Asia-Pacific REITs Finance Privacy Policy
Effective Date: June 24, 2026
Asia-Pacific REITs Finance (hereinafter "we"; official website: https://www.sgxcata.com/) complies with the dual standards of the People's Republic of China's Personal Information Protection Law and Cybersecurity Law, as well as Singapore's Personal Data Protection Act (PDPA), fully safeguarding the security and privacy rights of user information from both mainland China and Singapore. By visiting, browsing, contacting us via WhatsApp, leaving messages, or subscribing to information, you confirm that you have read and agreed to all terms of this privacy policy.
I. Scope of Information We Collect
(A) Personal Information You Voluntarily Provide
- Provided voluntarily during WhatsApp communication, on-site messages, and consultation emails: email address, communication account, message text content;
- Voluntarily submitted during article submissions, business partnerships, and copyright enforcement scenarios: nickname, contact information, company materials, evidence screenshots;
- Voluntarily filled supplementary information during REIT/ETF information subscription activities (non-mandatory, does not affect basic browsing functions).
(B) Technical Data Automatically Collected by the Website (Non-Identifiable)
When visiting sgxcata.com, the system automatically collects data that cannot individually identify a natural person:
- Device information: device model, operating system, browser type, device identification marks;
- Access logs: IP address, access time, page browsing trajectory, click behavior, page dwell time, external referral source;
- Cookies/browser local storage: save browsing preferences and information subscription status; you may disable cookies via your browser; disabling will cause loss of personalized REIT/ETF push and browsing memory functions.
(C) No Mandatory Collection of Sensitive Personal Information
We do not proactively request sensitive data such as ID cards, passports, bank cards, or residential addresses. Such information is only retained if you voluntarily provide it in cross-border business or rights protection scenarios. There is no forced collection.
II. Lawful Use of Information
Without your separate written authorization, we will never expand the scope of information use. It is only used for the following lawful and necessary scenarios:
- Basic website services: record browsing preferences, push Singapore REIT, various ETF, Fed interest rate, and global macro information;
- Customer service response: reply to WhatsApp, emails, messages; handle market data corrections, copyright complaints, and content feedback;
- Platform operation optimization: aggregate site-wide traffic, popular REIT/ETF categories, column reading data, and optimize information update frequency;
- Website security: identify malicious crawlers, spam messages, and accounts violating rules, ensuring normal browsing for all users;
- Fulfilling legal obligations in both countries: cooperate with Chinese public security, cybersecurity, and market regulation authorities, as well as Singapore's PDPC regulatory body for lawful data requests;
- Additional services with your separate consent: daily REIT market and index review email push, which you can unsubscribe from or revoke authorization at any time.
III. Data Storage and Security Protection Mechanisms
Data Storage Location Rules
Personal information from mainland Chinese users is uniformly stored on compliant servers within mainland China. Singapore visitor data is stored separately following PDPA specifications. There is no cross-border data transmission without dual written permission from both parties. If cross-border storage becomes necessary in the future, we will announce it in advance and obtain separate authorization.
Data Retention Periods
- Cookies and browsing access logs: retained for 180 days, then automatically purged;
- Records of messages, submissions, business inquiries, subscriptions, and customer service consultations: retained for 3 years after completion, then automatically anonymized and deleted;
- User request for deletion of all personal data: completely delete all associated records within 15 working days.
Security Measures
The entire site uses SSL encrypted transmission, implements tiered staff data access permissions, and only authorized customer service and operations personnel have limited access to user information. Regular website vulnerability audits and information leak emergency drills are conducted. Internet usage carries inherent risks. Please keep your communication accounts safe and do not disclose platform consultation records to third parties.
IV. Information Sharing and Disclosure Rules
- It is strictly prohibited to sell or rent any user personal information;
- Only three types of compliant sharing scenarios:
- (i) After your separate written authorization, synchronize submitted content with partner cross-border financial platforms;
- (ii) According to the laws and regulations of China and Singapore, or formal judicial/regulatory documents, disclose corresponding information as required by law;
- (iii) In the event of merger, acquisition, or asset transfer of the platform, user information will be transferred along with the assets. The successor entity must still comply with this privacy policy. If the purpose of information use changes, we will seek your consent again;
- Only de-identified anonymous site-wide traffic and column statistics are published externally, which cannot identify any natural person.
V. User Legal Privacy Rights
- Right to know and access: Send an email to privacy@sgxcata.com to request a copy of all your personal information retained by the platform;
- Right to correction and supplementation: If the contact information or message content retained by the platform is incorrect, you may submit materials to request correction;
- Right to deletion and erasure: Request deletion of all personal data related to consultations, subscriptions, and messages at any time, to be completed within 15 working days;
- Right to revoke authorization: Disable browser cookies or unsubscribe from email information pushes to terminate information collection authorization at any time;
- Right to complain and defend: If you have objections to privacy processing, you can email a complaint, and we will provide feedback within 7 working days. Mainland Chinese users may file complaints with the cyberspace administration authorities; Singapore users may seek rights protection with the local data protection authority under PDPC.
VI. Minor Privacy Protection
This website is intended for adult cross-border asset investors. It does not provide Singapore REIT or ETF overseas investment information services to minors under 18. Minors should not submit any personal information to the platform. If guardians discover that a minor's information has been retained, please contact us to delete it immediately.
VII. Policy Update Explanation
We may revise this privacy policy in accordance with China's Personal Information Protection Law, Singapore's PDPA, and the latest regulatory changes. Updates will be posted prominently on the website homepage with the new effective date. Continued use of the website constitutes acceptance of all updated terms. If there are material changes to information collection or cross-border sharing rules, we will separately notify users via email or WhatsApp.
VIII. Dedicated Contact Information for Privacy Issues
- Email for privacy information inquiry and personal data deletion requests: privacy@sgxcata.com
- Email for privacy breach or unlawful collection complaints: report@sgxcata.com