Our Privacy Policy
1. Introduction​
We’re committed to protecting your privacy and handling personal data with transparency and care. This policy explains how we collect, use, disclose, and safeguard your information in compliance with Singapore’s Personal Data Protection Act (PDPA).
​
2. Data Protection Obligations at a Glance
We follow PDPA’s core obligations: Accountability, Consent, Purpose Limitation, Notification, Access & Correction, Accuracy, Protection, Retention Limitation, Transfer Limitation, Data Breach Notification, and Openness.
​
3. What We Collect
We aim to collect only what's necessary:
​
A. Personal Data You Provide for Enquiry Purpose
-
Contact details: Name, phone number, email address.
-
Child’s info: Name, age/date of birth, developmental background (e.g., speech concerns).
-
Appointment details: Preferred times, referral info, or correspondence messages.
-
Billing info (if applicable): e.g., invoicing email/phone.
B. Technical & Website Data
-
Usage analytics: IP address, device, browser type — collected for site performance.
C. Children under 15
We do not knowingly collect personal data from children under 15 without parental consent. If discovered unintentionally, we’ll immediately delete it.
​
4. How We Use Your Data
Your information may be used to:
-
Respond to inquiries and schedule sessions.
-
Provide therapy services and follow-up.
-
Send service-related updates (only with explicit consent for marketing).
-
Improve our website experience and service delivery.
-
Fulfill legal or regulatory obligations.
-
Notify you in case of a data breach (if required).
Health-related data will never be used for targeted advertising.
​
5. Who We Share It With
We do not sell or rent your data. Possible disclosures include:
-
Third-party service providers (e.g. booking systems, email tools).
-
Legal authorities, if required by law.
-
Trusted partners — only with your explicit consent.
​
6. Your Rights & Choices
You have the right to:
-
Access or correct your personal data.
-
Withdraw consent for data use—just contact us (see Section 11).
-
Request deletion, subject to legal retention requirements.
We’ll respond to requests within a reasonable timeframe (typically ?? business days).
​
7. Security Measures
We protect your data using robust technical and organizational safeguards, like encryption, access controls, and secure storage. While we strive for security, no internet transmission is risk-free.
​
8. Retention & Disposal
We’ll retain your data only as long as it’s needed for service provision or legal compliance. Once it’s no longer required, we’ll securely delete or anonymize it.
​
9. Data Breach Protocol
In the unlikely event of a breach posing significant risk, we’ll promptly notify both the PDPC and affected individuals, per PDPA requirements.
​
10. Policy Updates
We may update this policy from time to time. Any material changes will be posted here with an updated effective date. It’s your responsibility to review periodically.
​
11. Contact & DPO
For questions or to exercise any PDPA-related rights, contact our Data Protection Officer (DPO) at info@speechalliance.com