// Legal
Privacy Policy
Last updated: 14 April 2025
1. Introduction
Indemnia ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains what personal data we collect, how we use it, how we protect it and what rights you have in relation to it.
This policy applies to personal data collected through our website at indemnia.pro, through our enquiry and enrolment processes, and in connection with our workshops and programmes. Questions about this policy should be directed to [email protected].
2. What personal data we collect
We collect personal data in the following categories:
- Contact details: full name, email address, telephone number
- Enquiry and registration information: the programme you are interested in, the message content you submit through our contact form
- Programme participation data: session attendance, exercise submissions (only as needed for feedback delivery)
- Technical data: IP address, browser type, pages visited, collected via cookies and analytics tools (see Section 5)
We do not collect sensitive personal data such as national identification numbers, financial account details or health information.
3. Legal basis and purpose of processing
We process personal data on the following bases:
- Consent: for marketing communications and for analytics cookies, where you have given consent via our cookie banner or preferences page
- Contractual necessity: to deliver programme services to enrolled participants
- Legitimate interests: to respond to enquiries, manage our operations and improve our programmes
Your personal data is used specifically to: respond to your enquiry or registration; process enrolment; deliver programme sessions, materials and instructor feedback; send administrative communications related to programmes you are enrolled in; and, where you have consented, send information about future programmes.
We retain contact and enquiry data for up to 24 months after last contact. Programme participation data is retained for 36 months after programme completion. You may request deletion at any time (see Section 6).
4. Data sharing and third parties
We do not sell personal data to third parties. We may share data with service providers who assist us in operating the website or delivering programmes, strictly for those purposes and under data processing agreements. Current categories of service providers include:
- Website hosting and infrastructure providers
- Email and communications platforms
- Analytics services (where you have consented to analytics cookies)
- Video conferencing platforms used for live online sessions
We do not transfer personal data outside Singapore except where a service provider is located or processes data in another jurisdiction under arrangements that meet PDPA transfer requirements.
5. Cookies
Our website uses cookies to support basic functionality and, where you consent, to collect analytics data. Essential cookies are placed automatically for site operation; analytics, marketing and preference cookies are placed only with your consent.
You can manage your cookie preferences at any time through our Cookie Policy page. Withdrawing consent for non-essential cookies does not affect your ability to use the website or enrol in a programme.
6. Data protection measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure or loss. These include:
- Encrypted data transmission (HTTPS)
- Access controls limiting data access to those who need it
- Secure storage with reputable service providers
- Regular review of data handling practices
In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission of Singapore (PDPC) in accordance with our obligations under the PDPA mandatory breach notification requirements.
7. Your rights
Under the Singapore PDPA, you have the right to:
- Request access to personal data we hold about you
- Request correction of inaccurate personal data
- Withdraw consent to processing where consent was the basis
- Request cessation of use or disclosure of your data in certain circumstances
- Lodge a complaint with the PDPC at pdpc.gov.sg
To exercise any of these rights, please contact us at [email protected] with your name and the specific request. We will respond within 30 days. We may need to verify your identity before processing the request.
8. Third-party links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
9. Children's privacy
Our workshops and website are directed at working professionals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.
10. Policy updates
We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the website or participation in a programme after an update constitutes acceptance of the revised policy.
11. Contact
Data controller: Indemnia, 38 Beach Road, #29-08, Singapore 189767
For privacy-related enquiries: [email protected]
For general enquiries: [email protected] or +65 6438 6157