Privacy Policy
Last updated: 1 April 2026
1. Introduction
Fincrest ("we", "our", or "us") respects your privacy and is committed to handling your personal data with care and transparency. This Privacy Policy describes what personal data we collect, why we collect it, how it is used, and the rights you have in relation to it.
This policy applies to all personal data collected through our website, enquiry forms, programme registrations, and direct communications. It should be read alongside our Cookie Policy and Terms and Conditions.
By using our website or engaging with our services, you acknowledge that you have read and understood this policy.
2. Data Controller
The data controller responsible for your personal data is:
- Business name: Fincrest
- Address: 16 Collyer Quay, #20-04, Singapore 049318
- Telephone: +65 9438 2706
- Email: [email protected]
We are subject to the Personal Data Protection Act 2012 (PDPA) of Singapore. Where applicable, we also comply with other relevant data protection legislation.
3. Data We Collect
3.1 Information you provide directly
We collect personal data that you voluntarily provide to us, including:
- Full name and contact details (email address, phone number)
- Enquiry content submitted via our contact form
- Programme enrolment details
- Information shared during consultations, sessions, or email correspondence
- Payment information processed through our payment providers (we do not store card details directly)
3.2 Information collected automatically
When you visit our website, we may collect certain technical data automatically, including:
- IP address and approximate geographic location (country or city level)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring URL (where you came from before reaching our site)
- Cookie identifiers, where you have consented to their use
3.3 Special categories of data
We do not intentionally collect sensitive personal data (such as health information, racial or ethnic origin, or financial account numbers). If you share such information with us voluntarily during a session or consultation, it will be treated with the same care as all other personal data and will not be disclosed to third parties without your consent.
4. How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiries and arrange consultations or programme enrolments
- To deliver the programmes and services you have enrolled in
- To send you information about our programmes, where you have expressed interest or consented
- To process payments and maintain accurate billing records
- To improve our website and understand how visitors use it (using aggregated, anonymised analytics)
- To comply with applicable laws and regulations
- To protect the legitimate interests of Fincrest or third parties where necessary
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
5. Legal Basis for Processing
Under the PDPA, we process your personal data on one or more of the following bases:
- Consent: Where you have given clear consent for a specific purpose (e.g., subscribing to updates or agreeing to the use of non-essential cookies).
- Contract performance: Where processing is necessary to deliver a programme or service you have engaged us for.
- Legitimate interests: Where we have a legitimate business interest (such as improving our services or maintaining business communications), provided your rights are not overridden.
- Legal obligation: Where we are required to process data to comply with applicable Singapore law.
6. Data Sharing
We do not share your personal data with third parties except in the following circumstances:
- Service providers: Trusted third-party providers who assist us in delivering our services (e.g., payment processors, email platforms, website hosting). These providers are contractually bound to handle data securely and only for the purposes we specify.
- Analytics services: Where you have consented to analytics cookies, we share aggregated, anonymised usage data with analytics platforms (see our Cookie Policy).
- Legal requirements: Where we are required to disclose data by law, court order, or regulatory authority.
- Business transfers: In the event of a merger, acquisition, or transfer of business assets, your data may be transferred to the relevant party, with appropriate safeguards in place.
Any third-party providers we use are required to keep your data confidential and secure, and are not permitted to use it for their own purposes.
7. Data Retention
We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law. Our general retention periods are:
- Enquiry and contact records: Up to 2 years from last contact, unless a programme was subsequently engaged.
- Programme participant records: Up to 7 years from the completion of the programme, to meet our legal and business obligations.
- Payment records: Up to 7 years, in accordance with Singapore accounting and tax requirements.
- Website analytics data: Up to 26 months, in accordance with standard analytics retention practices.
When data is no longer required, it is securely deleted or anonymised.
8. Your Rights
Under the PDPA, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete personal data
- Withdraw consent where processing is based on consent (this will not affect the lawfulness of processing before withdrawal)
- Request deletion of your personal data in certain circumstances
- Object to processing based on legitimate interests
- Portability of data you have provided to us, in a machine-readable format where applicable
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.
10. Third-Party Services
Our website may contain links to third-party websites or services. This Privacy Policy applies only to Fincrest's own operations. We are not responsible for the privacy practices of external websites and encourage you to review their policies before sharing any personal data.
Where we use third-party tools (such as Google Analytics, Google Maps, or payment processors), their respective privacy policies apply to the data processed by those tools. We configure these tools to collect the minimum data necessary for our legitimate purposes.
11. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:
- Encrypted data transmission (HTTPS) across our website
- Access controls limiting who within Fincrest can view personal data
- Secure storage practices for all client records
- Regular review of our data handling procedures
While we take all reasonable precautions, no method of data transmission over the internet can be entirely secure. We encourage you to take care when sharing personal information online.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acknowledgement of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
- Email: [email protected]
- Phone: +65 9438 2706
- Post: 16 Collyer Quay, #20-04, Singapore 049318
We will acknowledge your enquiry promptly and endeavour to respond fully within 30 days.