Privacy Policy
Last Updated: January 2025
Introduction
Catalyst Learn ("we," "our," or "us") is committed to protecting your privacy and handling your personal information with care and respect. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our services, website, and educational programmes.
This policy applies to all information collected through our website, enrolment processes, educational programmes, and any related services or communications. By engaging with our services, you acknowledge that you have read and understood this Privacy Policy.
We operate in accordance with Singapore's Personal Data Protection Act (PDPA) and are committed to maintaining the highest standards of data protection.
Information We Collect
We collect information that you provide directly to us, as well as information generated through your interaction with our services.
Contact Information
When you enquire about our programmes or enrol with us, we collect your name, email address, phone number, and postal address. This information is necessary to communicate with you about your enquiry or enrolment and to deliver our services.
Educational Records
As you participate in our programmes, we maintain records of your enrolment, attendance, progress, assessments, and completion status. For applied programmes, we may also retain examples of project work with your consent.
Communication Data
We keep records of communications between you and our team, including emails, messages through our platform, and notes from consultations. This helps us provide consistent support and address your needs effectively.
Usage Information
When you visit our website, we automatically collect certain technical information including your IP address, browser type, device information, pages visited, and time spent on our site. This information helps us improve our website and understand how visitors interact with our content.
Payment Information
When you make payments for our programmes, payment processing is handled by secure third-party payment processors. We receive confirmation of payment but do not store full credit card numbers or banking details on our systems.
Legal Basis for Processing
We process your personal information based on the following legal grounds:
Consent: Where you have given us explicit consent to process your information for specific purposes, such as receiving marketing communications or participating in surveys.
Contract Fulfilment: Processing necessary to deliver the educational services you have enrolled in, including programme administration, progress tracking, and certification.
Legitimate Interest: Processing that supports our legitimate business interests, such as improving our services, preventing fraud, and maintaining security, provided these interests do not override your rights.
Legal Obligation: Processing required to comply with applicable laws and regulations, including record-keeping requirements and responses to lawful requests from authorities.
How We Use Your Information
Service Delivery: We use your information to provide our educational programmes, including scheduling, delivering content, tracking your progress, providing feedback, and issuing certificates of completion.
Communication: We contact you regarding your enquiries, enrolment, programme updates, schedule changes, and relevant opportunities. We may also send you information about new programmes or services that may interest you, unless you opt out.
Improvement: We analyse aggregated and anonymised data to understand learning patterns, improve our curriculum, enhance our teaching methods, and develop new programmes.
Legal Compliance: We may use your information to comply with applicable laws, respond to legal requests, and protect our legal rights.
Security: We use technical and usage information to maintain the security of our systems, detect and prevent fraud, and protect against unauthorised access.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law.
Enquiry Data: If you enquire but do not enrol, we retain your information for up to 24 months to follow up on your interest, unless you request deletion sooner.
Learner Records: Educational records are retained for 7 years following programme completion, in line with professional education standards and to support certification verification.
Financial Records: Payment and transaction records are retained for 7 years in accordance with Singapore's accounting and tax requirements.
Communication Records: General correspondence is retained for 3 years following your last interaction with us.
When personal information is no longer needed, we securely delete or anonymise it.
Data Protection Measures
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.
Encryption: Data transmitted through our website is protected using SSL/TLS encryption. Sensitive information stored in our systems is encrypted at rest.
Access Controls: Access to personal information is restricted to staff members who need it to perform their duties. All staff receive training on data protection responsibilities.
System Security: Our systems are protected by firewalls, intrusion detection, and regular security updates. We conduct periodic security assessments.
Incident Response: We maintain procedures for detecting, reporting, and responding to data breaches. In the event of a breach affecting your information, we will notify you as required by applicable law.
Your Rights
Under Singapore's PDPA and good data governance practices, you have the following rights regarding your personal information:
Right of Access: You may request a copy of the personal information we hold about you.
Right to Correction: You may request that we correct any inaccurate or incomplete information about you.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing conducted before withdrawal.
Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your information.
Right to Data Portability: Where technically feasible, you may request that we provide your information in a structured, commonly used format.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within a reasonable timeframe, typically within 30 days.
Third-Party Services
We work with trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to protect your information and may only use it for the purposes we specify.
Analytics Services: We use Google Analytics to understand website usage patterns. This service collects anonymised data about how visitors interact with our site. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Payment Processors: Payments are processed through secure third-party payment providers who are PCI-DSS compliant.
Hosting Services: Our website and data are hosted with reputable providers who maintain appropriate security certifications.
Communication Tools: We may use third-party services for email delivery, scheduling, and customer support.
International Data Transfers
Some of our service providers may be located outside Singapore. When your information is transferred internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with Singapore's PDPA requirements.
These safeguards may include contractual obligations on the recipient to protect your information to standards comparable to those required under Singapore law, or transfers to jurisdictions recognised as providing adequate data protection.
Cookies and Tracking
Our website uses cookies and similar technologies to enhance your experience and collect usage information. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will notify you by posting the updated policy on our website with a new "Last Updated" date.
For significant changes that affect how we process your information, we will provide additional notice, such as email notification to enrolled learners. We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your information, please contact us:
We take all privacy concerns seriously and will endeavour to respond to your enquiry within 30 days.