Privacy Policy

1. Introduction

Copperleaf ("we", "us", "our") is committed to protecting the personal data of our residents, their families, website visitors, and prospective clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Data Protection Act 2012 ("PDPA") of Singapore.

This policy applies to all personal data collected through our website, contact forms, telephone enquiries, in-person interactions, and the provision of our care services. If you have any questions, please contact us at [email protected].

2. Data We Collect

We may collect the following personal data depending on the nature of your interaction with us: your name, email address, telephone number, residential address, details relevant to the care needs of the individual being referred (such as medical history and daily routines), next-of-kin information, and financial details necessary for billing and subsidy applications. Through our website, we may also collect technical information such as browser type, IP address, and pages visited via cookies and analytics tools.

3. How We Use Your Data

Your personal data is used to respond to enquiries and arrange visits, assess care needs and develop individualised care plans, deliver and administer our care services, process billing and financial arrangements, communicate with families about residents' care and wellbeing, comply with regulatory and licensing requirements (including those of the Ministry of Health), improve our website and services through anonymised analytics, and send relevant updates about our services where you have provided consent.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following bases: consent (obtained at the point of collection), contractual necessity (to fulfil our care service agreements), legal obligation (to comply with healthcare regulations and licensing requirements), and legitimate interest (to improve our services and ensure the safety and wellbeing of residents).

5. Data Sharing

We may share personal data with healthcare professionals and medical facilities involved in a resident's care, government agencies as required by law or for subsidy applications, our service providers (such as IT support and analytics platforms) under strict data processing agreements, and insurance providers where relevant to claims or coverage. We do not sell personal data to third parties.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data, including encryption of data in transit and at rest, access controls restricting data access to authorised personnel only, regular review of security practices and data handling procedures, secure storage of physical records, and staff training on data protection obligations under the PDPA.

7. Data Retention

We retain personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. Enquiry data is retained for up to 24 months after the last interaction. Resident care records are retained for a minimum of 6 years following the end of the care relationship, in accordance with healthcare regulatory requirements. Website analytics data is retained in anonymised form.

8. Cookies

Our website uses cookies to improve functionality and understand how visitors use the site. For full details on the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the PDPA, you have the right to request access to the personal data we hold about you, request correction of any inaccurate or incomplete data, withdraw consent for the collection or use of your data (subject to legal and contractual limitations), and request information about how your data has been used or disclosed in the past year. To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their policies independently.

11. Children's Data

Our services and website are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age without parental or guardian consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated through our website or by direct notification where appropriate.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Copperleaf — Data Protection Officer
Email: [email protected]
Address: 5 Sengkang East Way, Singapore 548959
Phone: +65 6218 4793

You may also lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your data protection rights have been affected.