Privacy Policy

1. Introduction

Kaya Legacy ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and enrol in our financial education courses. This Privacy Policy explains how we collect, use, retain, and protect personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA").

For questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data that you provide to us directly through our contact form and course enrolment process, including:

• Name and email address (required for enquiries and enrolments)
• Phone number (if provided voluntarily)
• Message content submitted through our contact form
• Course progress and completion records

We also collect non-personal technical data through cookies and analytics tools, including browser type, pages visited, and session duration. Please see our Cookie Policy for details.

We do not collect financial account details, CPF account numbers, or investment portfolio information. We are an education provider and have no need for such data.

3. How We Use Your Data

Personal data collected is used for the following purposes:

• Responding to course enquiries and providing enrolment information
• Processing course enrolments and delivering study materials
• Sending course-related updates, including notifications when material has been revised
• Issuing completion records at the end of a course
• Improving our course content based on aggregate learner feedback

The legal bases for processing under the PDPA include consent (for marketing communications) and contractual necessity (for course delivery).

We do not use personal data to profile learners for commercial purposes or share data with financial product providers.

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Contact form enquiries: up to 12 months from the date of submission
• Enrolment and course records: up to 5 years from course completion, to allow reissue of completion records if requested
• Analytics data: retained in aggregated, anonymised form only

5. Data Sharing

We do not sell personal data. We may share data with service providers engaged to support our operations, including:

• Web hosting and email service providers
• Analytics providers (in anonymised or aggregated form)
• Payment processors (for course enrolment transactions)

All third-party providers are required to handle personal data in accordance with applicable data protection law. We do not share personal data with financial institutions, fund managers, or distribution platforms.

6. Data Protection Measures

We implement reasonable security measures to protect personal data against unauthorised access, disclosure, or loss, including:

• Encrypted transmission via HTTPS for all web pages
• Access controls limiting who within our organisation can view personal data
• Regular review of data handling practices

In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission as required under the PDPA Notification Obligation.

7. Cookies

We use cookies to understand how visitors engage with our website. For a full description of the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights Under the PDPA

As a data subject under Singapore's Personal Data Protection Act, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent to marketing communications at any time
• Request the cessation of use of your personal data for certain purposes

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You may also direct complaints to the Personal Data Protection Commission at www.pdpc.gov.sg.

9. Third-Party Links

Our website may contain links to external sites, including MAS MoneySense and CPF Board resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly.

10. Children's Privacy

Kaya Legacy's courses are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete the data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the Last Updated date at the top of this page. Continued use of our website or courses after changes are published constitutes acceptance of the revised policy.

12. Contact Information

For any privacy-related enquiries, please contact us at:

Kaya Legacy
63 Anson Road, #21-06, Singapore 079914
Email: [email protected]
Phone: +65 6715 9438