried out, it is performed in accordance with applicable Singapore requirements, including the Personal Data Protection Act and relevant sector guidance.
In this Privacy Policy, “personal data” generally refers to data about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access. Personal data may be collected directly from you, from your communications with us, from forms you submit, and from technical data generated when you use this website.
The types of personal data we may collect include your name, contact details such as mobile number and email address, preferred communication channel, and details you voluntarily provide about your property needs and timeline, such as preferred location, budget range, property type, intended use, and other decision factors. If you request a valuation, review, or consultation, we may also collect information you provide about a property, such as address, size, photos, documents you choose to share, and context needed to respond meaningfully to your request. If you proceed into a formal engagement where identity must be verified with a high degree of accuracy, we may need to collect certain identifiers only where required by law or where it is necessary for that high-fidelity verification, and we avoid collecting or retaining such identifiers unless justified.
We also collect certain technical data when you browse this website. This may include device and browser information, IP address, general location signals, pages visited, time spent on pages, referral sources, and interactions with forms and buttons. Depending on context, some technical identifiers may be considered personal data.
We may use cookies and similar technologies to keep the website functional, support performance and security, remember preferences, and understand how visitors use the site so we can improve clarity and usability. Where cookies are used in ways that involve personal data, we apply appropriate PDPA-consistent consent and notice practices. You can manage cookies through your browser settings, and you should note that disabling certain cookies may affect website features.
We collect, use, and disclose personal data for purposes a reasonable person would consider appropriate in the circumstances and that you would reasonably expect when interacting with a real estate advisory website. These purposes commonly include responding to enquiries, arranging consultations and viewings, providing requested insights and updates, preparing information relevant to your stated needs, and communicating with you in the channel you provided. We may also use personal data to improve our internal workflows, protect the website from abuse or fraud, and meet regulatory or legal requirements where applicable.
Where required, we obtain your consent before collecting, using, or disclosing your personal data, and we also support withdrawal of consent with reasonable notice. If you withdraw consent, we will inform you of the likely consequences, such as being unable to respond to a request that depends on that data, and we will stop collecting, using, or disclosing the relevant personal data unless an exception under applicable law applies.
If we send marketing messages to a Singapore telephone number, we take reasonable steps to comply with the Do Not Call provisions, including the requirement to avoid sending specified marketing messages to numbers registered on the Do Not Call Registry unless an applicable exception or valid consent applies. You can also ask us at any time to stop sending marketing communications through a particular channel.
We do not use NRIC numbers as passwords or as an authentication method to access services or accounts. Where any authentication is involved, we aim to use safer, non-NRIC-based methods in line with PDPC guidance, and where applicable, we align with the expectation that private organisations phase out the use of NRIC numbers for authentication by 31 December 2026.
We may disclose personal data to service providers who support website hosting, analytics, form processing, communications, and customer relationship management, but only to the extent necessary for them to perform services on our behalf. We may also disclose personal data where required to comply with legal obligations, regulatory requests, or lawful processes, and where necessary to protect rights, safety, and security. We do not sell personal data as a business model.
Some service providers may process or store data outside Singapore. When personal data is transferred outside Singapore, we take reasonable steps to ensure that the recipient provides a standard of protection comparable to that under the PDPA, using appropriate safeguards consistent with the Transfer Limitation Obligation.
We take reasonable security arrangements to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. Security measures may include access controls, encryption where appropriate, credential management, and vendor controls. No method of transmission or storage is completely secure, but we aim to reduce risk through disciplined security practices and continuous improvement.
We retain personal data only for as long as it is needed to fulfil the purposes for which it was collected, or for legal or business purposes, and we stop retaining it or remove the means by which the data can be associated with particular individuals when it is reasonable to assume those purposes are no longer served.
If a data breach occurs, we will assess it promptly and take reasonable steps to contain and remediate it. Where a breach is assessed to be notifiable under PDPA requirements, we will notify the PDPC as soon as practicable and within the required timeframe, and we will notify affected individuals as soon as practicable where required.
You may request access to personal data we hold about you and information about how it was used or disclosed within the relevant period, and you may request correction of inaccuracies. We may need to verify your identity before fulfilling such requests, and there may be lawful exceptions where access is not required or where disclosure is not permitted.
This website is intended for individuals who can make informed enquiries about real estate advisory services. If you are providing personal data relating to another individual, you confirm you have the authority to do so and that the individual has been informed of this Privacy Policy where appropriate.
We may update this Privacy Policy from time to time by posting an updated version on this website. The updated version will apply from the date it is posted.
If you have questions about this Privacy Policy, or if you want to make a request to access, correct, or withdraw consent relating to your personal data, please contact us using the contact form on this website or the published contact details on the website. We will respond within a reasonable time and work with you in good faith to address your request.
