Privacy Policy

Who we are

COVA Group ("COVA", "we", "us") is a built environment professional services group headquartered in Singapore, with operations in Australia and across Asia, Europe and Africa.

We are committed to protecting your privacy and handling your personal information in accordance with the privacy laws that apply where we operate - in particular the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in Australia, and the Personal Data Protection Act 2012 (PDPA) in Singapore.

Information we collect

We may collect personal information such as your name, contact details, organisation and any information you provide when you contact us, apply for a role, or otherwise interact with us.

We may also collect technical information automatically when you visit this website, such as your IP address and browsing activity.

How we use your information, and consent

We use personal information to respond to enquiries, deliver our services, consider job applications, improve our website, and meet our legal obligations.

Where the Singapore PDPA applies, we collect, use and disclose personal data only with consent, or where the PDPA otherwise permits (for example, where deemed consent applies or a statutory exception is available). You may withdraw consent at any time by contacting us; we will explain the likely consequences of withdrawal and stop the relevant collection, use or disclosure within a reasonable time.

Website analytics and cookies

We use Plausible Analytics to understand how this website is used. Plausible does not use cookies and does not collect or store personal information: it records aggregated measures such as page views, referring websites, approximate country and device type, and it does not track you across other websites. Plausible is operated in the European Union.

This website does not use advertising or cross-site tracking cookies. Our contact form uses Cloudflare Turnstile to block automated spam; Turnstile uses browser signals solely to verify that a submission is genuine.

Disclosure

We do not sell your personal information. We may share it with service providers who support our operations, or where required or authorised by law.

Overseas transfers

COVA operates from offices in 14 countries, and personal information may be shared between COVA entities and with service providers located overseas - including Australia, Singapore and the other countries where we maintain offices.

Where we transfer personal information overseas, we take steps required by the APPs (APP 8) and, for personal data collected in Singapore, we transfer it only where the recipient provides a standard of protection comparable to the PDPA.

Data security and retention

We take reasonable steps (including reasonable security arrangements for the purposes of the PDPA) to protect personal information from misuse, loss and unauthorised access, modification or disclosure.

We retain personal information only for as long as it is needed for the purposes it was collected or as the law requires, and then take reasonable steps to destroy or de-identify it.

If a data breach occurs that is likely to result in serious harm or significant harm, we will assess and notify it in accordance with the Notifiable Data Breaches scheme (Australia) and the PDPA's data breach notification obligations (Singapore).

Access and correction

You may request access to, or correction of, the personal information we hold about you by contacting us using the details below. We will respond within a reasonable time; where the PDPA permits, a reasonable fee may apply to access requests.

Complaints

If you have a concern about how we have handled your personal information, please contact us first and we will investigate and respond.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC, oaic.gov.au) in Australia, or the Personal Data Protection Commission (PDPC, pdpc.gov.sg) in Singapore.

Contact us

If you have any questions about this policy, or wish to contact the person responsible for data protection at COVA (our data protection officer for the purposes of the PDPA), please reach us via our contact page.