Privacy Policy - ledger posia

1. Introduction and Scope

This privacy policy applies to all personal data collected through:

Our website and online platforms
Course enrollment and registration processes
Communication channels including email and contact forms
Student portals and learning management systems
Marketing and promotional activities

By using our services, you acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein.

2. Information We Collect

Personal Identification Information

We collect the following types of personal data:

Contact details: Name, email address, phone number, mailing address
Account information: Username, password, profile details
Educational background: Prior qualifications, work experience, professional certifications
Payment information: Billing address, payment method details (processed securely through third-party providers)
Identification documents: When required for certification purposes

Usage and Technical Data

We automatically collect certain information when you visit our website:

Device information: IP address, browser type, operating system, device identifiers
Usage patterns: Pages visited, time spent on site, click paths, course progress
Location data: General geographic location based on IP address
Cookies and tracking: As detailed in our Cookie Policy

Communication Data

Messages sent through contact forms or email
Customer service interactions and support tickets
Feedback, reviews, and testimonials you provide
Survey responses and research participation

3. How We Use Your Information

We process your personal data for the following purposes:

Service Delivery

Processing course enrollments and managing student accounts
Delivering course materials, assignments, and assessments
Tracking course progress and issuing certifications
Providing customer support and responding to inquiries
Facilitating communication between instructors and students

Business Operations

Processing payments and managing billing records
Maintaining accurate records for tax and regulatory compliance
Analyzing course effectiveness and student satisfaction
Improving our curriculum and teaching methods
Protecting against fraud and unauthorized access

Marketing and Communication

Sending course updates, newsletters, and promotional materials (with consent)
Notifying you about new courses, special offers, and educational resources
Conducting market research and gathering feedback
Personalizing content and recommendations based on your interests

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract fulfillment: To provide the courses and services you have enrolled in
Consent: For marketing communications and optional data collection
Legitimate interests: For business operations, security, and service improvement
Legal obligation: For tax reporting, regulatory compliance, and record-keeping

5. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with:

Service Providers

Payment processors: Stripe, PayPal for secure payment handling
Email services: For sending course communications and newsletters
Cloud storage providers: For hosting course materials and student data
Analytics platforms: Google Analytics for website performance monitoring

All service providers are bound by data protection agreements and process data only as instructed by us.

Legal Requirements

We may disclose your information when required by law:

In response to valid legal processes such as court orders or subpoenas
To comply with regulatory requirements and government requests
To protect our legal rights, property, or safety
To prevent fraud, security breaches, or illegal activities

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6. Data Security Measures

We implement comprehensive security measures to protect your personal data:

Technical Safeguards

Encryption: SSL/TLS encryption for data transmission, encrypted storage for sensitive information
Access controls: Role-based access restrictions, multi-factor authentication
Network security: Firewalls, intrusion detection systems, regular security audits
Data backups: Regular automated backups with secure off-site storage

Organizational Safeguards

Employee training on data protection and privacy practices
Confidentiality agreements with all staff members
Limited access to personal data on a need-to-know basis
Regular security assessments and vulnerability testing

Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours, as required by law, and provide details about the incident and steps taken to address it.

7. Data Retention

We retain your personal data for different periods depending on the type of information and purpose:

Student records: 5 years after course completion for certification verification
Financial records: 7 years as required by Singapore tax regulations
Marketing data: Until you withdraw consent or request deletion
Website analytics: 26 months (standard Google Analytics retention)
Communication records: 3 years for customer service and support purposes

After the retention period expires, we securely delete or anonymize your personal data unless longer retention is required by law.

8. Your Rights and Choices

Under Singapore's Personal Data Protection Act (PDPA) and other applicable laws, you have the following rights:

Access and Portability

Right to access: Request a copy of your personal data we hold
Right to data portability: Receive your data in a structured, machine-readable format
We will provide the requested information within 30 days

Correction and Deletion

Right to rectification: Correct inaccurate or incomplete personal data
Right to erasure: Request deletion of your personal data (subject to legal obligations)
Right to restriction: Limit how we process your data in certain circumstances

Consent and Objection

Right to withdraw consent: Revoke consent for marketing communications or optional data processing
Right to object: Object to processing based on legitimate interests
Right to opt-out: Unsubscribe from marketing emails at any time

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: [email protected]

Response time: Within 30 days of receiving your request

We may require verification of your identity before processing your request to ensure data security.

9. International Data Transfers

While we primarily operate in Singapore, some of our service providers may process data in other countries. When transferring data internationally, we ensure adequate protection through:

Standard contractual clauses approved by regulatory authorities
Adequacy decisions confirming similar data protection standards
Privacy Shield or equivalent frameworks for transfers to specific countries
Binding corporate rules for transfers within corporate groups

10. Children's Privacy

Our courses are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years old. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. Third-Party Links

Our website may contain links to external websites, social media platforms, or third-party services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Links to third parties do not imply endorsement of their content, products, or services.

12. Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. When we make material changes, we will:

Update the "Last Updated" date at the top of this page
Display a prominent notice on our website homepage
Send email notifications to registered users for significant changes
Request renewed consent if required by law

Continued use of our services after policy changes indicates acceptance of the updated terms.

13. Contact Information

For questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Data Protection Officer

Email: [email protected]

Business Hours: Monday to Friday, 9:00 AM - 6:00 PM SGT

Response Time: We aim to respond to all privacy inquiries within 48 hours

For general course inquiries, please use our main contact form at Contact Us

14. Complaints and Regulatory Authority

If you believe we have not handled your personal data appropriately, you have the right to file a complaint with:

Personal Data Protection Commission (PDPC) - Singapore

Website: www.pdpc.gov.sg

Email: [email protected]

However, we encourage you to contact us first so we can address your concerns directly and work towards a satisfactory resolution.