UniLEARN Privacy Policy
This policy also tells you about your privacy rights and how the law protects you. It covers both our online and offline data collection activities, including personal data that we may collect through our various channels such as websites, apps, third party social networks and events.
This policy does not cover the practices of third-party websites or platforms we do not own or control, including operators of the platform through which you obtain our apps (e.g. Apple’s App Store or Google Play Store) which collects personal data required for the download. The data protection provisions of the relevant platform operators apply and may be viewed on the platform in question. SUSS only receives aggregated and anonymised data of user downloads from such platform operators.
In this policy, “personal data” is as defined in the Singapore Personal Data Protection Act 2012 (“PDPA”) and is any information about a person from which that person can be identified. These include names, addresses, telephone numbers, email addresses, dates of birth, passport numbers or numbers of other forms of identification. It does not include (a) business contact information; (b) personal data about an individual that is contained in a record that has existed for at least 100 years; or (c) personal data about an individual who has been deceased for more than 10 years.
If we change the way we handle your personal data, we will update this policy. We reserve the right to make changes to our practices and this policy at any time in compliance with the applicable legal requirements of data protection. You should check back frequently to see any updates or changes to this policy.
1. | What Personal Data Does SUSS Collect? | ||||||||||||||||||||||
1.1 | We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
|
||||||||||||||||||||||
1.2 | We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data because this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Site feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this policy. | ||||||||||||||||||||||
1.3 | We use Pseudonymized Data to minimize the privacy impact to you. Pseudonymization is a method that replaces or removes information in the dataset that identifies an individual but permits a data controller or third party to reidentify the personal data with reasonable effort. It is important to be aware that unlike anonymization, pseudonymization does not remove all identifying information from the data but reduces the linkability of a dataset with the identity of an individual. | ||||||||||||||||||||||
1.4 | If you do not provide the necessary personal data to us (we will let you know when this is the case, for example, by making this information clear in our registration form), we may not be able to provide you with access to the Site, Content and related services. | ||||||||||||||||||||||
2. |
Personal Data Collected Automatically | ||||||||||||||||||||||
2.1 | SUSS automatically collects some personal data about how you interact with and navigate the Site, as well as the device and software you use to do so. Such personal data commonly includes:
| ||||||||||||||||||||||
2.2 | We may use technologies like cookies, scripts, and our own servers to help us collect and store such personal data, including in log files. Cookies are small data files that your browser places on your computer or device. A cookie itself does not contain or collect information. However, when it is read by a server via a web browser it can help a website deliver a more user-friendly service – for example, remembering previous purchases or account details. The cookies we use are:
| ||||||||||||||||||||||
Necessary cookies are essential for the Site and you cannot opt out of them, but you can delete necessary cookies after use. For all other cookies, you can always adjust your settings and revoke your consent. | |||||||||||||||||||||||
3. |
Personal Data Collected from You | ||||||||||||||||||||||
SUSS collects personal data from the following sources:
| |||||||||||||||||||||||
4. |
Personal Data Collected Automatically | ||||||||||||||||||||||
SUSS may receive personal data about you from various third parties and public sources as follows:
| |||||||||||||||||||||||
5. |
How We Use Personal Data | ||||||||||||||||||||||
5.1 | We use the personal data we collect for our business purposes, including to:
| ||||||||||||||||||||||
5.2 | We use the personal data we collect for commercial purposes, including to:
| ||||||||||||||||||||||
5.3 | Both we and our third-party tracking partners use browser storage, app storage, cookies, pixels, beacons, scripts and tags to operate our websites and apps, and provided you have given consent, to analyze your use and market to you. We may receive reports on these from our third-party tracking partners on an individual and aggregate basis, and those partners may combine that information with other information they have collected from you. | ||||||||||||||||||||||
6. |
Disclosure of Personal Data | ||||||||||||||||||||||
6.1 | SUSS may share your personal data with business partners and/or funding agencies who provide funding to you in respect of your enrolment in courses available on the Site. | ||||||||||||||||||||||
6.2 | We process personal data with third parties/vendors as follows:
| ||||||||||||||||||||||
6.3 | SUSS will also use and disclose personal data we believe to be necessary or appropriate:
| ||||||||||||||||||||||
6.4 | In addition, we will use, disclose or transfer personal data to a third party in the event of any reorganization, merger, sale, joint venture, assignment. | ||||||||||||||||||||||
6.5 | SUSS may transfer personal data to organisation outside Singapore. Such transfers will be made in accordance with the requirements of the PDPA and only if SUSS reasonably determines that there is an adequate level of protection for personal data in the country in question. | ||||||||||||||||||||||
7. |
Security | ||||||||||||||||||||||
7.1 | SUSS implements a comprehensive set of physical, technical, and organizational safeguards to protect personal data from unauthorized access, alteration, misuse, or disclosure at all stages of its lifecycle—during transmission, processing, and storage. For example, we use computer systems with limited access in controlled facilities to store personal data. We also use technologies like encryption and hashing to protect some of the personal data we collect. | ||||||||||||||||||||||
7.2 | You agree that that no server, communications network, or data transmission over the Internet is 100% secure and that data protection and data security cannot be guaranteed for transfers outside SUSS’ control. SUSS makes no assurances about our ability to prevent any such loss or misuse. | ||||||||||||||||||||||
8. |
Your Rights | ||||||||||||||||||||||
You have the following rights in respect of the personal data we hold of you:
| |||||||||||||||||||||||
9. |
Retention of Personal Data | ||||||||||||||||||||||
9.1 | SUSS will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. | ||||||||||||||||||||||
9.2 | To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. | ||||||||||||||||||||||
10. |
Information for Parents | ||||||||||||||||||||||
10.1 | Some features of the Site or Content have age gates to prevent children from using such features or Content. SUSS takes all reasonable care to ensure that we do not knowingly collect, store, use or process personal data from children who may use such features without proper parental or legal guardian consent. | ||||||||||||||||||||||
10.2 | We seek parental/legal guardian consent for anyone under the age of 18 years (or older, in countries where local laws so require). | ||||||||||||||||||||||
10.3 | When we do process personal data from children, the following extra steps are taken to protect their privacy:
| ||||||||||||||||||||||
10.4 | While some of the Content are designed with adult users in mind, others are intended to be used mainly by children. Whenever SUSS collects personal data from a child, we only keep the information for the time we need it to provide a service or for the time it is legally required to be kept on record. | ||||||||||||||||||||||
10.5 | While children can choose whether to share their information with us, there are features on the Site that will not function if they have not given us their personal data. Where personal data is needed for features to function, SUSS will ask for information that is reasonably required to take part in the activity. | ||||||||||||||||||||||
10.6 | Children can register for an account on the Site to access age-appropriate Content and services. During registration, a child will be asked to provide their parent’s or legal guardian’s email address, the child’s first name, gender, birth date, username and password. SUSS uses this information for security and notification purposes. We strongly encourage children to create a username that excludes any personal information. | ||||||||||||||||||||||
10.7 | The Site may allow children to create or use Content themselves. Whenever an activity could potentially allow a child to share personal data, SUSS will request the parent or legal guardian for consent. Examples of personal data could be stories, free-text fields, drawings that allow text or free-hand entry of information, photographs of the child, sound clips, movie files or any type of content or other persistent identifiers that clearly identifies the child in some way. | ||||||||||||||||||||||
10.8 | If a child wants to enter a competition or participate in a survey, we ask for the personal data that we need for a child to take part. We usually only ask for the child’s first name and the email address of a parent or legal guardian (so that we may notify the responsible adult). | ||||||||||||||||||||||
10.9 | We may need to ask for a child’s contact details (including their email address) so that we can reply to questions that they have asked us. If we need to get in touch with the child a second time, for example to reply to additional questions, we will request an email address from their parent or legal guardian. We then only keep the child’s online contact information for the time it takes us to honour their request and will not use the information for any other purpose. If we ever need a child’s online contact information for ongoing communication, we will ask for the parent’s or legal guardian’s email address at the earliest opportunity so that we can keep the adult informed of the data we’re collecting and to give the adult an option to ask us to stop collecting data. Parents or guardians can opt out of any communication we have with their child at any time by following the unsubscribe instructions within each communication (if there is more than one type of communication, the adult may need to opt out of each individually). Alternatively, they can contact our UniLEARN support team. | ||||||||||||||||||||||
10.10 | SUSS will consent from a parent or legal guardian by email before collecting information on a child’s street name, address or coordinates as such information enable us to effectively identify a specific child. As an opposite, we do not require parental/legal guardian consent to collect information on a child’s city, country or region as long as it is not linked directly to the specific child. If you would like for us to not collect this type of location information, you can adjust the settings on the device your child is using at any time. Alternatively, please contact our UniLEARN support team. | ||||||||||||||||||||||
10.11 | In order to give Site users more relevant and personalized online experiences, we collect some types on information (e.g. information on IP addresses, mobile device identifier, browsers, internet service providers, referring pages, exit pages, visitor frequency, operating systems, date stamps, time stamps and clickstream data). We collect this information using technologies such as cookies, pixels, flash cookies, web beacons and other unique. We may collect this information ourselves or ask a third party to process the data on our behalf. We use this data to give children access to online features and activities, to customize content, to improve our online channels, to analyze the performance of our online channel and to create anonymous reports. If we ever want to collect children’s personal data for any reason, we will contact the child’s parent or legal guardian for consent in advance. | ||||||||||||||||||||||
10.12 | If we need to collect a child’s personal data to provide Content or service on the Site requested by the child or if a child wants to share personal data publicly or with a third part via the Site, SUSS will send the child’s parent or legal guardian an email explaining what personal data is being collected, how we plan to use it and ask the parent/legal guardian to give or deny their consent. If we do not receive parental/legal guardian consent in a reasonable time, we will all information we have collected from the child including the adult’s contact information that we asked for in order to request consent. | ||||||||||||||||||||||
10.13 | Parents or legal guardians may at any time refuse to allow SUSS to use and collect further personal data from their child. Parents or legal guardians can ask us to delete the personal data we have collected in connection with their child’s account from our records. As personal data is required for some services, deleting a child’s records may result in an account, membership, or service being unavailable to the child in the future. If a child has a registered account on the Site, the parent/legal guardian can access, change or delete the personal data we have collected from their child by getting in touch with our UniLEARN support team. | ||||||||||||||||||||||
11. |
Information for Children | ||||||||||||||||||||||
11.1 | This policy tells you how we use your personal data so you know what happens with it when you give it to us. Please ask an adult to help you read the entire privacy policy. | ||||||||||||||||||||||
11.2 | Anything that can be used to identify you is personal data, e.g. your name, a photo of you, your email address or online username. | ||||||||||||||||||||||
11.3 | The main reason we need to use your personal data is to know who you are. If you are logged in to one of our apps or games, we use your personal data to keep track of your game progress, to help you stay connected with your friends in the app or game, or to let you save Content you have uploaded to your Site account. | ||||||||||||||||||||||
11.4 | We sometimes also use your personal data because of an event you take part in or for a survey that we organise. | ||||||||||||||||||||||
11.5 | We can only use your personal data for certain reasons. We provide many online services, and we may need to use your personal data to do our work and deliver the service to you without asking you first. Other times, we need to get permission from your parent/legal guardian. If they say no, we cannot use your personal data. | ||||||||||||||||||||||
11.6 | Sometimes we need to share your personal data to do our work. We are very careful about how we do this, which means there are even more rules. We might need to share your data with your family if they are helping you. Also, we might need to share your data with other people (refer to the sections on cookies and have your parent/legal guardian explain it to you). | ||||||||||||||||||||||
11.7 | We are only allowed to keep your personal data for as long as we need it. Depending on the circumstances, this period can vary. | ||||||||||||||||||||||
11.8 | You have a say in what happens to your personal data. You have the right to know what we do with it. You can ask us to tell you what personal data we have about you; or you can tell us to stop using it or delete it. You can tell us to correct any personal data about you that is wrong or inaccurate. | ||||||||||||||||||||||
12. |
Contact Us | ||||||||||||||||||||||
If you have questions about this policy, please use dpo@suss.edu.sg to contact our Data Protection Officer. You may also contact us or our Data Protection Officer by mail at the address below. Please include your name and identify your location in your message. |