Last Updated: December 15, 2024
This Privacy Policy explains how HenteBromo Pte Ltd ("we," "our," or "us") collects, uses, discloses, and protects your personal information when you use our website, services, or interact with us. We are committed to protecting your privacy in compliance with Singapore's Personal Data Protection Act (PDPA) 2012.
1. Information We Collect
1.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number, mailing address
- Account Information: Username, password (encrypted), profile preferences
- Financial Information: Income level, financial goals, investment experience (for educational purposes only)
- Communication Data: Messages you send us, survey responses, feedback
- Course Data: Learning progress, quiz results, course completion status
1.2 Information Automatically Collected
When you visit our website, we automatically collect certain information:
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on pages, click patterns, referral sources
- Cookie Data: Information stored through cookies and similar technologies
2. How We Use Your Information
We use your personal information for the following purposes:
2.1 Service Provision
- Providing financial literacy education and courses
- Personalizing your learning experience
- Processing course enrollments and payments
- Responding to your inquiries and providing customer support
2.2 Communication
- Sending newsletters and educational content (with your consent)
- Notifying you about course updates and new programs
- Sending important service announcements
2.3 Improvement and Analytics
- Analyzing website usage to improve our services
- Conducting research to enhance our educational programs
- Testing new features and functionalities
2.4 Legal and Security
- Complying with legal obligations
- Protecting against fraud and security threats
- Enforcing our terms of service
3. Legal Basis for Processing (PDPA Compliance)
Under Singapore's PDPA, we process your personal data based on:
- Consent: For marketing communications and optional services
- Contractual Necessity: To provide our educational services
- Legitimate Interests: For improving our services and ensuring security
- Legal Compliance: To meet regulatory requirements
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
4.1 Service Providers
We may share information with trusted third-party service providers who assist us in:
- Website hosting and maintenance
- Email marketing services
- Payment processing
- Analytics and performance monitoring
4.2 Legal Requirements
We may disclose your information if required by law, regulation, or legal process, or to:
- Comply with legal obligations
- Protect our rights and property
- Ensure user safety
- Investigate potential violations of our terms
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data is encrypted in transit and at rest
- Access Controls: Limited access on a need-to-know basis
- Regular Security Audits: Ongoing monitoring and testing
- Staff Training: Regular privacy and security training for employees
- Secure Infrastructure: Use of reputable cloud services with strong security measures
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:
- Account Data: Until account deletion or 7 years after last activity
- Course Records: 7 years for educational record-keeping purposes
- Marketing Data: Until you withdraw consent or 3 years of inactivity
- Legal Records: As required by Singapore law (typically 7 years)
7. Your Rights Under PDPA
Under Singapore's PDPA, you have the following rights regarding your personal data:
7.1 Right to Access
You can request information about how we process your personal data and obtain a copy of your data.
7.2 Right to Correction
You can request correction of inaccurate or incomplete personal data.
7.3 Right to Withdraw Consent
You can withdraw consent for processing based on consent (such as marketing communications).
7.4 Right to Data Portability
You can request your data in a portable format where technically feasible.
7.5 How to Exercise Your Rights
To exercise these rights, contact us at:
- Email: [email protected]
- Phone: +65 6789 1234
- Address: 1 Raffles Place, #20-61, One Raffles Place, Singapore 048616
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. Our cookie policy includes:
8.1 Types of Cookies
- Essential Cookies: Required for website functionality
- Analytics Cookies: Help us understand website usage (with consent)
- Marketing Cookies: Used for targeted advertising (with consent)
8.2 Cookie Management
You can manage cookie preferences through our cookie consent banner or by adjusting your browser settings. Note that disabling certain cookies may affect website functionality.
9. International Data Transfers
Your personal data is primarily processed in Singapore. If we transfer data internationally, we ensure adequate protection through:
- Contractual safeguards with service providers
- Compliance with applicable data protection laws
- Use of services with appropriate security certifications
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on our website
- Update the "Last Updated" date
- Notify users of material changes via email or website notice
- Obtain consent for changes that expand data usage beyond original consent
12. Contact Information
Data Protection Officer
For privacy-related questions, concerns, or requests, please contact our Data Protection Officer:
- Email: [email protected]
- Phone: +65 6789 1234
- Address: HenteBromo Pte Ltd, 1 Raffles Place, #20-61, One Raffles Place, Singapore 048616
- Business Hours: Monday-Friday, 9:00 AM - 6:00 PM SGT
13. Complaints and Regulatory Authority
If you believe we have not handled your personal data appropriately, you may:
- Contact us directly using the information above
- File a complaint with the Personal Data Protection Commission (PDPC) of Singapore
- Visit the PDPC website at www.pdpc.gov.sg
14. Acknowledgment
By using our website or services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.
Our Commitment
HenteBromo is committed to maintaining the highest standards of data protection and privacy. We regularly review and update our practices to ensure compliance with evolving privacy laws and best practices. Your trust is essential to our mission of providing financial literacy education to young Singaporeans.