Privacy Policy

Section 1

Introduction and Scope

Cahaya ("we", "us", "our") is registered and operates in Singapore. We are the data controller for personal information you provide when using our website at cahaya.live or when enquiring about or enrolling in our programmes.

This policy applies to all personal data collected through our website enquiry form, email correspondence, telephone conversations, and programme enrolment. It does not apply to third-party websites linked from our pages.

Questions about this policy may be directed to [email protected].

Section 2

What We Collect and Why

We collect the following categories of personal data:

• Contact information — name, email address, and telephone number, provided voluntarily when you use our enquiry form or contact us directly. This is used to respond to your questions and to manage your enrolment.
• Correspondence records — notes from email or telephone exchanges, retained so that we can continue a conversation with appropriate context.
• Website usage data — anonymised information collected via cookies and analytics tools, including pages visited and browser type. This helps us understand how the site is used and how we may improve it.
• Enrolment information — programme preferences and scheduling details provided when you register for a course or the Bamboo Track.

The legal bases for processing are: consent (for communications and analytics), legitimate interest (for website security and service improvement), and contractual necessity (for programme delivery).

Section 3

How Long We Keep Your Data

We retain personal data only for as long as it serves the purpose for which it was collected:

• Enquiry correspondence that does not lead to enrolment: 12 months from the last exchange.
• Enrolment and programme records: 5 years from programme completion, in accordance with Singapore's business record requirements.
• Cookie and analytics data: up to 13 months, depending on the tool used.

Once the retention period expires, data is deleted or anonymised in a manner that prevents reconstruction of personal identifiers.

Section 4

How We Use Your Information

Your personal data is used for the following purposes:

• Responding to your enquiries and arranging programme enrolments.
• Sending confirmation, scheduling, and programme-related correspondence.
• Improving our website and service offering using anonymised analytics data.
• Complying with legal or regulatory obligations applicable in Singapore.

We do not use your data for automated decision-making or profiling. We do not use your data for direct marketing unless you have expressly indicated that you would welcome updates, and you may withdraw that indication at any time.

Section 5

Sharing Your Data with Third Parties

We do not sell or rent your personal data. We may share information in a limited and careful way with:

• Service providers — hosting and email delivery providers operating under contractual obligations of confidentiality.
• Analytics platforms — anonymised usage data shared with web analytics services to help us understand site performance.
• Legal authorities — where required by Singapore law or a valid court order.

Any third party that processes data on our behalf is required to handle it only for the stated purpose and to maintain appropriate security measures.

Section 6

How We Protect Your Data

We take reasonable and appropriate steps to protect personal data from unauthorised access, disclosure, alteration, or loss:

• Our website uses HTTPS encryption for all data in transit.
• Access to personal records is limited to staff with a clear reason to view them.
• We conduct periodic reviews of our data handling practices.
• In the event of a data breach that may affect your rights, we will notify affected individuals promptly and report to the Personal Data Protection Commission (PDPC) of Singapore where required.

Section 7

Cookies

Our website uses cookies to support basic site functionality and to gather anonymised usage information. Essential cookies are necessary for the site to work and cannot be disabled. Optional analytics and preference cookies may be accepted or declined using the cookie consent panel that appears on your first visit.

A full description of the cookies we use, their purposes, and how to manage them is available in our Cookie Policy.

Section 8

Your Rights Under the PDPA

Singapore's Personal Data Protection Act (PDPA) gives you rights in relation to your personal data held by us:

• Access — you may request a copy of the personal data we hold about you.
• Correction — you may ask us to correct inaccurate or incomplete data.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.
• Erasure — you may ask us to delete your data where there is no longer a lawful basis for retaining it.
• Complaint — you may lodge a complaint with the Personal Data Protection Commission at www.pdpc.gov.sg.

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

Section 9

Links to Other Websites

Our website may contain links to external resources for reference. We are not responsible for the privacy practices of those sites and encourage you to read their policies before sharing any personal information with them.

Section 10

Minimum Age

Our programmes are designed for adults, and our website is not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted information through our site, please contact us and we will remove it promptly.

Section 11

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. Material changes will be noted at the top of this page with a revised "Last Updated" date. Continued use of our website following a change constitutes acceptance of the revised policy.

Section 12

Contact Us About This Policy

If you have a question about how we handle your personal data, please reach us at:

• Email: [email protected]
• Post: Cahaya, 58 Tras Link, #11-03, Singapore 079044
• Telephone: +65 6645 2807