Privacy Policy
Orinthia is committed to handling personal data with care and transparency. This policy explains what information we collect, why we collect it, how it is used, and the choices available to you. It applies to all services offered by Orinthia, including our financial education reading circles and programmes based in Singapore.
For questions about this policy, write to us at [email protected].
1. Data Controller
The data controller responsible for your personal information is:
This policy is governed by the Personal Data Protection Act 2012 (PDPA) of Singapore. Where applicable, we also observe internationally recognised data protection principles.
2. Personal Data We Collect
We collect only what is necessary to provide our educational programmes and respond to enquiries. This may include:
- Contact details — full name, email address, and phone number provided through our contact form or programme enrolment enquiry.
- Programme preferences — the reading circle or workshop you have expressed interest in.
- Correspondence records — messages sent to us and our replies, retained for service continuity.
- Website usage data — browser type, pages visited, and visit duration, collected through analytics cookies where consent is given.
We do not collect sensitive personal data (such as financial account numbers, NRIC numbers, or health information) through any of our website forms or programme materials.
3. How and Why We Use Your Data
Personal data is collected and used for the following purposes, on the legal bases indicated:
Responding to enquiries
Programme administration
Service communications
Website improvement
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
4. How Long We Keep Your Data
- Enquiry records — retained for 12 months from the date of last contact, then securely deleted.
- Programme participant records — retained for 3 years from the end of the programme for administrative and reference purposes.
- Analytics data — anonymised and aggregated; not linked to individual identities.
After the applicable retention period, personal data is permanently deleted or irreversibly anonymised.
5. How We Protect Your Data
We take reasonable and appropriate steps to safeguard personal data against unauthorised access, disclosure, or loss:
- All web forms transmit data over TLS-encrypted connections (HTTPS).
- Access to stored personal data is limited to staff members who require it to fulfil their role.
- We review our data handling practices periodically and address identified risks promptly.
- In the event of a data breach that poses a significant risk of harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) as required under the PDPA.
6. Cookies
Our website uses cookies to function properly and, with your consent, to understand how it is used. We use the following categories:
- Essential cookies — necessary for the website to load and operate correctly. These cannot be disabled.
- Analytics cookies — collect anonymised data on page visits and user journeys to help us improve the site.
- Preference cookies — remember your settings, such as cookie consent choices.
You can review and adjust your cookie preferences at any time on our Cookie Policy page.
7. Your Rights
Under the PDPA, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Withdrawal of consent — withdraw consent for any optional processing at any time, without affecting the lawfulness of prior processing.
- Erasure — in certain circumstances, request that we delete your data.
- Data portability — receive your data in a structured, readable format where technically feasible.
- Complaint — lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe your data has been mishandled.
To exercise any of these rights, write to [email protected]. We will respond within 30 days of receiving a valid request.
8. Third-Party Links
Our website may contain links to external sites — for example, CPF Board publications or government scheme pages. These sites operate under their own privacy policies, and we have no responsibility for how they handle your data. We recommend reviewing the privacy notice of any external site you visit.
9. Minimum Age
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from anyone under 18 years of age. If we become aware that personal data of a minor has been submitted to us, we will delete it without delay.
10. Updates to This Policy
We may revise this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acknowledgement of the revised policy.
11. Contact for Data Enquiries
For any question, access request, or concern relating to your personal data: