Privacy Policy

1. Introduction

Stonehaven ("we", "us", "our") is committed to protecting the personal data of our residents, their families, website visitors, and anyone who interacts with our services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

If you have questions about this policy, you may contact us at [email protected] or write to us at 14 Upper Thomson Road, Singapore 574408.

2. Data We Collect

We may collect the following categories of personal data: your name, email address, phone number, and postal address when you contact us through our website form or by phone; health and medical information relevant to care planning for residents and assessment stay participants; next-of-kin and emergency contact details; payment and billing information for services rendered; and website usage data through cookies and analytics tools.

3. How We Collect Data

We collect personal data through the contact form on our website, phone and email enquiries, in-person meetings and care consultations, assessment and orientation stay documentation, cookies and web analytics (see our Cookie Policy), and third-party referrals where consent has been given.

4. How We Use Your Data

We use personal data for responding to enquiries and providing information about our services, delivering residential care and programme services, preparing assessment reports and care plans, communicating with families about resident well-being, processing payments and managing accounts, improving our website and services through analytics, and meeting legal and regulatory obligations.

5. Legal Basis for Processing

Under the PDPA, we process personal data based on consent you have provided (for example, by submitting a contact form), contractual necessity when delivering services you have engaged us for, legitimate interests in improving our services and maintaining safety, and legal obligations under Singapore law and healthcare regulations.

6. Data Sharing

We do not sell personal data to third parties. We may share data with healthcare professionals involved in a resident's care (with consent), government authorities when required by law, service providers who assist with website hosting and analytics (under contractual data protection obligations), and payment processors for billing purposes. All third-party service providers are required to handle your data in compliance with applicable data protection standards.

7. Data Protection Measures

We implement appropriate technical and organisational measures to protect your data, including secure storage of electronic and physical records, access controls limiting data access to authorised personnel, regular staff training on data handling procedures, and secure disposal of records no longer required. While we take reasonable precautions, no method of data transmission or storage is completely secure, and we cannot provide an absolute assurance of security.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for 24 months after last contact. Resident care records are retained for seven years after the end of the care relationship, in line with healthcare record-keeping requirements. Website analytics data is retained for 26 months.

9. Cookies

Our website uses cookies to improve functionality and analyse usage patterns. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights

Under the PDPA, you have the right to access personal data we hold about you, request correction of inaccurate or incomplete data, withdraw consent for specific processing purposes (though this may affect our ability to provide services), and request information about how your data has been used or disclosed in the past year. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Children's Data

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or wish to exercise your data rights, please contact us:

Stonehaven
14 Upper Thomson Road, Singapore 574408
Email: [email protected]
Phone: +65 6823 4917

You may also file a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your data has been handled improperly.