Legal

Privacy Policy

Last Updated: 12 May 2025  |  Effective Date: 12 May 2025

Caventra ("we", "us", "our") is committed to protecting the personal data of individuals who interact with us in connection with our financial education reading programmes. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under the Personal Data Protection Act 2012 (PDPA) of Singapore.

1. About Us and This Policy

Caventra is the data controller for personal data collected through our website and programme enrolment processes. We are based at 1 Phillip Street, #15-01, Royal One Phillip, Singapore 048692. This policy applies to personal data collected from individuals who enquire about or enrol in our reading programmes, visit our website, or otherwise interact with us.

2. Personal Data We Collect

Data You Provide

• Full name
• Email address
• Phone number (if provided)
• Any additional information included in enquiry messages

Data Collected Automatically

• Browser type and version
• Pages visited and time spent on site
• Referring URLs
• Cookie data (see Section 5 and our Cookie Policy)

Legal Basis for Processing

We process your personal data on the following bases: (a) with your consent, where you have provided it; (b) as necessary to respond to your enquiry or to fulfil a programme enrolment; (c) in pursuance of our legitimate interest in improving our services and website.

Retention Period

Enquiry data is retained for up to 24 months from the date of last contact. Programme participant records are retained for up to 5 years from the end of the programme, after which they are securely deleted or anonymised.

3. How We Use Personal Data

• To respond to enquiries about our programmes
• To manage programme enrolments and cohort administration
• To send programme-related correspondence (schedules, materials, updates)
• To send information about future Caventra programmes where you have opted in
• To improve our website and programme offerings through analytics
• To comply with applicable legal obligations

We do not use personal data for automated decision-making or profiling. We do not share personal data with financial product providers or any entity with a commercial interest in participants' financial decisions.

4. Data Sharing

We share personal data only with third parties that are necessary to operate our programmes and website. These may include:

• Website hosting and email service providers
• Analytics providers (e.g. Google Analytics, in anonymised or aggregated form where possible)
• Venue management where required for session administration

All third parties with whom we share data are required to handle it in accordance with applicable data protection law. We do not sell personal data to any third party.

5. Cookies

Our website uses cookies to support basic functionality and to understand how pages are used. You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.

6. Data Protection Measures

• Personal data in transit is protected by TLS encryption
• Access to personal data is limited to staff with a need to handle it
• We conduct periodic reviews of our data handling practices
• In the event of a data breach that is likely to affect your rights, we will notify the relevant parties in accordance with PDPA obligations

7. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act 2012, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to the use of your data for marketing purposes
• Request the deletion of personal data we no longer have a legitimate basis to retain

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies before providing any personal data.

9. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through our website, please contact us and we will arrange for it to be deleted.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the revised policy. Where required by law, we will notify affected individuals directly.

11. Contact Us

For any questions relating to this Privacy Policy or to personal data we hold about you, please contact: