Privacy Notice

1. Who we are

HEITUS Capital Management (“HEITUS”, “we”, “us”) is a Singapore business registered with the Accounting and Corporate Regulatory Authority of Singapore. We manage and advise on institutional investment mandates, private capital and real estate and credit strategies across Asia-Pacific.

For any question about this notice or the personal data we hold, contact us at info@heitus.com.

2. What we collect

We collect only what you choose to give us, plus the minimum our systems record in order to operate the site securely.

• Enquiry form. Your name, email address, telephone number (if provided), the area your enquiry relates to, and the content of your message.
• Technical data. IP address, browser type, device type and the pages you visit, collected through our hosting provider’s server logs and used for security and to understand how the site is used.
• No sensitive categories. We do not ask for, and you should not send us, national identification numbers, bank account details, or health or political information through this website.

3. Why we collect it, and on what basis

We process personal data only for a stated purpose and only with a lawful basis under the Personal Data Protection Act 2012 (Singapore).

• Consent. Where you tick the agreement box on the enquiry form, we use your details to respond to you and to discuss the enquiry you raised.
• Legitimate interests. We use limited technical data to keep the site secure, prevent abuse of the enquiry form, and improve the site.
• Legal obligation. Where required, we retain records to meet regulatory, audit and record-keeping obligations.

If you withdraw consent, we stop using your data for that purpose. Withdrawal does not affect processing we carried out before you withdrew it.

4. Who we share it with

We do not sell personal data and we do not disclose it for marketing. We share it only with service providers who process it on our instructions, and where the law requires us to disclose it.

• Cloudflare — hosting, content delivery and security for this website.
• Resend — transactional email delivery, so enquiries submitted through this form reach us.
• Professional advisers and regulators — where we are required to disclose information by law, regulation or legal process.

Our service providers are contractually required to protect the data they process for us and to use it only for the purpose we appoint them for.

5. How long we keep it

Enquiry data is kept for as long as needed to respond to you and to maintain a record of our dealings, and for no longer than we reasonably need it. As a general rule we delete unused enquiry data within 24 months. Where we are managing a mandate or considering an investment with you, we keep the relevant records for the period required by applicable law and our regulatory obligations.

6. Your rights

Subject to the PDPA, you may ask us to check, correct or update the personal data we hold about you, or to stop using it. You may also complain to the Personal Data Protection Commission of Singapore.

Write to us at info@heitus.com and we will respond within a reasonable period. We may need to verify your identity before we can act on your request.

7. Cookies

This website does not use advertising cookies, tracking pixels or cross-site behavioural profiling. If we introduce analytics in future we will update this notice and explain what is collected before we collect it.

8. Security

Data is transmitted over encrypted connections. Access to enquiry data is limited to the people who need it to respond to you. No system is perfectly secure, but we apply controls proportionate to the sensitivity of the information we hold.

9. Changes to this notice

We may update this notice as our practices or the law change. The date at the top of this page shows when it was last revised.