CGWA Logo
Download App
CGWA Logo

Privacy Policy

This Privacy Policy explains how Crownstreams Global Wealth Advisory Pte. Ltd. (CGWA) (“we”, “us” or “our”) collects, uses, discloses and safeguards your personal data in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA). 

1. Scope

This policy applies to all personal data collected or processed: 

  • Through our website, forms and digital platforms 
  • Via interactions with our representatives, employees, and authorised third parties 

2. Definitions

“Personal data” means any information from which an individual can be identified, directly or indirectly.  

“Processing” covers any operation on personal data (e.g., collection, storage, disclosure, erasure).  

“Data Controller” is the entity determining the purposes and means of processing.  

“Data Processor” is the entity processing data on behalf of the controller. 

3. Categories of Personal Data Collected

We collect only data necessary for our services, including: 

  • Identification: name, NRIC / FIN / Passport number, date of birth 
  • Contact: address, email, phone 
  • Financial: income, assets 
  • Employment: occupation, employer information 
  • Health: medical history (when relevant to advice) 
  • Other: CCTV footage, images, voice recordings 

4. Collection Methods

We obtain personal data through, for example: 

  1. Direct Input 
    • Online or offline forms, applications, surveys 
  2. Indirect Sources
    • Introducers, representatives, public records, credit bureaus 
  3. Physical / Digital Channels 
    • Face-to-face meetings, video conferencing, phone communications, CCTV 

5. Purposes of Processing

We process personal data to: 

  • Deliver tailored financial advisory and related services 
  • Perform due diligence and risk assessments (e.g., MAS FAA-N06) 
  • Process applications and account administration 
  • Communicate service updates, marketing (with consent) and event invites 
  • Meet legal, regulatory or contractual obligations 
  • Conduct internal audits, analytics and service improvements 

6. Legal Bases & Consent

We rely on the following legal bases: 

  • Express Consent: for marketing 
  • Deemed Consent: when data is necessary to perform a contract you have entered  
  • Legal Obligation: to comply with laws, regulations or court orders 
  • Legitimate Interest: for fraud prevention, cybersecurity and business continuity 

You may withdraw consent at any time. We will inform you of any impact on our ability to continue providing services and cease processing for the withdrawn purposes within 30 days, unless retention is required by law. 

7. Disclosure & International Transfers

We disclose personal data only to: 

  • Regulators, law enforcement and courts (as required) 
  • Product providers and insurers to fulfil your requests 
  • Authorised third-party service providers under binding data protection agreements 
  • Your appointed representatives or next-of-kin in relevant circumstances 

Overseas transfers are permitted only to jurisdictions with comparable data protection or under standard contractual clauses. 

8. Data Security

We implement appropriate safeguards, including: 

  • Role-based access controls and multi-factor authentication 
  • Security audits and staff training 
  • An incident response plan for timely breach containment 

9. Retention of Personal Data

We retain personal data only for as long as necessary to: 

  • Fulfil the purposes for which it was collected 
  • Comply with legal, regulatory or contractual obligations 

Upon expiry of retention periods, data will be securely deleted or anonymised. 

10. Data Breach Notification

In the event of a suspected or confirmed breach, we will: 

  • Contain and investigate the incident promptly 
  • Notify affected individuals and the Personal Data Protection Commission as required under PDPA 

11. Policy Updates

We may revise this policy to reflect changes in practices or legal requirements. Material amendments will be published on our website and communicated directly when appropriate. 

12. Contact Information

For questions, feedback, or to exercise your rights, please contact our Data Protection Officer at: 

 

Email: enquiry@crownstreams-gwa.com  

Phone: +65 6298 2177 

Address: 138 Robinson Road, #05-01, Oxley Tower, Singapore 068906 

Updated as of 15 Dec 2025