Privacy Policy

Introduction

Finworth is committed to protecting the privacy and personal information of our programme participants and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Singapore's Personal Data Protection Act (PDPA) and other applicable regulations.

This policy applies to all personal information collected through our website, programme registrations, and communications with us.

Information We Collect

We collect the following types of personal information:

Contact Information

• Name
• Email address
• Phone number
• Mailing address

Programme Participation Data

• Programme enrollment information
• Attendance records
• Learning materials access
• Community participation

Communication Data

• Email correspondence
• Phone call records
• Feedback and survey responses

Website Usage Data

• IP address
• Browser type and version
• Pages visited
• Time and date of visits
• Cookie data (see our Cookie Policy)

How We Use Your Information

We use your personal information for the following purposes:

Service Provision

• Processing programme registrations
• Delivering educational content
• Providing access to online resources and community
• Scheduling and coordinating sessions

Communication

• Responding to enquiries
• Sending programme updates and reminders
• Providing customer support
• Sharing relevant educational resources (with consent)

Improvement

• Enhancing our programmes based on feedback
• Improving website functionality
• Developing new educational content

Legal Compliance

• Meeting regulatory requirements
• Maintaining business records
• Protecting our legal rights

Legal Basis for Processing

We process your personal data based on:

• Consent: You have given explicit consent for specific purposes
• Contract: Processing is necessary to fulfill our programme delivery obligations
• Legitimate Interest: Processing is necessary for our legitimate business interests while respecting your privacy rights
• Legal Obligation: Processing is required to comply with Singapore law

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Programme participants: Records retained for 7 years after programme completion for educational continuity and legal compliance
• Enquiries: Information retained for 2 years unless you request earlier deletion
• Website analytics: Aggregated data retained indefinitely; individual data retained for 26 months
• Financial records: Retained for 7 years as required by Singapore regulations

Data Protection and Security

We implement appropriate technical and organisational measures to protect your personal data:

• Secure encrypted connections (SSL/TLS) for data transmission
• Access controls limiting employee access to personal data
• Regular security assessments and updates
• Secure backup systems
• Staff training on data protection obligations

In the event of a data breach that poses significant risk to your rights, we will notify you and the relevant authorities as required by law.

Your Rights

Under Singapore's PDPA, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you.

Right to Correction

You may request correction of inaccurate or incomplete personal data.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal.

Right to Data Portability

You may request your personal data in a structured, commonly used format for transfer to another service provider.

Right to Deletion

You may request deletion of your personal data where we no longer have a legitimate reason to retain it, subject to legal obligations.

To exercise any of these rights, please contact us at [email protected].

Third-Party Services

We may share personal data with trusted third-party service providers who assist us in operating our business:

Analytics Providers

We use analytics services to understand website usage and improve our services. These providers may collect information about your visits to our website and other sites.

Hosting Services

Our website and data are hosted on secure servers. Hosting providers have access to certain data for infrastructure maintenance purposes.

Communication Tools

We use email service providers and communication platforms to deliver programme content and stay in touch with participants.

All third-party service providers are required to maintain appropriate security measures and use personal data only for the purposes we specify. We do not sell personal information to third parties.

International Data Transfers

Some of our service providers may be located outside Singapore. Where personal data is transferred internationally, we ensure appropriate safeguards are in place:

• Transfers only to jurisdictions with adequate data protection laws
• Standard contractual clauses with service providers
• Regular reviews of transfer mechanisms

Cookies and Similar Technologies

Our website uses cookies and similar technologies. For detailed information about our use of cookies, please see our Cookie Policy.

Children's Privacy

Our programmes are designed for adults. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email (where we have your email address) or by posting a notice on our website. The updated policy will indicate the revision date at the top of this page.

Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us: