Privacy Policy

1. Introduction

Kampong Finance Pte. Ltd. ("Kampong Finance", "we", "us", or "our") is committed to protecting the personal data of individuals who interact with our organisation. This Privacy Policy describes how we collect, use, disclose, and protect personal data in connection with our financial education courses and related activities.

This policy is made in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect only the personal data that is necessary to deliver our courses and operate our organisation. This includes:

• Name and contact details (email address, phone number) provided when submitting an enquiry or enrolling
• Correspondence sent to us by email or through our website contact form
• Payment information (processed through our payment provider — we do not store card details)
• Feedback form responses submitted after course completion
• Technical data collected automatically when visiting our website (IP address, browser type, pages visited, via cookies — see Section 6)

We do not collect sensitive personal data such as NRIC numbers, financial account details, or health information.

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to course enquiries and processing enrolments
• Administering course delivery, including sharing session links and materials with enrolled participants
• Communicating changes to course schedules, cohort dates, or cancellations
• Issuing completion certificates
• Processing refund requests or cohort transfer arrangements
• Sending occasional updates about new course offerings, where you have given consent
• Improving our website and course delivery through aggregated analytics data

Legal basis for processing: consent (for marketing communications), contract performance (for course delivery), and legitimate interests (for website operation and security).

4. Data Retention

Enrolment and course records are retained for five years after the final session of the relevant course cohort, for administrative and legal compliance purposes. Enquiry records where no enrolment followed are deleted within twelve months. Marketing consent records are retained until consent is withdrawn. Website analytics data is retained in anonymised, aggregated form.

5. Data Sharing

We do not sell personal data. We may share data with the following categories of third parties only as necessary:

• Payment processors (for processing course fees — they handle payment data under their own PDPA-compliant arrangements)
• Video conferencing providers (for delivering live sessions — only names and email addresses required for access)
• Email service providers (for sending course-related communications)
• Analytics services (for aggregated, anonymised website usage data)

We do not share data with financial product providers, insurers, or advisory firms. We receive no referral fees and do not share participant information with commercial third parties for marketing purposes.

6. Cookies

We use cookies to support basic website function and to understand how visitors use our site. Essential cookies cannot be disabled without affecting how the site operates. Optional analytics and marketing cookies are only placed with your consent, which you can manage through the cookie banner on our homepage or via our Cookie Policy page.

7. Data Protection Measures

We maintain reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure, including:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting who within our organisation can view participant data
• Regular review of data stored and deletion of data no longer required
• Third-party service selection based in part on data protection commitments

In the event of a data breach affecting personal data, we will notify affected individuals and the Personal Data Protection Commission (PDPC) in accordance with the PDPA's mandatory data breach notification obligations.

8. Your Rights

Under Singapore's PDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for use of your data for marketing purposes at any time
• Request deletion of personal data where we no longer have a legal basis to retain it
• Port certain data in a machine-readable format where technically feasible
• Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg if you believe your rights have been infringed

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites, including CPF Board, MAS, and MoneySense. We are not responsible for the privacy practices of those sites and encourage you to review their privacy notices directly.

10. Children's Privacy

Our courses are designed for adults and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated by email to enrolled participants and by a notice on our website. Continued use of our services after a change takes effect constitutes acceptance of the revised policy.

12. Contact

For all privacy-related enquiries: