Privacy statement for Olivaya

Olivaya operates at 92 Tanjong Pagar Road, Singapore, 088513 and is committed to handling personal data in a careful and lawful manner. This policy explains the categories of data we process, the purposes of processing, legal bases where applicable, data retention practices and how individuals may exercise their rights. The policy applies to visitors, residents, family members and other individuals who interact with Olivaya services or the Olivaya website on the domain revalia.club.

02-04-2026 Olivaya, Business ID S3541925A, 92 Tanjong Pagar Road, Singapore, 088513 92 Tanjong Pagar Road, Singapore, 088513 [email protected]

Key definitions

This section clarifies terms used throughout the privacy policy to ensure consistent interpretation of rights and obligations.

Personal data means any information relating to an identified or identifiable individual, such as name, contact details, date of birth, health-related information, emergency contact and records of service use.

Processing refers to any operation performed on personal data, whether automated or manual, including collection, storage, use, disclosure, erasure and transfer.

User refers to a resident, prospective resident, family member, website visitor or any individual who interacts with Olivaya services or the Olivaya website.

Service refers to accommodation, care coordination, wellness programs, assessments and other activities provided by Olivaya at its facility or via its digital channels.

Cookies are small data files stored on a user's device that help the website recognise returning visitors, remember preferences and support analytics and security functions.

Consent means a clear affirmative action by an individual indicating agreement to the processing of their personal data for specific purposes where consent is the applicable legal basis.

Legitimate interest refers to a lawful basis for processing when Olivaya has a business interest that does not override the rights and freedoms of the individual, such as safety, fraud prevention or operational administration.

Data collection practices

Olivaya collects personal data provided directly by users, data generated through the course of providing services, and limited information collected automatically from website interactions. Collection is limited to what is necessary for the stated purposes.

Data provided by users

Personal data that users may provide when enquiring about services, registering as a resident, completing assessments or communicating with Olivaya staff includes:

Identity details such as full name, date of birth and identification numbers where required for administrative purposes.
Contact information such as postal address, email address, telephone number and emergency contact details.
Health and care-related information provided during assessments or care planning, including medical history, medications and therapy needs.
Payment and billing information necessary to process invoices and administrative fees.
Preferences and consent choices related to communications, meals, activities and accessibility requirements.
Communications platform with Olivaya staff, including enquiries, feedback and complaints.
Documentation provided by an authorised representative, guardian or family member relevant to residency or care arrangements.
Any other information individuals voluntarily submit to facilitate service delivery or assessment.

Data collected automatically

Olivaya collects technical and usage data automatically when users interact with the Olivaya website or digital services to support functionality, security and analytics.

Device and browser information, such as device type, operating system and browser version.
IP address and general location data to help ensure platform security and detect suspicious activity.
Website usage data including pages visited, time on site and navigation paths for site improvement purposes.
Cookies and similar technologies to remember language preferences and session status.
Aggregated analytics data used to improve service design and user experience.
Security logs that record access attempts and system events to support incident response and auditing.

Third-party data sources

In certain circumstances Olivaya may receive personal data from third parties to support resident admission, care coordination or verification processes.

Referrals and clinical information from healthcare providers involved in resident care.
Payment and billing information from business institutions or payment processors when required to process transactions.
Identity verification data from authorised verification services when necessary for compliance.
Publicly available sources where information is used to verify contact or professional credentials.

Purposes of processing personal data

Olivaya processes personal data only for specified, explicit and legitimate purposes consistent with the expectations of residents and users of the website.

To provide accommodation, wellness and care services, including assessments, care planning and delivery of scheduled support.
To manage bookings, billing and administrative tasks necessary for the operation of Olivaya services.
To communicate with residents, prospective residents and their representatives about services, events and operational notices.
To maintain safety and security on premises, including incident reporting and emergency response coordination.
To administer staff rostering and assignment of care providers in line with resident needs.
To comply with legal, regulatory and reporting obligations under applicable Singapore law.
To improve service delivery and site functionality through aggregated usage analytics and feedback.
To respond to enquiries, complaints and requests relating to personal data and privacy.

Legal bases for processing

Where applicable, Olivaya relies on lawful bases to process personal data. These may include performance of a contract, compliance with legal obligations, the vital interests of a person, legitimate interests and consent for specific uses.

Performance of a contract: processing needed to provide accommodation and care services agreed with the resident or representative.
Legal obligation: processing required to comply with regulatory reporting, taxation and public health obligations.
Vital interests: processing necessary to protect the life or health of a resident in an emergency situation.
Legitimate interests: operational needs such as security, fraud prevention and infrastructure administration, balanced against individual rights.
Consent: where specific consent is sought for non-essential processing such as direct marketing or certain profiling activities.

Cookies and tracking

The Olivaya website uses cookies and similar technologies to support site functionality, analytics and security. Users may manage cookie preferences through their browser or device settings.

Types of cookies used include strictly necessary cookies for site operation, performance cookies for analytics and functional cookies to remember preferences.

Categories: essential (required for site operation), analytics (usage data), functional (preferences) and security (fraud detection and protection).

Users can control cookie settings via browser controls and may delete stored cookies. Some website features may be limited if certain cookies are disabled.

View Olivaya cookie policy

Data sharing and disclosures

Olivaya shares personal data only as necessary to deliver services or to meet legal obligations. Sharing is limited to authorised parties and subject to appropriate safeguards.

Healthcare providers involved in a resident's care, on a need-to-know basis with consent or legal authority.
Third-party service providers such as payment processors, IT service providers and maintenance contractors operating under contract and confidentiality obligations.
Regulatory authorities and law enforcement where required by law or court order.
Family members or authorised representatives where the resident has provided consent or where sharing is necessary for care.
Aggregated and anonymised data for reporting and service improvement that does not identify individuals.
Other parties where explicit consent has been obtained for specific disclosures.

International data transfers

Personal data may be transferred to service providers or partners located outside Singapore where necessary. Transfers are undertaken in accordance with applicable legal requirements and only when appropriate safeguards are in place.

Safeguards can include contractual data transfer agreements, standard contractual clauses, and assessment of recipient security measures. Transfers are limited to what is necessary for the operational purpose.

Data retention

Olivaya retains personal data only as long as necessary for the purposes described, or as required by law. Retention periods take into account operational needs and regulatory obligations.

Account and resident records: retained for the period required for administrative and regulatory purposes, typically aligned with business and statutory retention schedules relevant in Singapore.

Communications and enquiry records: retained for a period necessary to resolve enquiries or complaints and to support service improvement activities.

Security and access logs: retained for a period sufficient to contribute incidents and for audit purposes, then securely deleted or archived.

When personal data is no longer required, Olivaya will securely delete or anonymise the data in accordance with internal procedures and applicable law.

Security measures

Olivaya collects and processes personal data necessary to deliver retirement sanatorium and wellness services. We implement administrative, technical, and physical safeguards to protect data against unauthorized access, alteration, disclosure, or destruction. Personal data is retained only as long as necessary for service provision, legal compliance, or legitimate business purposes. Processing activities are logged and reviewed periodically to ensure adherence to data protection principles applicable in Singapore.

Access control: role-based permissions and multi-factor authentication for staff accounts accessing personal data.
Data encryption: encryption of personal data at rest and in transit using industry-standard protocols.
Monitoring and logging: routine monitoring of systems, secure logging of access events, and regular security assessments.
Operational controls: staff training, documented procedures for data handling, and incident response plans.

Data Subject Rights

Individuals whose personal data we process have a set of rights under applicable privacy frameworks. Olivaya describes these rights and the practical steps to exercise them. Requests are handled in line with legal requirements and our internal procedures.

Right of access: request a copy of personal data we hold about you and information about processing activities.
Right to rectification: request correction of inaccurate or incomplete personal data.
Right to erasure: request deletion of personal data when retention is no longer necessary and no legal obligations require continued storage.
Right to restriction of processing: request limits on certain processing activities in specific circumstances.
Right to data portability: request a structured, commonly used, machine-readable copy of personal data for certain categories of information.
Right to object: object to processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent: withdraw consent where processing is based on consent, without affecting processing prior to withdrawal.
Right to lodge a complaint: bring privacy concerns to the attention of Olivaya or to a relevant supervisory authority in Singapore.

How to Submit a Rights Request

To exercise your rights, contact Olivaya’s privacy team by mail or email. Please provide your name, contact details, a description of the request, and any documents needed to verify your identity. We may request additional information to process the request securely and to confirm authorization.

[email protected]

Olivaya aims to acknowledge receipt of requests promptly and to respond substantively within 30 days of verification. Complex requests or those requiring coordination with third parties may take longer; you will be informed of any necessary extension.

Marketing Communications

We use contact details provided by individuals to send information about Olivaya’s retirement and wellness programs, events, and administrative notices. Marketing communications are sent only where consent has been given or where contact is otherwise permitted by law for related services.

To stop marketing emails, follow the unsubscribe link in any marketing message or contact [email protected]. Unsubscribe requests are processed promptly; you may continue to receive transactional or service-related communications after unsubscribing.

Children and Minors

Olivaya’s services are intended for adults. We do not knowingly collect or solicit personal data from children under 16. If we become aware that we have collected personal data of a child under 16 without appropriate authorization, we will take steps to delete such data in accordance with applicable law.

Third-Party Links and Services

Our website and communications may contain links to third-party sites and services. These links are provided for convenience; Olivaya does not control third-party privacy practices. Please review each third party’s privacy notice before providing personal data to them.

Updates to This Privacy Notice

This privacy notice may be updated to reflect changes in our practices or legal obligations. Material changes will be posted on the Olivaya website with the date of last revision. Last updated: 2026-03-06.

Contact Information

For privacy inquiries, data access requests, or concerns about data handling, contact Olivaya at: Olivaya, 92 Tanjong Pagar Road, Singapore, 088513; email: [email protected]; phone: +6583167772. Business ID: S3541925A.

+6583167772
[email protected]
92 Tanjong Pagar Road, Singapore, 088513