Privacy Policy

1. Introduction

Cendana ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what personal data we collect, how we use it, how we protect it, and what rights you have in relation to it.

This policy applies to all personal data collected through our website, our programme registration process and our direct communications with participants and enquirers. If you have questions about how we handle your data, please contact us at [email protected].

2. What Personal Data We Collect

We collect the following types of personal data:

• Name and contact details (email address, telephone number)
• Correspondence you send to us by email or through our contact form
• Programme enrolment information (selected programme, preferred cohort date, payment records)
• Financial documents shared voluntarily by participants in the Private Household Review programme
• Post-programme feedback responses
• Website usage data collected via cookies (see our Cookie Policy)

We collect this data through our website contact form, direct email correspondence, programme registration forms and, in the household review programme, the documents you share with your facilitator.

The legal basis for processing your personal data is your consent (for marketing communications and cookie use), the performance of a contract (for programme delivery), and our legitimate interest in managing our operations and improving our programmes.

3. How We Use Your Personal Data

We use personal data for the following purposes:

• To respond to enquiries and provide information about our programmes
• To process programme enrolments and deliver programme content
• To communicate with participants before, during and after a programme
• To send programme materials and printed booklets by post
• To process payments for programme fees
• To collect and review post-programme feedback
• To improve our programmes and website based on aggregated usage data

We do not use your personal data to send marketing communications unless you have separately consented to receive them. We do not share your data with financial product providers, banks, insurers or investment platforms.

4. Data Sharing

We share personal data only in the following circumstances:

• With our payment processor, for the purpose of processing programme fees securely
• With our email service provider, for the purpose of sending programme correspondence
• With our web hosting provider, which processes data on servers located in Singapore
• Where required by law or a Singapore regulatory authority

We do not sell, rent or otherwise transfer personal data to third parties for commercial purposes. Any third parties we work with are required to handle personal data in accordance with Singapore's PDPA.

Financial documents shared by participants in the Private Household Review programme are handled exclusively by the programme facilitator and are not shared with any third party. These documents are deleted or returned to the participant at the conclusion of the programme.

5. Data Retention

We retain personal data for the following periods:

• Enquiry correspondence: twelve months from the date of the last communication, unless a programme enrolment follows
• Programme enrolment records: five years from the date of the programme, for administrative and accounting purposes
• Payment records: seven years, in accordance with Singapore's accounting and tax requirements
• Feedback responses: retained in anonymised form for programme improvement purposes; personal identifiers removed after twelve months
• Financial documents (household review programme): deleted or returned at the conclusion of the programme, unless you request longer retention

6. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, disclosure, alteration or destruction. These steps include:

• Use of TLS encryption for data transmitted through our website
• Access controls limiting access to personal data to those who need it for their work
• Secure handling protocols for financial documents shared in the household review programme
• Annual review of our data handling practices

In the event of a data breach that poses a significant risk of harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required by the PDPA's mandatory data breach notification provisions.

7. Cookies

Our website uses cookies to support basic website functionality and, where you consent, to collect anonymised analytics data. Full details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

8. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent to processing (where processing is based on consent)
• Request that we cease processing your data for direct marketing purposes
• Request information about third parties to whom we have disclosed your personal data in the preceding twelve months

To exercise any of these rights, please write to us at [email protected]. We will respond within thirty days. If you are not satisfied with our response, you may lodge a complaint with Singapore's Personal Data Protection Commission at pdpc.gov.sg.

9. Third-Party Links

Our website may contain links to external websites, including government websites such as CPF Board and MAS. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policy of any site you visit through a link from ours.

10. Minors

Our programmes are designed for adults aged forty and above. We do not knowingly collect personal data from persons under the age of eighteen. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If changes are material, we will notify registered programme participants by email. Continued use of our website following an update constitutes acceptance of the revised policy.

12. Contact Details

Cendana is the data controller for personal data collected through this website and our programmes.

Address: 85 South Bridge Road, #06-21, Singapore 058711
Email: [email protected]
Telephone: +65 6285 0473
Office Hours: Monday–Friday 9:00am–5:30pm, Saturday 9:00am–12:30pm