Website Privacy Policy

1. Collection of Information

When you enroll as a student or sign up for any courses or subscription (“learner”) on our site or related courses, we collect personal information such as your name, phone number, and email address. What we collect, and why, depends on the form you use:

• Free course accounts (the free 30-day course sign-up): your name and email address, to create your Study Hub account, enrol you in the course you chose, and send your login details and emails about that course.
• Enquiry and trial lesson forms: your name, phone or WhatsApp number, email address (optional on most forms), whether you are a parent or a student, the student's level and school, and your message, to answer your enquiry, arrange a trial lesson and follow up on that request.
• Class registrations and purchases (for example HeadStart, Exam Sprint, holiday programmes and online courses): contact and student details and, where something is posted to you, a delivery address, to process your registration or order, deliver materials, and send receipts and class updates.
• Email sign-ups (the subscribe boxes on our blog, free resources and website footer): your email address, whether you are a parent or a student, and the level, to send you the emails you asked for.
• Book video access (redeeming a book on the Study Hub): your account details and the book you redeemed, to give you the videos that come with it.
• Referral form: your details and those of the friend you refer, to handle the referral and any reward.

When you agree to receive marketing emails, we also keep a record of that consent: the wording you agreed to, the date and time, the page or form you used, and your browser's IP address and user agent. We also collect information automatically through cookies, as described in section 7.

Email Marketing: We send service emails that you need for something you signed up for or bought: login details, receipts, class and registration updates, your course progress and changes to a course. We may also survey you about your usage or collect your opinion. We send marketing emails (study tips, Parent Notes, programme news and offers) only after you have agreed to receive them or, for current tuition families, after we have told you about them and given you the chance to say no, as described in section 2.

2. Consent

How We Obtain Your Consent: By providing us with personal information to become a learner on our site, make a purchase, submit a form, or participate in a course, you consent to our collecting, using and disclosing it for the purposes described for that form in section 1. If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your expressed consent.

Marketing Emails: Marketing emails start in one of two ways. If you sign up on our website, by ticking the box on one of our forms (it is never ticked for you) or by using one of our email sign-up boxes, we first send an email asking you to confirm, and marketing emails start only after you confirm. If your child attends our tuition classes, our first Parent Notes email explains what we will send and includes a one-click link to opt out; if you do not opt out within 14 days, we continue to send you these emails. You can choose which kinds of emails you receive. Students in Primary 6, Secondary 1 and 2, and IP Years 1 and 2, some of whom are under 13, are asked to have a parent sign up for them instead.

Advertising Measurement: Only if you have accepted advertising in our cookie banner, when you submit a form or make a purchase we send Meta (Facebook) and Google a hashed (one-way encrypted) copy of contact details such as your email address, phone number and name, together with the type of action you took. They match these hashed details against their own users to tell us whether our ads led to a sign-up, enquiry or purchase. If you decline, or have not made a choice yet, we send them nothing that identifies you. This applies in every country, Singapore included. We do not send them your details in readable form, we do not sell your personal data, and we do not let others use it for their own marketing.

Phone, SMS and WhatsApp: If you send us an enquiry, trial request or registration, we may follow up by WhatsApp, phone call or SMS about that request. We do not send marketing messages by phone, SMS or WhatsApp to a Singapore number listed on the Do Not Call Registry, unless you have given us clear and unambiguous consent or an exemption under the PDPA applies.

Withdrawal of Consent: You may withdraw your consent at any time. To stop marketing emails, use the unsubscribe link at the bottom of any marketing email. This takes effect straight away for future emails, although an email that is already being sent may still arrive. To withdraw consent for us to contact you, or for the continued collection, use, or disclosure of your information, contact us at contact@timganmath.edu.sg. We will act on an emailed request within 10 working days. Withdrawing consent for a class or course you are using may mean we can no longer provide it, and we will tell you if so. Unsubscribing from marketing emails does not stop service emails about something you signed up for or bought.

3. Disclosure

We share personal data only with service providers who help us run our classes, courses and website. They may use it only to provide their service to us. They include website and database hosting (Vercel, Supabase), email delivery, payment processing (Stripe), the messaging tools our staff use to answer you (such as WhatsApp and Telegram), and advertising measurement in hashed form (Meta and Google, as described in section 2). Books bought on Shopee are handled by Shopee under its own privacy policy.

We may disclose your personal information if required by law to do so or if you violate our Terms of Service.

4. Payment

If you make a purchase on our site, we use a third-party payment processor, Stripe. Payments are encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as necessary to complete your purchase transaction and to meet our accounting obligations (see section 10).

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, a joint effort of brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our site and its service providers.

5. Links to Other Sites

When you click on links on our course site, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

6. Security

To protect your personal information, we take reasonable precautions and follow industry best practices to ensure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.

Card details are entered on Stripe's secure payment pages over an encrypted (SSL/TLS) connection and are not stored on our servers. Although no method of transmission over the Internet or electronic storage is 100% secure, we rely on PCI-DSS compliant providers and implement additional generally accepted industry standards.

7. Cookies

We collect cookies or similar tracking technologies. This means information that our website's server transfers to your computer. This information can be used to track your session on our website and may also be used to customize our website content for you as an individual. When you first visit, our cookie banner asks for your choice, with “Accept all” and “Decline all” buttons of equal weight; you can change your choice at any time with “Cookie settings” at the bottom of every page. Advertising cookies stay off until you accept them, in every country. If you visit from Singapore, analytics cookies (Google Analytics) are on until you decline them; if you visit from elsewhere, they stay off until you accept them.

How We Use Cookies:

• To recognize your device and provide you with a personalized experience.
• To attribute visits to our websites to third-party sources and to serve targeted ads from Google, Facebook, Instagram, and other third-party vendors.

Third-Party Advertisers: Our third-party advertisers use cookies to track your prior visits to our websites and elsewhere on the Internet to serve you targeted ads. For more information about targeted or behavioral advertising, please visit Network Advertising Initiative.

Opting Out: You can opt out of targeted ads served via specific third-party vendors by visiting the Digital Advertising Alliance's Opt-Out page.

Automated Tracking Methods: We may also use automated tracking methods on our websites, in communications with you, and in our products and services, to measure performance and engagement. For example, links in our marketing emails carry tags that tell us which emails and links are useful, and we may record whether a marketing email was opened or a link was clicked.

Do Not Track Signals: Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

8. Web Analysis Tools

We may use web analysis tools built into the Tim Gan Math Online website to measure and collect anonymous session information.

9. Changes to this Privacy Policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. The “Last updated” date at the end of this page shows when the policy last changed.

If our site or course is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

10. Data Retention

Data Retention Policy: We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In practice:

• We keep your contact details and records while you are a learner, a customer or a subscriber, or while we are discussing an enquiry or trial with you, and for a limited period afterwards (normally up to 2 years) so we can answer questions about past enquiries, lessons or accounts.
• Payment and transaction records are kept for 5 years, as Singapore's tax and accounting rules require.
• If you unsubscribe from marketing emails, we keep your email address and the date you unsubscribed so that we do not email you again.

We review the records we hold and delete or anonymise data we no longer need. You can ask us to delete your personal information at any time, and we will do so in accordance with applicable laws.

11. Your Rights

Access and Correction: Under the PDPA, you have the right to request access to the personal information we hold about you, and how it has been used or disclosed in the past year, and to ask that your personal information be corrected or updated. You may also ask us to delete it. If you would like to exercise this right, please contact us at data@timganmath.edu.sg. We will respond within 30 days. If we need longer, we will tell you when to expect our reply. We may charge a reasonable fee for an access request, and will tell you the amount before we proceed.

Withdraw Consent: You can withdraw your consent at any time, as described in section 2.

If You Live Outside Singapore: You may have further rights under the law where you live, such as to object to or restrict our processing of your information, or to receive a copy of it in a portable format. Contact us and we will help.

12. Children's Privacy

Our classes and courses are for students from Primary 6 to junior college and IB, so many of our learners are under 18. Students aged 13 and above may give us their own details, for example to sign up for a free course.

Children Under 13: A parent or guardian should act for a child under 13. They should fill in our forms, give or withdraw consent, and make any requests about the child's data. We do not knowingly collect personal information directly from children under 13 without a parent's or guardian's consent. If we become aware that this has happened, we will delete the information.

13. International Data Transfers

Cross-Border Transfers: Your information, including personal data, may be transferred to—and maintained on—computers located outside of Singapore, such as those of the service providers named in section 3, where the data protection laws may differ from those of your jurisdiction.

Compliance: We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and that it receives protection comparable to the PDPA. No transfer of your personal data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

14. Contact Us

Data Protection Officer: If you have any questions or concerns about this Privacy Policy or our data practices, or a complaint about how we handle your personal data, please contact our Data Protection Officer at privacy@timganmath.edu.sg.

Requests About Your Data: To access, correct or delete your personal data, email data@timganmath.edu.sg. To stop marketing emails, use the unsubscribe link in any marketing email.