1. About this policy

HRSINGAPORE PTE LTD (UEN 200409860M) (“HRSINGAPORE”, “we”, “us”) respects your privacy. This policy explains how we collect, use, disclose and look after your personal data under Singapore’s Personal Data Protection Act 2012 (“PDPA”). It applies to hrsingapore.org and the other websites, programmes and services we run, including our certifications, training, seminars, consultancy, HRAI and the HR Community. It also applies to hrmskills.sg.

“Personal data” means data about an individual who can be identified from that data, or from that data combined with other information we have or are likely to have access to.

This policy supplements, and does not replace, any other notices or consents you have given us.

2. Personal data we collect

Depending on how you deal with us, we may collect:

  • Contact details: name, job title, employer, work or personal email address, telephone and mobile numbers, mailing address.
  • Registration and account details: course, certification and event registrations, subscription and membership details, login details.
  • Professional background: employment history and educational background, where relevant to a certification or programme.
  • Identification numbers: we collect NRIC, FIN or passport numbers only where the law requires it, or where it is necessary to establish your identity accurately for a certification or assessment. [Confirm which programmes actually need this.]
  • Payment details: billing name and address and transaction records. Card and bank details are handled by our payment provider and are not stored on our systems. [Confirm.]
  • Website and device data: IP address, browser and device information, pages viewed, and cookie data (see section 8).
  • Enquiries and communications: messages you send us, call and WhatsApp records, and conversations with HRAI (see section 7).
  • Third parties’ data: details of colleagues, employees or representatives that you give us (see section 4).

3. How we collect your personal data

We collect personal data when you submit forms, register for or attend a course, certification, seminar or webinar, subscribe to the HR Community or a newsletter, open an account, contact or interact with us, respond to our promotions, or use our websites and tools. We may also receive it from your employer when it registers you for a programme.

4. Personal data of other people

If you give us personal data about another person (for example, an employee being registered for training), you confirm that you are entitled to do so, that you have told that person the purposes in this policy, and that you have obtained their consent where the law requires it. Please make sure the data you give us is accurate and complete. If it is not, we may be unable to provide the service you asked for.

5. Why we collect, use and disclose personal data

We do so with your consent, or where the PDPA allows it without consent (for example, where you are deemed to have consented because you gave us the data for a purpose and it was reasonable to do so, where it is necessary to perform a contract with you, or where the law requires it).

Purposes needed to deal with you:

  • Registering you for, delivering and administering courses, certifications, seminars and consultancy.
  • Issuing certificates, recording attendance and CPD hours, and, if you ask us to, supporting your IHRP certification or re-certification application.
  • Creating and managing your account, subscription or membership.
  • Processing payments, invoicing and keeping financial records.
  • Replying to your questions, feedback and requests, including through HRAI.
  • Sending service messages, such as confirmations, schedules, reminders and changes.
  • Running, securing and improving our websites, products and services, including analytics, quality assurance and training our staff.
  • Meeting legal and regulatory obligations and protecting our legal rights.

Purposes that need your consent (you can say no):

  • Sending you newsletters, HR Community updates, and information about our courses, events and services by email, SMS, WhatsApp or telephone.
  • Personalised content and advertising based on your preferences.

You can opt out of marketing at any time using the unsubscribe link in our emails or by contacting our Data Protection Officer. Saying no to marketing will not affect services you have asked for.

Do Not Call (DNC) Registry. We will not send marketing messages to Singapore telephone numbers registered on the DNC Registry, including voice calls, SMS and WhatsApp, unless you have given us clear and unambiguous consent to contact you that way, or the PDPA otherwise allows it.

Business purposes. Where the PDPA allows us to use personal data for business improvement or legitimate interests without consent, we will first assess the impact on you and will not use these exceptions for direct marketing.

6. Who we disclose personal data to

We do not sell your personal data. We may disclose it only as needed for the purposes above, to:

  • our related companies and subsidiaries involved in providing the service;
  • trainers, facilitators and assessors engaged for your programme;
  • service providers who process data for us (data intermediaries), such as website hosting, email and CRM, payment, messaging, survey and AI service providers, who are bound to protect it and use it only for our instructions;
  • professional bodies or regulators (for example the IHRP), where you ask us to or where required;
  • professional advisers, auditors and insurers; and
  • government agencies, regulators and courts, where the law requires or permits.

If we sell or restructure our business, personal data may be transferred to the other party under confidentiality obligations and used only for the purposes it was collected for.

7. HRAI and AI-assisted tools

HRAI on our website uses a third-party AI service to generate answers. What you type into HRAI may be sent to that provider, which may be outside Singapore, so please do not enter NRIC numbers, payment details or sensitive information about yourself or others. We use these conversations to answer you, keep the service secure, and improve its quality. HRAI gives general information, not legal or professional advice.

8. Cookies and website analytics

Our websites use cookies and similar technologies to make the site work, remember your preferences, measure traffic and, where you agree, support marketing. You can control cookies through your browser settings and our cookie banner. Blocking some cookies may affect how the site works.

9. Transfers outside Singapore

Some of our service providers store or process data outside Singapore. Before transferring personal data overseas, we make sure the recipient is bound by legally enforceable obligations, such as contracts, or holds a recognised certification (such as APEC CBPR or PRP), so that your data receives a standard of protection comparable to the PDPA.

10. Protecting your personal data

We make reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or loss of personal data. These include access controls limited to staff with a business need, confidentiality obligations, and secure systems and suppliers. No online transmission is completely secure, so please protect your own passwords and devices.

11. Data breaches

We have procedures to detect, assess and respond to data breaches. If a breach is likely to cause you significant harm, or is of significant scale, we will notify the Personal Data Protection Commission (PDPC) and, where required, you, within the timeframes the PDPA sets (for the PDPC, no later than 3 calendar days after we assess that the breach is notifiable).

12. How long we keep personal data

We keep personal data only as long as needed for the purposes it was collected for, or for legal or business reasons. When it is no longer needed, we delete or anonymise it.

13. Your rights: access, correction and withdrawal of consent

Access. You may ask for a copy of the personal data we hold about you and how we have used or disclosed it in the past year.

Correction. You may ask us to correct an error or omission in your personal data. We will correct it as soon as practicable, normally within 30 days, or tell you when we expect to.

Withdrawal of consent. You may withdraw your consent to the collection, use or disclosure of your personal data at any time by giving us reasonable notice. Please allow up to 10 business days for us to process your request. We will tell you the likely consequences, which may include that we can no longer provide certain services to you. Withdrawing consent does not affect processing that does not need consent, or anything done before you withdrew.

To make a request, log in to your account where available, or contact our Data Protection Officer (section 15). We may need to verify your identity, and may charge a reasonable fee for access requests, which we will tell you about first. If we cannot fulfil a request, we will explain why where the law allows. If your data was given to us by your employer or another party, you may need to contact them as well.

14. Children

Our services are meant for working adults and HR professionals. We do not knowingly collect personal data from individuals under 18 without a parent or guardian’s consent. If you think a child has given us personal data, please contact us and we will delete it.

15. Contact our Data Protection Officer

For questions, feedback, complaints, or to make an access, correction or withdrawal request:

  • Data Protection Officer: Anthony Peck
  • Email: query@hrsingapore.org
  • Telephone: (65) 6337-8016 | WhatsApp: (65) 8377-9547
  • Address: 180B Bencoolen Street #09-02, The Bencoolen, Singapore 189648

If you are not satisfied with our response, you may contact the PDPC at www.pdpc.gov.sg.

16. Changes to this policy

We may update this policy as our services, technology or the law change. The latest version will be on this page with its “last updated” date, and where a change affects how we use your data in a material way, we will tell you directly or ask for fresh consent where the law requires it.

Last updated: 7 October 2026. Governed by the laws of Singapore.