PRIVACY & YOUR DATA

PropertyWeezdom
Privacy Notice

Version 2026-09-08-registration-short

1. Who is responsible

PropertyWeezdom is responsible for personal information collected through the Future-Proof Test. weezdom+privacy@gmail.com is our contact for questions, requests and consent withdrawal.

2. Registration and calculator access

Before calculator access, we collect your first name, email address and WhatsApp number, required service consent and optional marketing consent. This creates a contact record even if you do not finish an assessment. Contact details are self-declared and are not verified by email or SMS in this version.

We use a necessary, HttpOnly session cookie lasting up to 24 hours. The server stores a hash of its random token and checks it before granting access or accepting an assessment. Forwarding a page URL does not forward this cookie. Another person using the same registered browser may retain access; use “Not you? Start again” on a shared device. No contact details or access tokens are placed in the shared URL.

The calculator processes the income, loan, debt and household figures you enter in your browser to show a scenario. These detailed financial inputs are not sent to our lead database or webhook, stored in browser storage, or included in page URLs. Reloading or leaving the page clears the calculator's in-memory state.

If lead collection is enabled and you choose to submit, we collect your first name, email, WhatsApp number, submission time, consent choices and notice version. We also save a limited summary: projection years, property type, result category, current and future Planning TDSR, future TDSR headroom and source campaign. These ratios can reveal information about your financial position. We do not ask for NRIC, bank-account details or identity documents.

The hosting provider may process technical information such as IP address, request time and security logs to deliver and protect the website. Cloudflare provides the hosting and database. Application request logging is disabled; Cloudflare may retain operational and security information under its own policies.

3. Why we use it and our legal bases

We ask for your consent to save your contact details and summary, provide your assessment and respond about it. You may decline by not submitting; in the live registration-gated experience the calculator is unavailable without this required consent. We do not use this assessment consent for unrelated marketing.

A separate, optional and initially unchecked choice asks whether you want property updates by email and WhatsApp. Refusing marketing does not affect access to an assessment. Where GDPR applies, these activities rely on consent. Necessary security processing may rely on legitimate interests in keeping this service available and secure, subject to your rights. Processing required by applicable law relies on that legal obligation.

4. Who may receive your data

Access is limited to authorised PropertyWeezdom personnel and service providers needed to operate the assessment. This website uses Cloudflare Workers for hosting and Cloudflare D1 for database storage. Website registrations and assessment summaries are not currently sent to Google Sheets or Manychat. If you arrive through Manychat on Instagram or Facebook, those services separately process your interactions on their platforms. We do not sell lead data.

5. Overseas processing

Hosting and integration providers may process information outside Singapore or the country where you live. Cloudflare operates internationally. Its data-processing terms describe its contractual safeguards and subprocessors. You can contact us for information about overseas processing and protection of your information.

6. How long information is kept

The retention period for registrations and assessment leads is 365 days from submission. Expired database records are removed by daily cleanup and on subsequent submissions. Provider backups follow their own deletion cycles. Where you begin a separate client relationship, we will explain its retention terms separately. Marketing consent does not extend the assessment database's retention period.

A minimum suppression record may need to be retained to honour an opt-out. Applicable legal requirements or disputes can justify keeping specific records longer; access should be restricted to that purpose.

7. Your choices and rights

You can withdraw consent at any time using the privacy contact above. Withdrawal does not affect the lawfulness of processing before it is withdrawn. We will stop the relevant consent-based use and remove data unless there is another lawful reason to retain it. Marketing messages must include a practical unsubscribe method.

Depending on the applicable law and circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. We may ask for proportionate verification to protect your data. Where GDPR applies, we normally respond within one month; a permitted extension and its reasons will be explained. Singapore PDPA rights and response requirements apply where relevant.

You may raise a concern with Singapore's Personal Data Protection Commission, or, where GDPR applies, the supervisory authority in your place of habitual residence, work or the alleged infringement.

8. Automated calculations

The tool uses your assumptions to calculate ratios and assign a green, amber or red planning category. It does not make a loan approval or any decision with legal or similarly significant effects. You can change the assumptions and seek a human review. The formula and category criteria are explained on the calculator page.

9. Cookies, security and children

This calculator does not add advertising trackers or analytics cookies. The hosting platform may use necessary access or security mechanisms. We use HTTPS and restrict access to lead storage; no system can guarantee absolute security. This service is intended for adults considering property purchases and does not knowingly collect children's contact details.

10. Updates to this notice

We publish the current notice and date here. Material new uses will be explained before they begin, and fresh consent will be requested where needed.

Prepared with reference to EU GDPR guidance and Singapore PDPA obligations. GDPR applicability depends on actual activities; a notice alone does not establish compliance.