Privacy Policy

Introduction

Foundation is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our financial education services. We comply with Singapore's Personal Data Protection Act (PDPA) and maintain strict data handling protocols.

Data Collection

Types of Personal Data We Collect

We collect the following categories of personal information:

• Contact Information: Name, email address, phone number, mailing address
• Programme Information: Educational background, programme enrolment details, learning progress
• Communication Data: Correspondence records, enquiry details, session participation notes
• Financial Information: Payment details, billing information (processed securely through third-party providers)
• Technical Data: Website usage information, IP address, browser type, device information

Collection Methods

We collect personal data through:

• Direct submissions through our website contact forms and programme registration
• Email and phone communications with our team
• Programme participation and consultation sessions
• Automated technologies including cookies and analytics tools
• Third-party platforms we use for service delivery

Legal Basis for Processing

We process your personal data based on:

• Consent: You have provided explicit consent for specific processing activities
• Contract Fulfillment: Processing is necessary to deliver our educational programmes and services
• Legitimate Interest: Processing supports our business operations and service improvement while respecting your rights
• Legal Obligation: Processing is required to comply with Singapore laws and regulations

Data Usage

We use your personal data to:

• Deliver our financial education programmes and consultation services
• Process programme enrolments and manage participant records
• Communicate about programmes, schedules, and educational content
• Provide customer support and respond to enquiries
• Process payments and maintain billing records
• Improve our programmes and services based on participant feedback
• Comply with legal obligations and maintain business records
• Protect against fraud and maintain service security

Data Retention

We retain personal data for different periods based on data type and purpose:

• Programme Records: 7 years from programme completion for educational records
• Financial Records: 7 years from transaction date as required by Singapore law
• Marketing Communications: Until consent is withdrawn or contact becomes inactive
• Website Analytics: 26 months from collection
• General Enquiries: 2 years from last contact

We review retention needs regularly and delete data that no longer serves legitimate purposes. You may request earlier deletion subject to legal and contractual obligations.

Data Protection Measures

We implement comprehensive security measures including:

• Encrypted data transmission using industry-standard SSL/TLS protocols
• Secure data storage with access controls and authentication
• Regular security assessments and updates
• Staff training on data protection and confidentiality
• Physical security for premises where data is accessed
• Incident response procedures for potential breaches

Your Rights

Under Singapore's PDPA, you have the right to:

• Access: Request copies of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of Consent: Withdraw consent for specific processing activities
• Data Portability: Request your data in a commonly used format
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Restriction: Request limitations on how we process your data
• Object: Object to processing based on legitimate interests

To exercise these rights, contact us at [email protected]. We will respond within 30 days. Identity verification may be required for security purposes.

Third-Party Services

We work with trusted third-party service providers for:

• Payment Processing: Secure handling of financial transactions
• Website Analytics: Understanding website usage and improving user experience
• Email Communications: Programme notifications and correspondence delivery
• Cloud Storage: Secure data hosting and backup

All third parties are carefully selected and contractually bound to protect your data according to strict standards. They process data only for specified purposes and under our instructions.

International Transfers

Your data is primarily stored in Singapore. When international transfers are necessary for service delivery, we ensure appropriate safeguards through standard contractual clauses, adequacy decisions, or your explicit consent. We take all reasonable steps to ensure your data receives equivalent protection regardless of location.

Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about our cookie practices, choices you have, and how to manage cookie preferences, please see our Cookie Policy.

Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 without parental consent. If we become aware of such collection, we will delete the data promptly. Parents or guardians with concerns should contact us immediately.

Data Breach Notification

In the event of a data breach that poses significant harm risks, we will notify affected individuals and the Personal Data Protection Commission as required by Singapore law. Notifications will be made without undue delay and include information about the breach, its likely consequences, and measures taken or proposed.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through email notification or prominent website notice. The "Last Updated" date indicates when changes were last made. Continued use of our services after updates constitutes acceptance of the revised policy.

Contact Information

For privacy-related questions, concerns, or to exercise your rights, contact us at:

If you have concerns about how we handle your personal data that we cannot resolve, you may lodge a complaint with the Personal Data Protection Commission of Singapore.