Privacy Policy

1. Introduction

Stovish ("we", "us", "our") is an educational reading organisation registered in Singapore. We operate financial education reading programmes and discussion-led workshops for adults aged 40 and above at our reading room at Marina Bay Financial Centre.

We are committed to protecting the personal data of our participants, enquirers, and website visitors in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and its associated regulations. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to it.

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect only the personal data necessary to administer our programmes and respond to enquiries. This includes:

• Contact details: Name, email address, and telephone number, collected when you submit an enquiry or enrol in a programme.
• Enquiry content: The subject matter of your enquiry or programme preference, as submitted through our contact form.
• Website usage data: Standard server logs and, where consented, analytics cookies tracking page visits and navigation patterns. No personally identifiable website data is retained beyond 13 months.

What we do not collect: We do not collect, request, or retain any information about your financial position, CPF account, investment holdings, or household assets at any point — during programme enrolment, within sessions, or otherwise. Our programmes are educational in scope and do not involve the collection of financial data.

Legal basis for processing: Data collected via the enquiry form is processed on the basis of your consent (PDPA section 13). Programme administration data is processed on the basis of contractual necessity. Website analytics (where applicable) are processed on the basis of your cookie consent.

3. How We Use Your Data

Personal data collected by Stovish is used exclusively for the following purposes:

• Responding to enquiries about our programmes and cohort availability
• Processing programme enrolments and managing cohort communications
• Sending programme-related materials and the cohort summary newsletter (for enrolled participants only)
• Administering our website and improving our reading materials based on aggregate, anonymised usage data
• Complying with applicable Singapore law

Marketing: We do not send unsolicited marketing communications. Any programme-related communications you receive are limited to the cohort in which you are enrolled or in which you have expressed interest. You may withdraw consent at any time by writing to [email protected].

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share limited personal data with the following categories of third-party service providers, solely to the extent necessary for the operation of our programmes and website:

• Website hosting and infrastructure: Our website is hosted by a third-party provider operating under data processing agreements consistent with PDPA obligations.
• Email service provider: Programme communications are sent via a third-party email service operating under appropriate data processing terms.
• Analytics: Where you have consented to analytics cookies, aggregate usage data may be processed by a third-party analytics provider. No personally identifiable data is shared for analytics purposes.

All third-party providers are required to process personal data only as instructed by Stovish and to maintain appropriate security standards.

5. Data Retention

We retain personal data for no longer than is necessary for the purpose for which it was collected:

• Enquiry data: Retained for 12 months from the date of last contact, then securely deleted.
• Programme participant data: Retained for 3 years from the date of programme completion for administrative and record-keeping purposes, then securely deleted.
• Website analytics: Aggregate data retained for up to 13 months. No identifiable data is retained.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted transmission of data between your browser and our website (HTTPS/TLS)
• Access controls limiting personal data access to authorised Stovish staff only
• Cohort summary newsletters anonymised before distribution
• Secure deletion of data upon expiry of retention periods
• Periodic review of data handling practices against PDPA obligations

7. Cookies

Our website uses cookies as described in our Cookie Policy. Essential cookies are necessary for the basic operation of the website and are set without requiring consent. Optional analytics and preference cookies are set only where you have provided consent via our cookie banner. You may change your cookie preferences at any time via the Cookie Policy page.

8. Your Rights Under the PDPA

Under the Singapore Personal Data Protection Act, you have the following rights in relation to your personal data held by Stovish:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete personal data be corrected.
• Right of withdrawal: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to raise a complaint: If you believe your personal data has been handled in breach of the PDPA, you may raise a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

To exercise any of these rights, please write to [email protected]. We will respond within 30 days of receipt.

9. Third-Party Links

Our website may contain links to external websites — including CPF Board, MAS, and other Singapore government publications referenced in our reading materials. We are not responsible for the privacy practices of these external sites and encourage you to review their respective privacy policies.

10. Age and Programme Eligibility

Stovish programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you are aware that a minor has submitted personal data to us, please contact us at [email protected] and we will take prompt steps to delete the relevant data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify enrolled participants by email. Continued use of our website or participation in a programme following notification of changes constitutes acceptance of the revised policy. The date at the top of this page reflects the most recent revision.

12. Contact

For all privacy-related enquiries, including data access and correction requests, please contact us: