01
Privacy Definitions
This section clarifies the terminology used throughout the privacy policy to ensure clear understanding of data protection practices.
Personal data refers to any information that identifies or can identify an individual directly or indirectly.
Processing includes all operations performed on personal data, such as collection, storage, use, and deletion.
Users are individuals who access and engage with CyberAwareSpot's training services or website.
Services comprise the IT security awareness and digital literacy training courses provided by CyberAwareSpot.
Cookies are small data files stored on a user's device to improve website functionality and user experience.
CyberAwareSpot processes personal data in accordance with legal requirements applicable within Singapore and relevant data protection standards.
02
Data Collection Practices
We collect certain personal data to facilitate course registration, communication, and service delivery.
In some cases, personal data may be shared with trusted third parties essential for delivering our training services.
03
User-Provided Information
At CyberAwareSpot, we are committed to protecting the personal information you provide when enrolling in our IT security awareness and digital literacy training courses. Your data is collected solely to enhance your learning experience, enable course access, and communicate important updates. All information is handled securely in accordance with Singapore's data protection regulations, ensuring confidentiality and responsible usage throughout your interaction with our services.
- Full name and contact details
- Email address and telephone number
- Professional and educational background information
- Payment and billing details
- Feedback and course evaluation responses
- User account credentials
04
Automatic Data Collection
Certain technical data is collected automatically to improve our website and services.
- IP address and browser type
- Device information and operating system
- Usage data such as pages visited and time spent
- Cookie identifiers and tracking information
- Geolocation data when permitted
- Error reports and diagnostic data
05
Third-Party Data Transfers
In some cases, personal data may be shared with trusted third parties essential for delivering our training services.
- Payment processors for secure transaction handling
- Email and communication service providers
- Technical support and analytic service partners
06
Purpose of Data Collection
Personal data is used strictly for purposes necessary to provide high-quality training and maintain secure service operations.
- Course enrollment and administration
- Processing payments and invoicing
- Communicating course updates and support
- Improving training content based on user feedback
- Ensuring network and data security
- Complying with legal obligations
- Personalizing user experiences and notifications
- Conducting research and analytics on training efficacy
07
Legal Bases for Processing
CyberAwareSpot processes personal data in accordance with legal requirements applicable within Singapore and relevant data protection standards.
- Processing is necessary for contractual obligations with users
- Compliance with applicable legal and regulatory requirements
- Consent obtained from users for specific processing activities
- Legitimate interests pursued by CyberAwareSpot to improve services while respecting privacy
08
Cookies Usage Policy
CyberAwareSpot uses cookies to enhance website usability and gather analytical data for continual improvement.
We utilize essential, functional, and performance cookies tailored to ensure efficient site usage without compromising user privacy.
Cookie categories include session cookies, persistent cookies, and third-party tracking cookies limited to necessary functions.
Users can manage cookie preferences through their browser settings or via provided opt-out options on our website.
Read our full Cookie Policy
09
Data Sharing and Disclosure
Data sharing is limited and controlled, involving only parties essential to delivering our training courses securely.
- External payment gateways for transaction processing
- IT service providers supporting website infrastructure
- Authorized marketing partners with explicit consent
- Regulatory authorities when legally required
- Data analytics and research collaborators under confidentiality agreements
- Subcontractors performing specific training administration roles
10
International Data Transfers
Data may be transferred to countries outside Singapore, where CyberAwareSpot ensures adherence to comparable data protection standards.
Transfers are safeguarded through contractual agreements and adopting recognized frameworks to protect personal data integrity.
11
Data Retention Periods
Data retention periods are designed to balance operational needs with privacy considerations and legal requirements.
User account information is retained for the duration of service use and archived securely thereafter.
Communication records are retained to support service quality and dispute resolution within prescribed timeframes.
Security logs are maintained for monitoring and protecting systems, with periodic reviews and secure disposal.
Data no longer needed or upon user request is deleted or anonymized, except where retention is mandated by law.
12
Data Security Measures
CyberAwareSpot implements multiple technical and organizational measures to protect data from unauthorized access, alteration, loss, or disclosure.
- Encrypted data transmissions using industry-standard protocols
- Secure data centers with restricted physical access
- Regular security assessments and staff training on data protection
13
User Privacy Rights
Users have rights to access, correct, and manage their personal information held by CyberAwareSpot.
- Request access to personal data and obtain copies
- Request correction of inaccurate or incomplete data
- Request deletion or restriction of data processing in certain cases
- Object to data processing based on legitimate interests
- Withdraw consent when processing is consent-based
- File complaints with relevant data protection authorities if concerns arise
- You have the right to withdraw your consent at any time, where processing is based on your consent, without affecting the lawfulness of processing before withdrawal.
- You have the right to submit a complaint to a supervisory authority if you believe your data protection rights have been violated.
14
Compliance with Applicable Laws
CyberAwareSpot is committed to protecting personal data in accordance with applicable data protection regulations, including the SG PDPA and GDPR where applicable.
This Privacy Notice applies to data processed within CyberAwareSpot’s services and applies to individuals located in Singapore, and where relevant, the European Economic Area.
- We collect personal information only for specified, explicit and legitimate purposes related to IT security and digital literacy training services.
- Data collected is adequate, relevant, and limited to what is necessary for our business activities.
- Personal information is stored securely and only retained as long as necessary to fulfill the purposes for which it was collected.
- We ensure appropriate technical and organizational measures to protect personal data against unauthorized access or disclosure.
If you have any concerns about how your personal data is handled, you may contact us or submit a complaint to the relevant data protection authority.
15
Your Data Protection Rights
You can request access, correction, deletion, or portability of your personal data by contacting CyberAwareSpot at our official channels.
[email protected]
We strive to respond to data rights requests within 30 calendar days, in accordance with applicable laws.
16
Marketing Communications
We may send you promotional communications about our training courses with your consent. You may opt out at any time.
You can unsubscribe from marketing messages by following the unsubscribe link found in every email sent or by contacting us.
17
Children’s Privacy
CyberAwareSpot does not knowingly collect or solicit personal data from individuals under the age of 16 without parental consent.
18
Third-Party Links
Our website may contain links to third-party sites; however, we are not responsible for their privacy practices.
19
Changes to This Privacy Notice
We may update this Privacy Notice periodically. Any changes will be posted on our website with the effective date clearly indicated.