Privacy Notice

Consumers do not need a Happy Realtor account to browse public pages. We do not create public-consumer lead profiles or store an enquiry merely because a visitor selects a realtor’s telephone, WhatsApp, website or social contact action.

• Public bookmarks store listing identifiers in your own browser and are not synced to an account.
• Essential technical and security data may be processed to deliver pages, prevent abuse and diagnose failures.
• When you follow an external realtor, map, video, government or payment link, that external organisation’s privacy terms apply.
• If you email or message Happy Realtor directly, we process the information needed to respond and maintain appropriate support or security records.

Realtor use involves both public professional information and private operational records. Before publishing, review which profile, listing and branding fields will be visible to consumers and avoid submitting unrelated personal information.

• Public: approved business identity, CEA registration, estate-agency information, business contact actions, profile content, active listings and active branding.
• Private: authentication email, payout mobile, sessions, invoices, payment history, referrals, tier, earnings, payouts and account status.
• Protected operational data is used for eligibility, authentication, billing, payment reconciliation, referrals, payouts, moderation, support, audit and security.
• Closure removes public eligibility and ordinary access, while linked financial, audit, security and legal records follow their approved retention periods.

Happy Realtor is a Singapore property portal for CEA-registered realtors. The legal operator is:

This Notice covers the public website; signup, authentication, onboarding and account management; realtor profiles, listings and branding; billing, payments, referrals and payouts; transactional communications; and administrative, security, audit and support processes. Personal data means information that identifies an individual by itself or together with other information available to an organisation.

Information you provide

• CEA registration number, email, business mobile and authentication credentials.
• Profile details, biography, image, specialisations and approved links.
• Listing and branding text, prices, addresses, coordinates, images and videos.
• Referral codes, requests, corrections and support communications.

Official and service-provider information

We may receive or verify information through CEA or data.gov.sg, HitPay, Maybank, OneMap and the security, authentication and infrastructure services used to operate Happy Realtor.

Operational information

We generate account and verification states, sessions, security events, lifecycle timestamps, billing and payment records, referral and payout records, notifications, audit records and bounded technical or abuse-prevention data.

Happy Realtor does not intentionally collect or store:

• NRIC, FIN or passport numbers or images.
• Payment-card numbers, CVV or online-banking credentials.
• Bank-account numbers for referral payouts.
• Biometric templates or continuous device-location information.
• Sensitive personal information unrelated to the Service.
• Public consumer lead or enquiry profiles.

Do not place these items in descriptions, media, biographies or support messages.

• Verify eligibility, contact channels and account ownership.
• Authenticate users and protect accounts and the Service.
• Operate public profiles, listings and branding.
• Administer fees, invoices, payments, refunds and product activation.
• Manage referrals, tiers, earnings and payouts.
• Send transactional messages and security codes.
• Provide support, corrections, moderation and account closure.
• Prevent fraud and maintain accounting, dispute, audit and legal records.

We provide relevant notification when information is collected and may rely on consent, deemed consent or an applicable exception under Singapore law. An optional feature may have a separate notice or choice.

Approved public realtor information may include business or salesperson name, CEA registration number, estate-agency name and logo, business mobile and WhatsApp action, profile image, biography, motto, specialisations and approved website, social or video links.

Eligible listing and branding records may display property information, addresses, prices, coordinates and media. Authentication email, payout mobile, referral relationships, tier, commissions, payment history and private account status are not public.

Happy Realtor calculates fees and discounts on our server and sends HitPay the minimum information needed to create and reconcile checkout. We do not collect card numbers, CVV or online-banking credentials. Successful provider evidence may include a payer mobile used for an eligible first-payment payout-mobile record.

Referral relationships, tiers, earnings and payout details are private. Eligible payouts use a controlled Maybank PayNow-mobile workflow. Private payout reports and confirmations are restricted financial records and are not published.

We use essential cookies for authentication, session security and protected features. We do not currently use advertising cookies or third-party behavioural analytics. Public bookmarks store selected listing identifiers in your browser’s local storage and are not synced to an account.

Technical and security information may include request time, route, IP address, user agent, session events, error category, performance information and abuse-prevention signals. We minimise and restrict access to these records.

We disclose only information needed for approved purposes to providers such as Convex, our Next.js hosting platform, HitPay, Titan Email, OneWaySMS Singapore, Maybank, OneMap and authorised CEA or data.gov.sg services. We may also disclose information to professional advisers, regulators, courts or lawful authorities where required or permitted.

Some providers or subprocessors may process information outside Singapore. Where the PDPA transfer-limitation requirements apply, we take steps intended to provide a standard of protection comparable to the PDPA.

We retain information only while needed for service, legal, accounting, security, dispute or business purposes. Current operational baselines include:

• Raw OTPs and transient secrets: not retained after use.
• Terminal OTP verification records: 30 days.
• Notifications and ordinary delivery logs: 12 months.
• Abandoned unbilled drafts: 90 days.
• Ordinary closed-account history: 24 months, subject to linked records.
• Raw payment-webhook evidence: 18 months before controlled minimisation.
• Contract-critical financial, referral and payout records: six years after the relevant financial-year end.
• Routine protected backups: a 35-day rolling target.

Longer retention may apply for a dispute, incident, legal hold, tax or other lawful purpose. Public eligibility ends separately from protected record retention.

We use administrative, technical and organisational safeguards including access controls, secure authentication, encryption in transit, server-only secrets, signed provider callbacks, file validation, restricted administrative workflows, monitoring, backups and security testing. No internet service can guarantee absolute security. Protect your password, verification codes and devices and tell us promptly if you suspect unauthorised activity.

Subject to the PDPA and applicable exceptions, you may request access to personal data we hold about you and information about its use or disclosure, or ask us to correct an error or omission. We may need to verify your identity and clarify the request.

Where processing relies on consent, you may withdraw consent with reasonable notice. We will explain relevant consequences. Withdrawal does not require us to delete information that we must or may lawfully retain.

Account closure revokes access and public eligibility, followed by staged minimisation and deletion. Linked financial, referral, payout, audit and security records may remain for approved retention periods.

Realtor accounts are intended for eligible CEA-registered professionals and authorised administrators, not children. We currently use email and SMS for transactional, account and security purposes—not newsletters, telemarketing or promotional SMS. Account creation and OTP verification are not marketing consent.

We may update this Notice when services, providers, obligations or data practices change. We will update the date and provide additional notice or a new choice where required for a material change.

During development review, privacy questions, access or correction requests, consent withdrawal, account-closure requests and suspected misuse can be sent to the published business contact below. A dedicated DPO role and privacy-request channel must be approved before unrestricted production launch.