Privacy
Privacy Policy
Last updated: 28 October 2026
Singapore SPA Institute (“SSI”, “we”, “us”) respects your personal data. This policy explains what we collect through the SSI Course Help Desk, why we collect it, who we share it with, and how you can contact us. It is written to reflect the Singapore Personal Data Protection Act 2012 (PDPA).
1. Who we are
Singapore SPA Institute is a registered Private Education Institution in Singapore. UEN 200900211D · PEI Registration 200900211D · Registered address: 321 Orchard Road, Orchard Shopping Centre #05-01/02, Singapore 238866.
2. What we collect
When you submit an enquiry or register your interest, we collect:
- your name, mobile / WhatsApp number and email address (email is optional);
- your residency status (Singaporean, PR or Foreigner), preferred class language and preferred schedule;
- whether you are an SGBIU or NTUC member, where you choose to tell us;
- the course you are interested in and any notes you add;
- the language of the page you used, your consent to this policy and the date/time of your submission.
We do not ask for NRIC numbers, payment card details or copies of identity documents through this website.
3. Why we use it
- to answer your question and contact you about the course you selected;
- to confirm the intake date, fees and admission arrangements;
- to keep a record of your enquiry and our response;
- to meet our legal, regulatory and accounting obligations where applicable.
We do not add you to a marketing list, and we do not send unrelated promotional messages, without your separate consent.
4. Consent and withdrawal
By ticking the consent box and submitting the form, you consent to the collection, use and disclosure of your personal data for the purposes above. You may withdraw your consent at any time by contacting us. If you withdraw consent, we may not be able to process your enquiry or admission, and we will explain the effect to you. Withdrawing consent does not affect any processing that has already taken place or any processing required by law.
5. Who we share it with
We share personal data only with service providers that help us run this service, and only as needed:
- Netlify — website hosting, serverless functions and storage of enquiry records (Netlify Blobs);
- SMTP2GO — our email delivery provider, used to send the office notification and, if you gave an email address, a confirmation to you;
- WhatsApp / Meta — only if you choose the “Send on WhatsApp” button; the message is then handled by WhatsApp under its own terms;
- Google Maps — only if you click the map link, which opens Google Maps in a new tab;
- our professional advisers or regulators — where required by law or to protect our legal rights.
We do not sell, rent or trade your personal data.
6. Overseas transfers
Some service providers may store or process data outside Singapore. Where that happens, we take reasonable steps to ensure the data receives a comparable standard of protection, for example through contractual data protection terms offered by the provider. You may contact us for more information about the safeguards used.
7. How long we keep it
We keep enquiry records for up to 24 months from the date of the enquiry, unless a longer period is needed to handle an ongoing matter or is required by law. A scheduled cleanup removes enquiry records older than this period from our registration store. Enrolment/student records are managed separately under the student contract and our regulatory obligations.
8. Access, correction and deletion
You may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete enquiry data that we no longer need. Contact our data protection contact at spawsq@spainstitute.com.sg or call +65 6235 4341. We may need to verify your identity before acting on a request. We will respond within a reasonable time and explain if we cannot comply with a request.
9. Security
This site is served over HTTPS. Access to enquiry records is limited to staff and service providers who need it. We keep the website and its dependencies updated, use server-side validation and rate limiting, and avoid collecting data we do not need. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.
10. Cookies and analytics
This website does not use advertising cookies or third-party tracking scripts. It loads fonts from its own server. If we add privacy-friendly analytics in future, we will update this policy and, where required, ask for consent first. Our hosting provider may keep standard server logs (such as IP address and request time) for security and reliability. Our rate limiter may process a visitor's IP address for a short period to prevent abuse; if a shared rate-limit store is configured, the IP-derived key expires automatically.
11. AI-assisted answers
If the AI answer feature is enabled, the question you type is sent to our configured AI provider to generate a draft answer. The prompt contains public course and fee information, not your name, mobile number or email. Please do not type personal or sensitive information into the AI question box. AI answers can be wrong or out of date; always confirm fees and admission details with our office.
12. Changes and contact
We may update this policy from time to time. The “last updated” date at the top shows the current version. If we make a material change, we will take reasonable steps to let affected individuals know. If a data breach occurs, we will assess it and notify the relevant authorities and affected individuals where required by law.
Questions about this policy or your personal data: spawsq@spainstitute.com.sg · +65 6235 4341 · WhatsApp +65 9619 1146.
This policy describes our current practice. It is not legal advice. Our student contract, advisory note and the Personal Data Protection Act 2012 govern enrolments and any conflict with this page.