Privacy Policy

1. Introduction

Keystone Academy ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, enroll in our programs, or otherwise interact with our services.

We operate in compliance with Singapore's Personal Data Protection Act 2012 (PDPA) and maintain transparent practices regarding data collection and use.

For questions about this policy or our data practices, please contact us at [email protected].

2. Information We Collect

2.1 Personal Data You Provide

We collect information you voluntarily provide when you:

• Submit contact forms or course inquiry forms
• Enroll in educational programs
• Communicate with us via email or phone
• Participate in surveys or feedback requests

This information may include:

• Full name and contact details (email address, phone number)
• Professional information (occupation, employer)
• Financial planning information shared during consultations
• Payment information for course enrollment

2.2 Automatically Collected Data

When you visit our website, we may automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, referral sources)
• Cookies and similar tracking technologies (see Cookie Policy)

2.3 Third-Party Sources

We do not purchase or obtain personal data from third-party data brokers. Any third-party information comes only from services we use (such as payment processors) when you interact with them directly.

3. How We Use Your Information

We use collected information for the following purposes:

• Program Administration: Processing enrollments, scheduling sessions, providing course materials
• Communication: Responding to inquiries, sending program updates, providing post-course support
• Service Improvement: Analyzing program effectiveness, developing new content, improving educational quality
• Legal Compliance: Meeting regulatory requirements, maintaining records as required by law
• Marketing (with consent): Sending information about new programs or relevant educational content

Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary to deliver educational services you've enrolled in
• Consent: Marketing communications and optional data uses
• Legitimate Interest: Website functionality, service improvement, fraud prevention
• Legal Obligation: Compliance with applicable laws and regulations

4. Data Sharing and Disclosure

4.1 Service Providers

We may share data with third-party service providers who assist with:

• Payment processing (secure payment gateways)
• Email communications (email service providers)
• Website analytics (Google Analytics or similar)
• Cloud storage and data management

These providers are contractually obligated to use your data only for specified purposes and maintain appropriate security measures.

4.2 Legal Requirements

We may disclose personal data if required by law, court order, or governmental authority, or when necessary to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Secure servers with limited access controls
• Regular security assessments and updates
• Employee training on data protection practices
• Secure backup procedures

While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.

6. Data Retention

We retain personal data for different periods depending on the purpose:

• Enrollment and Program Data: 7 years after program completion (for educational records and potential references)
• Financial Records: 7 years (as required by tax and accounting regulations)
• Marketing Communications: Until you withdraw consent or we determine the data is no longer relevant
• Website Analytics: 26 months maximum

After retention periods expire, we securely delete or anonymize personal data unless legal obligations require longer retention.

7. Your Rights

Under Singapore's PDPA, you have the following rights:

• Right to Access: Request copies of your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Withdrawal: Withdraw consent for marketing communications or optional data uses
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Restrict Processing: Request limitation on how we use your data in certain circumstances
• Right to Object: Object to processing based on legitimate interests

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe we have not handled your data appropriately.

8. Cookies and Tracking

Our website uses cookies and similar technologies. We use:

• Essential Cookies: Required for website functionality (always active)
• Analytics Cookies: Help us understand site usage and improve user experience
• Marketing Cookies: Used for advertising and tracking campaign effectiveness

For detailed information about our cookie usage and how to manage preferences, please see our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected such data, we will delete it promptly.

11. International Data Transfers

Your personal data is primarily stored and processed in Singapore. If we transfer data to countries outside Singapore, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notifications to enrolled participants for material changes

Your continued use of our services after changes indicates acceptance of the updated policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: