Legal
Privacy Policy
Last Updated: 12 May 2025 · Effective Date: 12 May 2025
This Privacy Policy explains how Tarrith ("we", "our", "us") collects, uses, stores, and protects personal data in connection with our educational reading programmes and associated enquiry processes. We are committed to handling personal data responsibly and in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).
By using our website or submitting an enquiry form, you acknowledge that you have read and understood this policy. If you have questions, please contact us at [email protected].
01
Data We Collect
We collect personal data in the following ways:
- Enquiry forms: name, email address, telephone number (optional), message content
- Programme enrolment: full name, email address, telephone number, payment details (processed via third-party payment provider)
- Website analytics: anonymised usage data, browser type, pages visited, session duration (where analytics cookies are accepted)
- Cookies: see our Cookie Policy for details
We do not collect sensitive personal data (such as financial account information, health data, or identity document numbers) in connection with programme enrolment.
02
How We Use Your Data
Personal data we collect is used for the following purposes:
- Responding to enquiries about our programmes
- Processing and confirming programme enrolments
- Sending pre-programme reading materials and session reminders
- Administering cohort communications within an enrolled programme
- Improving our website and programme materials based on anonymised usage patterns
- Meeting any legal or regulatory obligations that apply to us
We do not use personal data for automated decision-making or profiling. We do not sell or rent personal data to third parties.
03
Legal Basis for Processing
Under the PDPA, we process personal data on the following bases:
- Consent: where you have submitted an enquiry form or ticked a consent option
- Contractual necessity: to deliver programme services you have enrolled in
- Legitimate interests: for internal administration and website improvement, where not overridden by your interests
04
Data Retention
We retain personal data for the following periods:
- Enquiry form submissions not resulting in enrolment: 12 months
- Programme participant records: 3 years from programme completion date
- Payment records: 7 years (as required under Singapore financial record-keeping obligations)
- Website analytics data: 26 months (anonymised)
After the applicable retention period, personal data is securely deleted or anonymised.
05
Data Security
We maintain appropriate technical and organisational measures to protect personal data, including:
- Secure hosting with encrypted data transmission (HTTPS)
- Restricted staff access to personal data on a need-to-know basis
- Regular review of access controls and data handling procedures
- Prompt notification procedures in the event of a data breach affecting your rights
06
Third Parties
We may share personal data with the following categories of third-party service providers, solely as necessary to deliver our services:
- Website hosting and infrastructure providers
- Payment processing providers (who receive payment data directly; we do not store card details)
- Email delivery services used to send programme communications
All third-party service providers are required to handle data securely and only as instructed by us. We do not pass data to financial institutions, product providers, or marketing agencies.
07
Cookies
Our website uses cookies for essential functionality and, where you consent, for anonymised analytics. We do not use marketing or tracking cookies without your consent. Full details are set out in our Cookie Policy.
08
Your Rights
Under the PDPA, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent to the use of your data (where consent was the basis for processing)
- Request deletion of your data, subject to our legal retention obligations
- Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your data has been mishandled
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
09
External Links
Our website may contain links to external sites, including Singapore government scheme documentation (CPF Board, MAS, SSB). We are not responsible for the privacy practices of those sites and recommend reading their privacy policies separately.
10
Children's Privacy
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
11
Policy Updates
We may update this policy from time to time. Where changes are material, we will notify enrolled participants by email. The current version is always available at this URL. Continued use of our website after an update constitutes acceptance of the revised policy.
12
Contact for Data Matters
Data controller: Tarrith
152 Beach Road, #21-08, Gateway East, Singapore 189721
Email: [email protected]
For complaints regarding data protection in Singapore, you may also contact the Personal Data Protection Commission at www.pdpc.gov.sg.