Privacy Policy

Introduction

Ascend ("we," "our," or "us") is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, and safeguard information from participants in our financial education programmes and visitors to our website.

This policy applies to all participants, enquirers, and website visitors. By engaging with our services or website, you acknowledge the practices described in this policy.

Last Updated: December 2024

Data Collection

Types of Personal Data Collected

We collect the following categories of personal information:

• Contact information: name, email address, phone number, mailing address
• Programme participation data: course enrollment, attendance records, progress tracking
• Communication records: enquiry forms, email correspondence, feedback submissions
• Financial information: payment details for programme fees (processed securely through third-party payment processors)
• Technical data: IP address, browser type, device information, website usage patterns
• Cookie data: preferences and website interaction information

Collection Methods

• Direct submission: Information you provide through forms, registration, or direct communication
• Automated collection: Data gathered through cookies and analytics tools during website visits
• Programme participation: Information collected during educational sessions and assessments
• Third parties: Limited data from payment processors and analytics services

Legal Basis for Processing

We process personal data on the following legal bases under Singapore's Personal Data Protection Act (PDPA):

• Consent: You have provided explicit consent for specific processing activities
• Contract fulfillment: Processing is necessary to deliver educational services you have enrolled in
• Legitimate interest: Processing supports our business operations and service improvement
• Legal obligation: Processing is required to comply with Singapore regulatory requirements

Data Usage

We use collected information for the following purposes:

• Service provision: Delivering educational programmes, tracking progress, providing materials
• Communication: Responding to enquiries, sending programme updates, sharing relevant information
• Administration: Managing enrollments, processing payments, maintaining records
• Improvement: Analyzing programme effectiveness, refining curriculum, enhancing educational methodology
• Legal compliance: Meeting regulatory requirements, maintaining necessary records
• Security: Protecting against fraud, unauthorized access, and security threats

Data Retention

We retain personal data for different periods based on the type of information and purpose:

• Programme participation records: Retained for 7 years after programme completion for educational continuity and record-keeping
• Financial records: Maintained for 7 years in accordance with Singapore accounting requirements
• Communication records: Kept for 3 years to maintain service history
• Website analytics data: Stored for 2 years for statistical analysis
• Marketing consent: Retained until consent is withdrawn or 2 years of inactivity

After retention periods expire, we securely delete or anonymize personal data unless legal requirements mandate longer retention.

Data Protection Measures

We implement appropriate technical and organizational security measures:

• Encryption: Data transmission protected through SSL/TLS encryption
• Access controls: Limited access to personal data based on role requirements
• Secure storage: Protected databases with regular security updates
• Staff training: Regular privacy and security awareness training for team members
• Breach procedures: Established protocols for detecting, reporting, and responding to data breaches
• Third-party vetting: Careful selection and monitoring of service providers handling data

Your Rights

Under Singapore's Personal Data Protection Act, you have the following rights:

• Right to access: Request confirmation of what personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw previously given consent for data processing
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests
• Right to restrict processing: Request limitation of data processing in certain circumstances

To exercise these rights, please contact us at [email protected]. We will respond to requests within 30 days as required by the PDPA.

Third-Party Services

We work with the following categories of third-party service providers:

• Analytics providers: Google Analytics for website usage analysis (anonymized data)
• Payment processors: Secure third-party services for processing programme fees
• Hosting services: Cloud infrastructure providers for secure data storage
• Communication tools: Email service providers for programme communications

All third-party providers are carefully selected based on their data protection practices and are contractually bound to protect personal information.

International Data Transfers

Personal data is primarily stored and processed in Singapore. If data is transferred outside Singapore to third-party service providers, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy determinations under the PDPA.

Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about cookie usage, categories, and management, please refer to our Cookie Policy.

Children's Privacy

Our educational programmes are designed for adults aged 18 and above. We do not knowingly collect personal information from individuals under 18. If we become aware of data collected from minors, we will take steps to delete such information promptly.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through email to active participants and website notification. The "Last Updated" date at the top of this policy indicates the most recent revision. Continued use of our services after policy updates constitutes acceptance of the revised terms.

Contact Information

For privacy-related questions, to exercise your rights, or to raise concerns about data handling:

If you have concerns about our data handling practices that remain unresolved, you may contact the Personal Data Protection Commission Singapore at www.pdpc.gov.sg.