Privacy Policy

1. Introduction

Saventis ("we", "us", "our") operates financial education reading programmes in Singapore. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our programmes, website, and communications. It applies to all individuals who enquire about, enrol in, or attend our programmes, as well as to visitors to our website.

We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore. If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Identification data: Full name, email address, telephone number — collected through our website enquiry form or directly at enrolment.
• Programme participation data: Attendance records, cohort group assignment, written programme feedback responses.
• Payment data: Payment confirmation references. We do not store full card or bank details — payment is processed through secure third-party providers.
• Website data: Browser type, IP address, pages visited, and session duration — collected via cookies and analytics tools where consent is given.

We collect only the data necessary for the purposes described in this policy. We do not collect sensitive personal data such as NRIC numbers, health information, or financial account details.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries and confirming programme enrolment.
• Administering programme cohorts — communicating session dates, distributing reading materials, and managing venue arrangements.
• Processing and recording payments for programme enrolment fees.
• Collecting and analysing written feedback to improve future programme cohorts.
• Sending information about upcoming cohort availability, where you have expressed interest in being notified.
• Analysing website usage patterns in aggregate to improve our site.

We do not use personal data for automated profiling or decision-making. We do not share personal data with financial services providers or third parties for marketing purposes.

4. Legal Basis for Processing

We process personal data on the following bases under Singapore's PDPA:

• Contractual necessity: Data required to administer your programme enrolment and deliver the programme you have enrolled in.
• Consent: Data used for sending information about future cohort availability, where you have indicated your agreement to receive such communications.
• Legitimate interests: Aggregate website analytics conducted in a manner that does not identify individual users.

5. Data Retention

We retain personal data for the following periods:

• Enquiry data (not followed by enrolment): 12 months from the date of enquiry.
• Enrolment and attendance data: Five years from the date of the programme, for administrative and record-keeping purposes.
• Payment records: Seven years, as required by Singapore's accounting and taxation obligations.
• Programme feedback: Retained in anonymised form only after the cohort concludes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

6. Data Protection Measures

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include:

• Access to personal data restricted to Saventis staff who require it for programme administration.
• Programme enrolment and payment systems hosted on services with appropriate encryption and access controls.
• Written data (paper feedback forms, printed binders with personal notations) handled and disposed of securely.
• Annual review of data handling procedures.

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required under the mandatory data breach notification provisions of the PDPA.

7. Cookies

Our website uses cookies — small text files stored on your device — for the following purposes:

• Essential cookies: Necessary for basic website functionality, including storing your cookie consent preference. These cannot be disabled.
• Analytics cookies: Used to understand how visitors use our website, in aggregate form. Only active where you have given consent.
• Marketing cookies: May be used to understand the effectiveness of advertising, where consent is given.

You can manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent for non-essential cookies does not affect your ability to use the website or enquire about programmes.

8. Your Rights Under Singapore's PDPA

Under the PDPA, you have the right to:

• Access: Request confirmation of whether we hold personal data about you, and obtain a copy of that data.
• Correction: Request that inaccurate or incomplete personal data we hold about you be corrected.
• Withdrawal of consent: Withdraw consent to the use of your personal data for any purpose, where processing is based on consent. This does not affect processing carried out before withdrawal.
• Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. In some cases, we may need to verify your identity before processing a request.

If you have a complaint about our handling of your personal data, you may contact the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

9. Third-Party Service Providers

We engage the following categories of third-party service providers who may process personal data on our behalf:

• Payment processors: Process enrolment fee payments securely. We do not receive or store full card details.
• Email service providers: Used to send programme communications. These providers process email addresses in accordance with their own privacy policies and on our instructions.
• Website analytics providers: May process anonymised or pseudonymised website usage data where consent is given.

We require all third-party service providers to maintain appropriate data protection practices. We do not sell or disclose personal data to third parties for their own marketing purposes.

10. Third-Party Links

Our website may contain links to external websites, including Singapore government scheme portals and public information resources. We are not responsible for the privacy practices of those external sites. We recommend reviewing the privacy policies of any external sites you visit.

11. Children's Privacy

Saventis programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a person under 18, please contact us at [email protected] and we will delete the data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will post a notice on our website and, where appropriate, notify enrolled participants by email. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our website or participation in a programme following a change constitutes acceptance of the updated policy.

13. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or our data handling practices:

• Email: [email protected]
• Post: Saventis, 8 Marina View, #43-02, Asia Square Tower 1, Singapore 018960