General Privacy Statement
Elarisca values client confidentiality and handles personal data in accordance with applicable Singapore data protection standards. This policy explains the categories of data we process, the purposes for processing, the legal bases relied upon, and your rights with respect to your personal information. Our approach is practical: we collect only what is necessary to provide legal services related to apartment purchases and implement administrative, technical and physical safeguards to protect that information.
Key Definitions
The following definitions are used in this policy to clarify terms related to personal data and processing activities undertaken by Elarisca in connection with legal services for apartment transactions.
Data We Collect
We collect data necessary to establish and perform our legal services, to comply with regulatory obligations and to maintain a secure client relationship. The categories below outline typical information we may request or receive.
Data You Provide Directly
When you engage our services or contact us, we collect information you provide to enable representation and communication.
- Identity details: full name, nationality, government-issued identification numbers where required for verification.
- Contact information: postal address, email address and telephone numbers to manage case correspondence and scheduling.
- Property transaction documents: sale and purchase agreements, title deeds, mortgage paperwork, valuation reports and related records.
- Business information: bank account details for payment instructions and supporting documents required by lenders during mortgage processes.
- Correspondence and instructions: written or recorded instructions, emails and notes relevant to the legal services provided.
- KYC and regulatory compliance information: proof of identity, proof of address and any additional documentation needed to satisfy local anti-funds laundering procedures.
Automatically Collected Data
When you use our website or communicate electronically, we may automatically collect technical information to manage services and protect against misuse.
- Technical device data: browser type, operating system, IP address and device identifiers used to maintain secure access.
- Usage data: pages visited, time on site and referral sources to help improve site navigation and content relevance.
- Cookie identifiers where cookies are enabled to provide session functionality and user preference retention.
- Server logs and security event records used to detect and respond to unauthorized access attempts.
- Anonymous analytics aggregates that inform site performance without identifying individual users.
- Location approximation derived from IP address only when necessary for security or legal compliance purposes.
Data from Third Parties
We may receive data about you from third parties when necessary to perform legal services or comply with regulatory obligations.
- Information from title search providers, land registries and public records to verify property ownership and encumbrances.
- Verification data from banks, lenders and conveyancing partners required for mortgage and security documentation.
- Information obtained from government agencies or courts as part of compliance checks or due diligence.
How We Use Your Data
We process personal data for specific, limited purposes that are necessary to provide legal services and meet legal obligations. Processing is limited to what is proportionate for these aims.
- To provide and manage legal services related to apartment purchase transactions, including drafting and negotiating contracts, completing transfers and post-completion filings.
- To verify identity and perform anti-funds laundering and counter-terrorist funding checks as required by Singapore law.
- To communicate with clients, counterparties and service providers about case progress, meetings and document requirements.
- To process payments, issue invoices and maintain business records necessary for professional services and tax compliance.
- To defend or establish legal rights in disputes or regulatory matters related to a specific transaction.
- To maintain internal records, manage professional obligations and provide high-quality client service, including feedback collection and service improvement.
- To protect network and information security, detect fraud and respond to security incidents affecting client data.
- To meet reporting and regulatory requirements imposed by relevant authorities in Singapore when processing client matters.
Legal Bases for Processing
We rely on appropriate legal grounds when processing personal data. This ensures processing is lawful and proportionate to the purpose.
- Performance of a contract: processing necessary to provide legal services you have requested or to complete a property transaction.
- Legal compliance: processing required to meet statutory or regulatory obligations, including anti-funds laundering checks.
- Legitimate interests: processing related to preventing fraud, protecting confidential information and maintaining business operations where those interests are balanced against individual rights.
- Consent: where specific, optional activities (such as certain marketing communications) require your explicit agreement, we will process data only if consent is given.
Rights and Data Protection Principles
Although our operations are based in Singapore, we recognise international privacy standards. The following outlines rights typically available to data subjects under global privacy frameworks.
- Right of access: you may request confirmation of whether we process your personal data and request a copy of relevant records.
- Right to rectification: you may request correction of inaccurate or incomplete personal data held by us.
- Right to erasure: in certain circumstances you may request deletion of personal data, subject to legal or contractual retention requirements.
- Right to restrict processing: you may request limits on how we process your data in specific scenarios.
- Right to data portability: where applicable, you may request a structured, commonly used and machine-readable copy of personal data provided by you.
- Right to object: you may object to processing based on legitimate interests or for direct marketing where such rights apply under relevant law.
When We Share Data
We share personal data only when necessary for the purposes described, with appropriate safeguards and where permitted by law or where required to fulfil a transaction.
- With counterpart legal counsel, conveyancers and notaries to facilitate a property transaction and completion process.
- With banks, lenders and mortgage administrators for funding arrangements and security documents.
- With governmental bodies and land registries when disclosing data to satisfy statutory registration and compliance requirements.
- With service providers engaged to perform functions on our behalf, such as document storage, secure communications and payment processing, under contractual confidentiality and security obligations.
- With professional advisers, auditors and insurers where disclosure is necessary for regulatory reporting or risk management.
- We do not sell personal data to third parties or use client data for unrelated commercial purposes.
International Data Transfers
Some processing may involve transferring data to service providers or counterparties located outside Singapore. Where transfers occur, we implement contractual safeguards and assess recipient jurisdictions to ensure an appropriate level of protection.
Safeguards include contractual data processing agreements, reliance on recognised transfer mechanisms where applicable and assessments of third-party security practices prior to engagement.
Data Retention
We retain personal data only for as long as needed to provide services, comply with legal obligations or to resolve disputes. Retention periods are determined by the nature of the documents and applicable professional or statutory requirements.
Client files, including correspondence and transaction records, are retained in accordance with regulatory and professional guidelines and securely archived for a defined period following file closure.
Communications and case-specific notes are retained for case management and to meet legal or evidential obligations; unnecessary data is routinely purged in accordance with retention schedules.
System logs and access records used for security monitoring are retained for a limited period necessary for incident detection, analysis and regulatory compliance, after which they are securely deleted.
Elarisca retains personal data only as long as necessary for the purposes described in this policy and to comply with statutory obligations related to property transactions in Singapore. For active matter files we typically retain records for the duration of the conveyancing process and for a period thereafter determined by regulatory and professional recordkeeping requirements, which may extend up to several years. When retention is no longer required, records are securely deleted or anonymised. If you request deletion of your personal data, Elarisca will assess the request in light of legal, regulatory and legitimate business grounds for retention and will securely remove or anonymise data where there are no overriding lawful grounds to retain it. To request deletion, please contact our Data Protection Officer via the contact details below and include sufficient information to identify the records you wish to remove.
Data Security and Protection
We apply administrative, technical and physical safeguards to protect personal data associated with apartment purchase transactions. Our approach aligns with industry best practice for legal and conveyancing services in Singapore, balancing accessibility for casework with controls to prevent unauthorised access, disclosure or loss. Regular reviews of security procedures are conducted to adapt to evolving risks and to maintain the confidentiality and integrity of client information.
- Encryption of data in transit (TLS) and at rest on managed servers
- Role-based access controls, least-privilege principles and multi-factor authentication for authorised staff
- Periodic vulnerability assessments, secure backups and mandatory staff training on data handling and confidentiality
Your Rights
Under applicable Singapore data protection rules, individuals have rights regarding their personal data held by Elarisca. We aim to make it straightforward for you to exercise these rights while ensuring that legal and regulatory duties relevant to property transactions are observed.
- Right of access: request confirmation of whether we process your personal data and obtain a copy of it
- Right of rectification: request correction of inaccurate or incomplete personal data
- Right of erasure: request deletion of personal data where retention is not required by law or legitimate business need
- Right to restrict processing: request limitations on how we use your personal data in certain circumstances
- Right to data portability: obtain and reuse certain personal data provided to us in a structured, commonly used and machine-readable format
- Right to object: object to processing for direct marketing or on grounds relating to your particular situation
- Withdrawal of consent: where processing is based on consent, you can withdraw that consent going forward
- Right to lodge a complaint with the Personal Data Protection Commission of Singapore if you consider your rights have been breached
How to Make a Rights Request
To exercise any of your data protection rights, submit a written request to Elarisca via mail to our office at Punggol Central, Singapore, 82 or by using the contact form on our website at https://pulasca.pro/contact. Include your name, the nature of your request, and any supporting details to help us locate the relevant records. For identity verification and security we may ask for additional information before fulfilling requests.
We aim to acknowledge receipt of rights requests promptly and will respond substantively within 30 days of a valid request. Where matters are complex or require third-party inputs, we will inform you if we need additional time and explain the reason for any extension.
Marketing Communications
Elarisca uses contact information provided by clients to send relevant service updates, regulatory notices and information about related legal services for apartment purchase transactions. Marketing communications are sent only where there is a lawful basis to do so, and recipients always have the option to opt out.
To stop receiving marketing communications, follow the unsubscribe link in any marketing message, visit https://pulasca.pro/unsubscribe or contact us at Punggol Central, Singapore, 82 with the subject line 'Unsubscribe'. We will process unsubscribe requests without undue delay.
Children and Minors
Our legal services and the Elarisca website are intended for use by adults engaging in property transactions. We do not knowingly collect personal data from minors for conveyancing services. If we learn that we have collected personal information from a person under 18 without appropriate consent, we will take steps to delete the information unless retention is required by law.
Third-party Links and Services
The Elarisca website may contain links to external sites and services that are outside our control. We are not responsible for the privacy practices or content of third-party websites. Before providing personal data to any external partner, review their privacy policies and ensure you are comfortable with their data handling practices.
Policy Updates
Elarisca may update this privacy policy to reflect changes in legal requirements, business practices, or service offerings. Material changes will be communicated via the website at pulasca.pro and the updated policy will indicate the effective date. Continued use of our services after a policy update indicates acceptance of the revised terms.