Data Protection and Privacy Policy

This Data Protection and Privacy Policy explains how GHL Resources, operating under the SQFT AI brand, collects, uses, discloses, processes, protects, and retains personal data submitted through this website and in connection with our services.

In this Policy, “SQFT AI”, “we”, “us”, “our”, and “the Company” refer to GHL Resources, operating under the SQFT AI brand. “Website” refers to this website and any related pages operated under the SQFT AI brand.

We respect the privacy and confidentiality of personal data provided by our clients, prospective clients, website users, business partners, and other individuals who interact with us.

We are committed to implementing reasonable policies, practices, and processes to safeguard the collection, use, disclosure, and protection of personal data in accordance with the Personal Data Protection Act 2012 of Singapore, as may be amended from time to time.

This Policy applies to personal data in our possession or under our control, including personal data in the possession of organisations or service providers that we may engage to collect, use, disclose, process, host, store, or manage personal data for our purposes.

Personal data refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.

We may collect personal data when you:

• Visit or use the SQFT AI website;
• Submit an enquiry through our website contact form;
• Request information about our services;
• Contact us by email, telephone, messaging platform, online form, or other communication channels;
• Engage us or express interest in engaging us for healthcare real estate advisory, site search, leasing, location strategy, landlord negotiation, or related services;
• Provide information about your clinic, healthcare business, dental practice, allied health practice, wellness business, or commercial space requirements;
• Attend meetings, consultations, events, presentations, or discussions with us;
• Respond to marketing materials, digital campaigns, advertisements, or other communications;
• Provide feedback, make a complaint, or submit a request to us;
• Interact with us in connection with any business, property, leasing, advisory, or professional matter.

The types of personal data we may collect include:

• Name;
• Email address;
• Telephone number;
• Company or business name;
• Job title or professional role;
• Business type or healthcare vertical;
• Preferred location or target area;
• Estimated size requirement;
• Current business stage, such as opening, relocating, expanding, buying, selling, leasing, evaluating, or landlord / investor review;
• Enquiry type, such as leasing, buying, selling, evaluation, landlord representation, or investment advisory;
• Information provided in enquiry forms or messages;
• Meeting notes, correspondence, and communication records;
• Property search, leasing, ownership, investment, or business requirements that you voluntarily provide to us;
• Any other information you choose to provide to us.

Where necessary for a specific transaction, engagement, or regulatory requirement, we may also collect additional information required to assess, facilitate, document, or complete a commercial property, advisory, leasing, sale, purchase, landlord representation, or investment-related engagement.

We do not intend to collect unnecessary personal data and will take reasonable steps to limit collection to information relevant to the purpose for which it is collected.

We may use personal data collected for one or more of the following purposes:

• Responding to your enquiries, requests, messages, or feedback;
• Understanding your healthcare real estate requirements;
• Assessing your clinic, dental, allied health, wellness, property ownership, landlord, or investment needs;
• Providing information about SQFT AI’s services;
• Arranging consultations, meetings, calls, or follow-up communications;
• Providing healthcare real estate brokerage, site search, location strategy, lease advisory, purchase advisory, sale and divestment advisory, landlord representation, investment sales, expansion support, or related services;
• Identifying, assessing, shortlisting, reviewing, positioning, marketing, or evaluating potential commercial spaces or healthcare property opportunities;
• Communicating with landlords, property owners, buyers, sellers, agents, partners, consultants, or service providers where required to respond to your enquiry or provide services;
• Managing client relationships and business records;
• Conducting internal analysis, service improvement, market research, or business planning;
• Maintaining website functionality, security, performance, and user experience;
• Sending relevant updates, marketing communications, or service information where permitted by law or with your consent;
• Complying with applicable laws, regulations, guidelines, codes of practice, court orders, or lawful requests from public agencies;
• Protecting our legal rights, business interests, security, property, users, and clients.

We may disclose personal data where necessary and appropriate to fulfil the purposes described in this Policy.

This may include disclosure to:

• Landlords, property owners, developers, asset managers, buyers, sellers, investors, or authorised representatives;
• Co-brokers, agents, consultants, advisors, or business partners involved in a relevant property or advisory matter;
• Service providers that support website hosting, data storage, communications, form handling, customer relationship management, analytics, IT security, or business operations;
• Professional advisors, including lawyers, accountants, auditors, consultants, insurers, or compliance advisors;
• Government agencies, regulators, statutory boards, law enforcement agencies, courts, tribunals, or public authorities where required or permitted by law;
• Any other party where you have provided consent or where disclosure is reasonably necessary for the provision of our services.

We will take reasonable steps to ensure that personal data disclosed to third parties is handled appropriately and used only for the relevant purpose.

Before collecting, using, or disclosing your personal data, we will notify you of the purposes for which your personal data may be collected, used, or disclosed, where required by applicable law.

By voluntarily providing personal data to us, submitting an enquiry form, communicating with us, or using our services, you consent to the collection, use, disclosure, and processing of your personal data for the purposes described in this Policy, unless you inform us otherwise.

We may rely on deemed consent where permitted by law, including where you voluntarily provide personal data for a stated purpose and it is reasonable that you would provide such data for that purpose.

We will not collect more personal data than is reasonably necessary for the relevant purpose.

If you provide personal data relating to another individual, you represent and warrant that you have obtained that individual’s consent for us to collect, use, disclose, and process the personal data for the relevant purposes.

You agree to inform that individual of the contents of this Policy.

You may withdraw your consent for the collection, use, or disclosure of your personal data by contacting us in writing.

Please note that withdrawing consent may affect our ability to respond to your enquiry, provide services, continue communications, or maintain an ongoing business relationship with you.

Upon receiving a written withdrawal request, we will process the request within a reasonable time and inform you of the likely consequences of the withdrawal, where applicable.

We may continue to retain, use, or disclose personal data where permitted or required by law, including for legal, regulatory, accounting, audit, dispute resolution, or legitimate business record purposes.

You may request access to personal data that we hold about you, or request correction of personal data that is inaccurate, incomplete, or outdated.

Before processing your request, we may need to verify your identity and request additional information to locate the relevant records.

We will respond to access or correction requests within a reasonable time and in accordance with applicable law.

Where permitted by law, we may charge a reasonable administrative fee for processing an access request and will inform you of the fee before proceeding.

We generally rely on personal data provided by you or your authorised representative.

You should ensure that all personal data submitted to us is accurate, complete, and up to date.

If there are changes to your personal data, please inform us as soon as reasonably possible so that we may update our records.

We will take reasonable administrative, physical, and technical measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal, loss, misuse, or similar risks.

These measures may include access controls, secure systems, password protection, encryption where appropriate, antivirus protection, secure network protocols, internal confidentiality practices, and limiting access to authorised persons on a need-to-know basis.

Where we engage external service providers or data intermediaries to process personal data on our behalf, we will take reasonable steps to ensure that appropriate data protection and confidentiality arrangements are in place.

However, you acknowledge that no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security.

We do not generally collect, use, or disclose NRIC numbers, passport numbers, or other national identification numbers unless:

• The collection, use, or disclosure is required under law;
• It is necessary to accurately establish or verify an individual’s identity to a high degree of fidelity;
• It is required for a specific transaction, regulatory, legal, or compliance purpose.

Where such information is collected, we will notify you of the purpose and take reasonable steps to protect it from unauthorised access, use, or disclosure.

We will retain personal data only for as long as it is necessary for business, legal, regulatory, accounting, audit, operational, or legitimate purposes.

When personal data is no longer required, we will take reasonable steps to securely destroy, delete, anonymise, or dispose of it.

We generally seek to process and store personal data in Singapore where reasonably practicable.

However, personal data may be transferred to, stored in, or processed in countries outside Singapore where we use cloud services, technology providers, data hosting providers, communication tools, or other service providers with overseas infrastructure.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the transferred personal data receives a standard of protection comparable to that provided under Singapore’s Personal Data Protection Act, where required by law.

If we conduct telemarketing or send marketing messages to Singapore telephone numbers, we will comply with applicable Do Not Call provisions under Singapore law.

We will not send specified marketing messages to your Singapore telephone number where prohibited by law, unless we have your clear and unambiguous consent or are otherwise permitted to do so.

You may inform us if you do not wish to receive marketing calls, text messages, or other marketing communications from us.

We may use cookies and similar technologies to support website functionality, improve user experience, understand website usage, and maintain website performance and security.

A cookie is a small text file that may be stored on your device when you visit a website. Cookies may allow the website to recognise your browser, remember preferences, or collect usage information.

We may use session cookies, persistent cookies, analytics tools, or similar technologies.

You may choose to disable cookies through your browser settings. However, doing so may affect the functionality or performance of certain parts of the Website.

The Website may contain links to third-party websites, platforms, tools, or resources.

This Policy does not apply to third-party websites or services that are not operated or controlled by us.

We are not responsible for the privacy practices, content, security, or policies of third-party websites or services. You should review the privacy policies of those third parties before providing any personal data to them.

We may update this Policy from time to time to reflect changes in our practices, legal requirements, operational needs, or website features.

Any updated version may be posted on this page with a revised “Last updated” date.

Your continued use of the Website after any update constitutes your acknowledgement of the updated Policy.

If you have any query, feedback, access request, correction request, withdrawal request, or complaint relating to this Policy or how we manage personal data, please contact SQFT AI through the contact form or contact details provided on this Website.

Your message should include, where relevant:

• Your full name;
• Your contact information;
• A brief description of your query, request, or complaint.

We will treat such queries and feedback seriously and deal with them within a reasonable time.