Privacy Policy

1. Who we are

This privacy policy applies to Nexus Mortgage SG ("Nexus", "we", "us", "our"), an independent mortgage brokerage operating in Singapore. Our registered address is 39A Jalan Pemimpin, #06-02B, Halcyon 1, Singapore 577183. We act as a "data controller" under the Personal Data Protection Act 2012 ("PDPA") for personal data you provide to us through this website, WhatsApp, email, or in person.

2. Data we collect

We collect personal data that you voluntarily provide when enquiring about a home loan, requesting a Free Refinancing Report, using our calculators, or otherwise contacting us. The categories include:

• Identity data: full name, NRIC / FIN (only when needed for bank submission), date of birth.
• Contact data: email address, mobile number, residential address.
• Financial data: employment status, monthly income, existing loan details, CPF balances, outstanding mortgage information, property details.
• Loan-application data: documents you upload or share for bank-loan submission (payslips, IRAS NOA, CPF statement, bank statements, Letter of Offer, etc.).
• Technical data: IP address, device type, browser, pages viewed, referring URL — captured by analytics tools (see Section 9).

You are not legally obliged to provide personal data, but we may not be able to provide a meaningful loan recommendation without it.

3. How we use your data

We use your personal data to:

• Provide mortgage advisory, including comparing loan packages across our partner banks.
• Submit your loan application to the bank you select, with your consent.
• Generate your Free Refinancing Report or other written analyses.
• Respond to enquiries via WhatsApp, email, or phone.
• Send you rate updates, refinancing notifications, or service-related communications — only if you have opted in.
• Maintain records for our regulatory, audit, and tax obligations.
• Improve our website, content, and tools through aggregated, non-identifying analytics.

4. Disclosure to third parties

We disclose personal data only to the parties needed to provide the service you have engaged us for:

• Partner banks — when submitting a loan application on your behalf, with your written consent. We currently have arrangements with 16 banks operating in Singapore (DBS, OCBC, UOB, SCB, BOC, HSBC, Maybank, CIMB, Citibank, RHB, and others).
• Conveyancing lawyers — when introduced by you for the legal completion of a loan switch, only with your consent.
• Regulators — where required by law (e.g., MAS, IRAS, ACRA, the police).
• Service providers — secure document storage, email delivery, calendar scheduling, and CRM tooling under written confidentiality terms.

We do not sell your personal data, and we do not share it for marketing or profiling by unrelated third parties.

5. Consent & withdrawal

By submitting your details through our website, WhatsApp, or email, you consent to our collection, use, and disclosure of your personal data for the purposes listed above. You may withdraw consent at any time by emailing [email protected]. Withdrawal of consent will not affect anything we lawfully did with your data before withdrawal, but it may end our ability to continue advising on or processing your loan application.

6. Access & correction rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of any data that is inaccurate or out of date.
• Request information about how your data has been used or disclosed in the past 12 months.

Send any request to [email protected] with the subject line "PDPA request". We will respond within 30 days. A reasonable fee may be charged for very large or repeated access requests.

7. Retention

We retain personal data only as long as it is needed to fulfil the purpose for which it was collected, or to satisfy legal, tax, or audit obligations. Typical retention periods:

• Active loan-application data: retained for the duration of the engagement and up to 7 years after disbursement, in line with bank and MAS record-keeping expectations.
• Refinancing-Report enquiries that did not proceed: retained for up to 24 months, then deleted unless you reactivate the engagement.
• General enquiries via WhatsApp / email: retained for up to 12 months.
• Aggregated analytics: retained indefinitely in non-identifying form.

8. Security

We take reasonable steps to protect your personal data against unauthorised access, modification, disclosure, or loss. These include access controls on document storage, encryption in transit (TLS) for the website and email, two-factor authentication on all administrative accounts, and limited internal access on a need-to-know basis. No internet-based system is perfectly secure, however, and you share data with us at your own risk.

9. Cookies & analytics

This website uses minimal cookies and standard server logs to understand site performance and usage. We may also use Google Analytics or similar tools to measure aggregate, non-identifying traffic patterns. We do not use cookies for advertising profiling. You may disable cookies in your browser; some site features may not function correctly if you do.

10. Data Protection Officer

Questions, complaints, or PDPA requests can be addressed to:

Dan Ler — Data Protection Officer, Nexus Mortgage SG
Email: [email protected]
WhatsApp: +65 8752 0859
Address: 39A Jalan Pemimpin, #06-02B, Halcyon 1, Singapore 577183

If you are not satisfied with our response, you may escalate to the Personal Data Protection Commission of Singapore at pdpc.gov.sg.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be flagged on this page and, where appropriate, communicated by email to clients with active engagements.

See also: Terms of Use.