Privacy Policy

Our Commitment to Privacy

Stat Labow is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect information when you visit our website or enroll in our courses.

We comply with Singapore's Personal Data Protection Act (PDPA) and follow international best practices for data privacy and security.

1. Information We Collect

Personal Data You Provide

When you interact with our website or services, we may collect:

• Contact Information: Name, email address, phone number, mailing address
• Enrollment Data: Course selections, educational background, professional experience
• Communication Data: Messages sent through contact forms, emails, phone conversations
• Payment Information: Billing details processed through secure payment providers (we do not store complete credit card numbers)
• Account Information: Username, password (encrypted), profile preferences

Usage Data We Collect Automatically

• Technical Information: IP address, browser type and version, device type, operating system
• Website Usage: Pages visited, time spent on pages, navigation paths, referring websites
• Cookie Data: Preferences and settings stored through cookies (see our Cookie Policy for details)
• Analytics Data: Aggregated statistics about website traffic and user behavior

2. How We Use Your Information

We process your personal data for the following purposes:

Service Delivery

• Process course enrollments and manage your participation
• Communicate about course schedules, materials, and updates
• Provide access to course resources and learning platforms
• Issue certificates of completion
• Process payments and maintain financial records

Communication

• Respond to your inquiries and support requests
• Send administrative information about our services
• Provide course updates and educational content
• Send marketing communications (with your consent)

Website Improvement

• Analyze website usage to improve functionality and user experience
• Conduct research and statistical analysis
• Test new features and optimize performance
• Monitor and prevent technical issues

Legal Compliance

• Comply with legal obligations and regulatory requirements
• Protect our legal rights and prevent misuse of services
• Respond to legal requests from authorities

3. Legal Basis for Processing

We process your personal data based on:

• Consent: You have given explicit consent for marketing communications and optional data processing
• Contract: Processing is necessary to provide the courses and services you requested
• Legitimate Interest: We have legitimate business interests in improving our services and preventing fraud
• Legal Obligation: We must process data to comply with Singapore law and tax regulations

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

Service Providers

We work with trusted third-party service providers who assist in:

• Payment processing (secure payment gateways)
• Email delivery and communication services
• Website hosting and cloud storage
• Analytics and website performance monitoring
• Customer relationship management systems

These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our terms and conditions
• Protect the rights, property, or safety of Stat Labow, our users, or others
• Investigate potential violations or fraud

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement robust security measures to protect your personal data:

• Encryption: Data transmitted between your browser and our servers is encrypted using SSL/TLS protocols
• Access Controls: Only authorized personnel have access to personal data, on a need-to-know basis
• Secure Storage: Personal data is stored on secure servers with firewall protection and regular security updates
• Regular Audits: We conduct periodic security assessments and vulnerability testing
• Breach Procedures: We have incident response procedures to address potential data breaches promptly

While we strive to protect your data, no security system is completely impenetrable. We cannot guarantee absolute security but maintain industry-standard protections.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Enrollment Records: Maintained for 5 years after course completion for administrative and certification purposes
• Financial Records: Retained for 7 years as required by Singapore tax regulations
• Marketing Data: Kept until you withdraw consent or request deletion
• Website Usage Data: Typically retained for 26 months for analytics purposes
• Contact Form Submissions: Stored for 3 years or until resolved

After the retention period expires, we securely delete or anonymize your personal data.

7. Your Rights

Under Singapore's PDPA and international privacy standards, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

Right to Data Portability

You can request your data in a structured, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

You can withdraw consent for marketing communications at any time.

How to Exercise Your Rights

To exercise these rights, contact us at:

We will respond to your request within 30 days.

8. International Data Transfers

Your personal data is primarily processed and stored in Singapore. If we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers
• Your explicit consent for specific transfers

9. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.

10. Children's Privacy

Our courses are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware of such collection, we will promptly delete the information.

11. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a notice on our website homepage

Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or complaints about this privacy policy or our data practices, please contact us: