Privacy Policy
SCAL Academy is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with Singapore's Personal Data Protection Act (PDPA).
Introduction
SCAL Academy ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with our website, training programs, and services.
We operate in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore. By using our services, you consent to the practices described in this policy.
Important: This policy applies to all personal data collected through course registrations, corporate training enquiries, lead magnet downloads, portal account creation, and any other interaction with SCAL Academy.
Data We Collect
We collect personal data that is necessary for providing our WSQ training services and maintaining compliance with regulatory requirements. The types of data we collect include:
Registration & Course Enrollment
- Identity Information: Full name (as per NRIC/Passport), NRIC/FIN number, date of birth, nationality
- Contact Details: Email address, mobile number, residential address
- Employment Information: Company name, designation, industry sector
- Qualifications: Educational background, prior certifications, training history
- Emergency Contacts: Name and contact details of next of kin
Corporate Training Enquiries
- Company name and UEN (Unique Entity Number)
- Contact person's name, designation, and business contact details
- Number of trainees and preferred training dates
- Billing address and procurement information
Lead Magnet Downloads
- Name and email address (required for delivery)
- Optional: Company name and role (to personalize content)
- Download preferences and content interests
Portal Account Information
- Login credentials (encrypted passwords)
- Course enrollment history and certification records
- Assessment results and attendance records
- Payment transaction history
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Identity & Contact | Course registration, certification issuance | Performance of contract |
| Employment Details | Funding eligibility verification | Legal obligation |
| Training Records | WSQ accreditation requirements | Legal obligation |
| Payment Data | Transaction processing | Performance of contract |
How We Use Your Data
Your personal data is used for the following purposes:
- Course Delivery: Processing registrations, managing enrollments, delivering training content, and issuing WSQ certifications
- Funding Claims: Submitting claims to SkillsFuture Singapore (SSG) and other government agencies for course fee subsidies
- Compliance: Meeting regulatory requirements set by the Ministry of Manpower (MOM) and Workforce Singapore
- Communication: Sending course confirmations, reminders, certification notifications, and relevant safety updates
- Service Improvement: Analyzing training outcomes, conducting satisfaction surveys, and enhancing our programs
- Marketing (with consent): Informing you of relevant courses, industry updates, and professional development opportunities
Note: You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly. Opting out does not affect service-related communications.
Data Storage & Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Security Measures
- Encryption: SSL/TLS encryption for data transmission; AES-256 encryption for sensitive data at rest
- Access Controls: Role-based access with multi-factor authentication for staff
- Regular Audits: Security assessments and vulnerability testing conducted quarterly
- Staff Training: All employees complete annual data protection training
- Incident Response: Documented breach notification procedures compliant with PDPA requirements
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law:
- Training Records: Minimum 7 years (as required by WSQ accreditation standards)
- Financial Records: 7 years (per Singapore tax regulations)
- Marketing Data: Until you withdraw consent or request deletion
- Inactive Portal Accounts: 3 years of inactivity before archival
Storage Location
Your data is stored on secure servers located in Singapore. Where we use cloud service providers, we ensure they maintain data residency within Singapore or comply with PDPA cross-border transfer requirements.
Third-Party Sharing
We do not sell your personal data. We may share your data with the following categories of recipients:
Government Agencies
- SkillsFuture Singapore (SSG): For funding claims, course fee subsidies, and WSQ accreditation reporting
- Ministry of Manpower (MOM): For compliance with workplace safety regulations and ECO (Environmental Control Officer) renewal requirements
- Workforce Singapore: For employment and training statistics
Service Providers
- Payment Processors: Stripe, PayNow, and bank transfer services (for transaction processing only)
- Learning Management Systems: Secure platforms for delivering online training content
- Cloud Infrastructure: Microsoft Azure and AWS (Singapore regions) for data storage
- Email & Communication: SendGrid and Microsoft 365 for service communications
Legal Requirements
We may disclose your data when required by law, court order, or governmental regulation, or when necessary to protect our rights, property, or safety, or that of our users or the public.
Third-Party Obligations: All third-party service providers are contractually bound to process your data only for specified purposes and maintain confidentiality and security standards equivalent to our own.
Cookie Policy
Our website uses cookies and similar technologies to enhance your browsing experience and collect usage analytics.
Types of Cookies We Use
| Category | Purpose | Duration |
|---|---|---|
| Essential | Site functionality, login sessions, security | Session / 30 days |
| Preferences | Language settings, course filters | 1 year |
| Analytics | Google Analytics 4, page performance | 14 months |
| Marketing | Conversion tracking (with consent) | 90 days |
Managing Cookies
You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality. For non-essential cookies, we display a consent banner allowing you to customize your preferences.
Your Data Rights
Under Singapore's PDPA, you have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you
Correction
Request correction of inaccurate or incomplete data
Deletion
Request deletion of your data (where legally permissible)
Portability
Request your data in a machine-readable format
Consent Withdrawal
Withdraw consent for marketing or optional data uses
Complaint
Lodge a complaint with the Personal Data Protection Commission
How to Exercise Your Rights
To exercise any of these rights, please contact our Data Protection Officer using the details below. We will respond within 30 days of receiving your request. We may need to verify your identity before processing certain requests.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact our Data Protection Officer:
Data Protection Officer
For general enquiries about courses and registrations, please use our Contact Page.