Privacy Policy

1. Introduction

Heng Yuan (UEN 201703142R), registered in Singapore, is committed to responsible handling of the personal data of those who attend our programmes, make enquiries, or visit our website. This policy explains what data we collect, why we collect it, how we use it, and the rights available to you under Singapore's Personal Data Protection Act 2012 (PDPA).

If you have questions about this policy or about how we handle your data, please write to [email protected].

2. Data We Collect

We collect only the personal data necessary for the purposes described in this policy. This includes:

• Contact details: name, email address, telephone number, provided when you make an enquiry or register for a programme
• Programme participation records: which programmes you have attended and the dates of attendance
• Feedback responses: the content of post-programme feedback forms, which may include your name
• Website usage data: anonymised data collected via cookies about how visitors use our website (see Section 7)
• Payment records: confirmation of fee payment; we do not store card or bank account details

We do not collect sensitive personal data such as NRIC numbers, financial account numbers, or health information.

3. Purposes of Collection and Use

We collect and use personal data for the following purposes:

• Responding to enquiries about our programmes
• Processing registrations and confirming bookings
• Administering programmes and communicating with participants about session details, changes, or follow-up materials
• Issuing payment receipts and maintaining financial records
• Reviewing programme feedback to improve content and delivery
• Sending occasional communications about new programme dates or formats, only to those who have attended a programme and have not opted out

The legal basis for processing is your consent (given when you submit an enquiry form or register) and our legitimate interest in administering the programmes to which you have committed.

4. Data Retention

Contact details and programme participation records are retained for three years after the last programme a person attended. Feedback forms are retained for two years. After these periods, data is deleted from our records. Financial records are retained for seven years in accordance with Singapore accounting requirements.

5. Data Sharing

We do not sell personal data to third parties. We do not share personal data with financial products companies, insurers, or investment platforms.

We may share data with:

• Our web hosting and email service providers, solely for the purpose of delivering our services, and bound by appropriate data protection agreements
• Singapore government authorities if required to do so by law

6. Data Protection Measures

Personal data is stored on servers located in Singapore. We apply access controls so that only the Heng Yuan team members who need data for programme administration can access it. Our website uses HTTPS encryption. In the event of a data breach affecting your personal data, we will notify you and the Personal Data Protection Commission as required under the PDPA.

7. Cookies

Our website uses cookies to understand how visitors use the site (analytics) and to remember your preferences. We do not use cookies to serve personalised advertisements. Essential cookies are necessary for the site to function. You can manage your cookie preferences using the settings on our Cookie Policy page.

8. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act 2012, you have the right to:

• Access the personal data we hold about you
• Correct any personal data that is inaccurate or incomplete
• Withdraw consent for us to use your data for marketing communications at any time
• Request deletion of your personal data, subject to our legal retention obligations

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you review their policies separately.

10. Children

Our programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If we become aware that we have done so, we will delete the data promptly.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. We will notify programme participants of material changes by email.

12. Contact

Data Controller: Heng Yuan

73 Hong Kong Street, #04-05, Singapore 059670

Email: [email protected]

The supervisory authority for data protection matters in Singapore is the Personal Data Protection Commission (PDPC). You may contact the PDPC at www.pdpc.gov.sg if you have concerns that have not been resolved to your satisfaction.