PDPA Compliance Statement
Last Updated: December 25, 2025
LivedWith.com is committed to protecting your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA) and its amendments.
Our PDPA Commitment
As a Singapore-based digital news platform, we take our data protection responsibilities seriously. This page outlines our compliance measures and your rights under the PDPA.
1. Data Protection Officer (DPO)
As mandated by the PDPA, we have appointed a Data Protection Officer responsible for overseeing all data protection matters:
Data Protection Officer: Andrew Lim
Email: [email protected]
Response Time: Within 7 business days
Address: Singapore
Our DPO is responsible for:
- Ensuring PDPA compliance across all operations
- Handling data subject requests
- Managing data protection policies
- Serving as primary contact with Personal Data Protection Commission (PDPC)
- Investigating data breaches and complaints
2. PDPA Obligations We Follow
2.1 Consent Obligation
We obtain your consent before collecting, using, or disclosing your personal data. Consent is:
- Clear and specific – We explain what data we collect and why
- Informed – You understand how your data will be used
- Voluntary – You can choose whether to provide data
- Withdrawable – You can withdraw consent anytime
How we obtain consent:
- Opt-in checkboxes on forms
- Email subscription confirmations
- WhatsApp opt-in for alerts
- Cookie consent banners
2.2 Purpose Limitation
We collect personal data only for specific, legitimate purposes disclosed to you:
- Newsletter subscriptions
- Property agent referrals
- Contact inquiries
- Website analytics
- Marketing communications (with consent)
We do not use your data for undisclosed purposes without obtaining fresh consent.
2.3 Notification Obligation
Before collecting personal data, we inform you of:
- What data we’re collecting
- Why we need it
- How we’ll use it
- Who we might share it with
- How long we’ll keep it
This information is provided via our Privacy Policy, forms, and consent notices.
2.4 Access & Correction
- Access: Request what personal data we hold about you
- Correct: Request correction of inaccurate or incomplete data
To request access or correction: Email [email protected] with your request. We will respond within 30 days.
2.5 Accuracy Obligation
We take reasonable steps to ensure personal data is accurate and complete, especially if used for decisions affecting you.
2.6 Protection Obligation
We implement appropriate security measures to protect your data:
- SSL/HTTPS encryption
- Secure data storage
- Access controls (need-to-know basis)
- Regular security audits
- Staff training on data protection
2.7 Retention Limitation
We retain personal data only as long as necessary for the purpose collected or as required by law:
- Newsletter subscribers: Until unsubscribe
- Lead inquiries: 24 months
- Analytics: 26 months
- Legal records: As required
After retention periods, we securely delete or anonymize data.
2.8 Transfer Limitation
We do not transfer personal data outside Singapore except:
- To service providers with adequate protection (e.g., Google Analytics, email services)
- With your consent
- As required by law
2.9 Accountability
We are accountable for data in our possession or control, including data processed by third parties on our behalf. We:
- Maintain data processing records
- Conduct regular compliance audits
- Train staff on PDPA obligations
- Review third-party data processors
3. Data Breach Management
In the unlikely event of a data breach:
3.1 Assessment (Within 72 Hours)
We assess whether the breach meets PDPA notification thresholds:
- Results in, or is likely to result in, significant harm
- Involves significant scale
3.2 PDPC Notification (As Soon As Practicable)
If threshold is met, we notify the Personal Data Protection Commission within 72 hours of assessment.
3.3 Individual Notification
We notify affected individuals if the breach poses significant harm, providing:
- Nature of the breach
- Personal data affected
- Steps we’re taking
- Recommended actions for individuals
3.4 To Report a Data Breach
If you suspect a data breach: [email protected]
4. Your Rights Under PDPA
4.1 Right to Access
Request a copy of personal data we hold about you.
How: Email [email protected]
Response Time: Within 30 days
Fee: None (unless excessive requests)
4.2 Right to Correct
Request correction of inaccurate or incomplete data.
How: Email [email protected] with details
Response Time: Within 30 days
4.3 Right to Withdraw Consent
Withdraw consent for data processing anytime.
How:
- Click “unsubscribe” in emails
- Email [email protected]
- Adjust cookie settings in your browser
Effect: We will stop processing your data (may limit services)
4.4 Right to Data Portability
Request your data in a structured, machine-readable format.
How: Email [email protected]
Format: CSV, JSON, or PDF
5. How to Exercise Your Rights
Email: [email protected]
Subject Line: “PDPA Request – [Access/Correction/Withdrawal]”
Include:
- Your full name
- Contact information
- Specific request details
- Proof of identity (if required for security)
Response Timeline: Within 30 days of receiving your request
6. Third-Party Data Processors
We work with trusted third parties who process data on our behalf:
- Google Analytics: Website analytics (Google LLC)
- Email Service: Newsletter delivery (e.g., Mailchimp)
- WhatsApp Business: Messaging (Meta Platforms)
- Hosting Provider: Website hosting
All third parties are contractually required to protect your data and use it only for specified purposes.
7. Cookies & Tracking
We use cookies in compliance with PDPA requirements:
- Cookie Consent Banner: Displayed on first visit
- Cookie Categories: Necessary, Analytics, Preferences, Marketing
- User Control: You can accept, reject, or customize cookie preferences
- Cookie Policy: Full details in our Privacy Policy
8. Children’s Data
We do not knowingly collect personal data from individuals under 18. If we discover we have inadvertently collected such data, we will delete it promptly.
To report: [email protected]
9. Complaints Process
If you believe we’ve mishandled your personal data:
Step 1: Contact Our DPO
Email: [email protected]
We will investigate and respond within 30 days.
Step 2: Escalate to PDPC
If unsatisfied with our response, you may lodge a complaint with:
Personal Data Protection Commission (PDPC)
10 Pasir Panjang Road
#03-01 Mapletree Business City
Singapore 117438
Website: pdpc.gov.sg
Enquiry Hotline: 1800-275-7372 (Mon-Fri, 9am-6pm)
10. Regular PDPA Compliance Reviews
We conduct regular reviews to ensure ongoing compliance:
- Quarterly: Internal data protection audits
- Annually: Comprehensive PDPA compliance review
- Ongoing: Staff training and policy updates
Last Compliance Review: December 2025
Next Scheduled Review: March 2026
11. Updates to This Statement
We may update this PDPA Compliance Statement to reflect:
- Changes in PDPA regulations
- New data processing activities
- Improvements in our practices
Updates will be posted with a revised “Last Updated” date.
12. Contact Our Data Protection Officer
For any PDPA-related questions, complaints, or requests:
Data Protection Officer: Andrew Lim
Email: [email protected]
Website: livedwith.com/contact/
Address: Singapore
Office Hours: Monday – Friday, 9:00 AM – 6:00 PM SGT
Response Time: Within 7 business days
13. Useful PDPA Resources
- PDPC Website: pdpc.gov.sg
- PDPA Overview: PDPC Overview
- File a Complaint: PDPC Complaints
- PDPA Guidelines: PDPC Guidelines
Effective Date: December 25, 2025
