Terms, Privacy and Copyright

Privacy Policy And PDPA Statement

1. About this policy

HRSINGAPORE PTE LTD (UEN 200409860M) (“HRSINGAPORE”, “we”, “us”) respects your privacy. This policy explains how we collect, use, disclose and look after your personal data under Singapore’s Personal Data Protection Act 2012 (“PDPA”). It applies to hrsingapore.org and the other websites, programmes and services we run, including our certifications, training, seminars, consultancy, HRAI and the HR Community. It does not apply to hrmskills.sg, which is operated by HRM SKILLS PTE LTD and has its own privacy policy.

“Personal data” means data about an individual who can be identified from that data, or from that data combined with other information we have or are likely to have access to.

This policy supplements, and does not replace, any other notices or consents you have given us.

2. Personal data we collect

Depending on how you deal with us, we may collect:

• Contact details: name, job title, employer, work or personal email address, telephone and mobile numbers, mailing address.
• Registration and account details: course, certification and event registrations, subscription and membership details, login details.
• Professional background: employment history and educational background, where relevant to a certification or programme.
• Identification numbers: we do not collect NRIC, FIN or passport numbers.
• Payment details: billing name and address and transaction records. Credit card payments are processed by PayPal, which collects and stores your card details under its own privacy policy. We do not store your card details on our systems. If you pay by bank transfer, we receive and keep a record of the payment (such as the payer name, amount, date and reference) so that we can check that payment has been received.
• Website and device data: IP address, browser and device information, pages viewed, and cookie data (see section 8).
• Enquiries and communications: messages you send us, call and WhatsApp records, and conversations with HRAI (see section 7).
• Third parties’ data: details of colleagues, employees or representatives that you give us (see section 4).

3. How we collect your personal data

We collect personal data when you submit forms, register for or attend a course, certification, seminar or webinar, subscribe to the HR Community or a newsletter, open an account, contact or interact with us, respond to our promotions, or use our websites and tools. We may also receive it from your employer when it registers you for a programme.

4. Personal data of other people

If you give us personal data about another person (for example, an employee being registered for training), you confirm that you are entitled to do so, that you have told that person the purposes in this policy, and that you have obtained their consent where the law requires it. Please make sure the data you give us is accurate and complete. If it is not, we may be unable to provide the service you asked for.

5. Why we collect, use and disclose personal data

We do so with your consent, or where the PDPA allows it without consent (for example, where you are deemed to have consented because you gave us the data for a purpose and it was reasonable to do so, where it is necessary to perform a contract with you, or where the law requires it).

Purposes needed to deal with you:

• Registering you for, delivering and administering courses, certifications, seminars and consultancy.
• Issuing certificates, recording attendance and CPD hours, and, if you ask us to, supporting your IHRP certification or re-certification application.
• Creating and managing your account, subscription or membership.
• Processing payments, invoicing and keeping financial records.
• Replying to your questions, feedback and requests, including through HRAI.
• Sending service messages, such as confirmations, schedules, reminders and changes.
• Running, securing and improving our websites, products and services, including analytics, quality assurance and training our staff.
• Meeting legal and regulatory obligations and protecting our legal rights.

Purposes that need your consent (you can say no):

• Sending you newsletters, HR Community updates, and information about our courses, events and services by email, SMS, WhatsApp or telephone.
• Personalised content and advertising based on your preferences.

You can opt out of marketing at any time using the unsubscribe link in our emails or by contacting our Data Protection Officer. Saying no to marketing will not affect services you have asked for.

Do Not Call (DNC) Registry. We will not send marketing messages to Singapore telephone numbers registered on the DNC Registry, including voice calls, SMS and WhatsApp, unless you have given us clear and unambiguous consent to contact you that way, or the PDPA otherwise allows it.

Business purposes. Where the PDPA allows us to use personal data for business improvement or legitimate interests without consent, we will first assess the impact on you and will not use these exceptions for direct marketing.

6. Who we disclose personal data to

We do not sell your personal data. We may disclose it only as needed for the purposes above, to:

• our related companies and subsidiaries involved in providing the service;
• trainers, facilitators and assessors engaged for your programme;
• service providers who process data for us (data intermediaries), such as website hosting, email and CRM, payment, messaging, survey and AI service providers, who are bound to protect it and use it only for our instructions;
• professional bodies or regulators (for example the IHRP), where you ask us to or where required;
• professional advisers, auditors and insurers; and
• government agencies, regulators and courts, where the law requires or permits.

If we sell or restructure our business, personal data may be transferred to the other party under confidentiality obligations and used only for the purposes it was collected for.

7. HRAI, Marcel and AI-assisted tools

HRAI and Marcel are AI assistants on our website. HRAI answers HR, finance and tax questions. Marcel, our HR Learning Coach, builds short personalised courses for HR Community and Corporate Subscribers and emails them to you. To use them, you give us your full name, your work email address and either a session code or a payment reference, and you type your questions. We use this information to verify access, apply daily limits, answer your questions, build and email your course, keep the services secure, and improve HRAI, Marcel and our content. We keep a record of your conversations and of the courses we build for you.

What you type is sent to Anthropic, our AI provider, which may process and store it outside Singapore, including in the United States. We do not authorise Anthropic to use your conversations to train its AI models.

Please do not enter NRIC, FIN or passport numbers, health or financial information, names or identifying details of colleagues or other people, or confidential company information. Describe situations in general terms instead.

HRAI and Marcel can make mistakes. They give general information, not legal, tax or professional advice.

8. Cookies and website analytics

We do not use cookies to collect your name, email address or other contact details. We collect that kind of information only through the forms you submit, as described in this policy.

Our websites use cookies and similar technologies to make the site work, remember your preferences and understand how the site is used. We use Google Analytics to measure website traffic, Google Ads tracking to measure the results of our advertising, and Microsoft Clarity to understand how visitors use our pages. These tools collect general information, such as your device, your browser and the pages you view. You can control or block cookies through your browser settings. Blocking some cookies may affect how the site works.

9. Transfers outside Singapore

Some of our service providers store or process data outside Singapore. Before transferring personal data overseas, we make sure the recipient is bound by legally enforceable obligations, such as contracts, or holds a recognised certification (such as APEC CBPR or PRP), so that your data receives a standard of protection comparable to the PDPA.

10. Protecting your personal data

We make reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or loss of personal data. These include access controls limited to staff with a business need, confidentiality obligations, and secure systems and suppliers. No online transmission is completely secure, so please protect your own passwords and devices.

11. Data breaches

We have procedures to detect, assess and respond to data breaches. If a breach is likely to cause you significant harm, or is of significant scale, we will notify the Personal Data Protection Commission (PDPC) and, where required, you, within the timeframes the PDPA sets (for the PDPC, no later than 3 calendar days after we assess that the breach is notifiable).

12. How long we keep personal data

We keep personal data only as long as needed for the purposes it was collected for, or for legal or business reasons. When it is no longer needed, we delete or anonymise it.

We keep HRAI and Marcel conversation records, and the courses Marcel builds for you, for 12 months after your last use, and then delete them.

13. Your rights: access, correction and withdrawal of consent

Access. You may ask for a copy of the personal data we hold about you and how we have used or disclosed it in the past year.

Correction. You may ask us to correct an error or omission in your personal data. We will correct it as soon as practicable, normally within 30 days, or tell you when we expect to.

Withdrawal of consent. You may withdraw your consent to the collection, use or disclosure of your personal data at any time by giving us reasonable notice. Please allow up to 10 business days for us to process your request. We will tell you the likely consequences, which may include that we can no longer provide certain services to you. Withdrawing consent does not affect processing that does not need consent, or anything done before you withdrew.

To make a request, log in to your account where available, or contact our Data Protection Officer (section 15). We may need to verify your identity, and may charge a reasonable fee for access requests, which we will tell you about first. If we cannot fulfil a request, we will explain why where the law allows. If your data was given to us by your employer or another party, you may need to contact them as well.

14. Children

Our services are meant for working adults and HR professionals. We do not knowingly collect personal data from individuals under 18 without a parent or guardian’s consent. If you think a child has given us personal data, please contact us and we will delete it.

15. Contact our Data Protection Officer

For questions, feedback, complaints, or to make an access, correction or withdrawal request:

• Data Protection Officer: Anthony Peck
• Email: query@hrsingapore.org
• Telephone: (65) 6337-8016 | WhatsApp: (65) 8377-9547
• Address: 180B Bencoolen Street #09-02, The Bencoolen, Singapore 189648

If you are not satisfied with our response, you may contact the PDPC at www.pdpc.gov.sg.

16. Changes to this policy

We may update this policy as our services, technology or the law change. The latest version will be on this page with its “last updated” date, and where a change affects how we use your data in a material way, we will tell you directly or ask for fresh consent where the law requires it.

Last updated: 27 October 2026. Governed by the laws of Singapore.