Privacy Policy

1. About Us

Bumi Capital is a financial education provider registered in Singapore, operating from 17 Phillip Street, #12-03, Singapore 048695. We provide structured learning courses for adults aged 40 and above on topics including household finance, income investing, and retirement planning.

2. Personal Data We Collect

We collect personal data you provide directly to us and data generated through your use of our website. The types of personal data we may collect include:

Data you provide

• Full name
• Email address
• Phone number
• Messages and enquiries submitted through our contact form
• Course enrolment information
• Feedback and correspondence

Data collected automatically

• IP address and approximate location
• Browser type and version
• Pages visited and time spent
• Referring website or source
• Device type and operating system
• Cookie identifiers (see our Cookie Policy)

3. How We Use Your Personal Data

We use personal data only for the purposes described below, and only where we have a lawful basis for doing so under the PDPA:

• To respond to your enquiries and provide information about our courses
• To process enrolments and manage your participation in a course
• To communicate relevant updates about course schedules or materials
• To improve the quality of our website and educational content
• To measure the reach and relevance of our marketing communications (with your consent)
• To comply with applicable legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling in any way that produces significant legal or similarly significant effects.

4. Disclosure of Personal Data

We do not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipient, only to the extent necessary:

• Service providers: technology and hosting providers who process data on our behalf under contractual obligations consistent with this policy
• Analytics and marketing platforms: Google Analytics, Meta (Facebook), and Microsoft (Bing), subject to your cookie preferences
• Professional advisers: legal, accounting, or compliance advisers where required
• Authorities: government bodies or law enforcement agencies where required by Singapore law

Where we transfer personal data outside Singapore, we take steps to ensure that adequate protections are in place consistent with the PDPA's requirements.

5. Retention of Personal Data

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law. As a general guide:

• Enquiry and contact records: up to 3 years from the date of last contact
• Enrolment and course completion records: up to 7 years for regulatory and record-keeping purposes
• Website analytics data: as configured in third-party platforms (typically 14–26 months)

When personal data is no longer required, we securely delete or anonymise it.

6. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act 2012, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for the collection, use, or disclosure of your personal data (subject to legal or contractual restrictions)
• Port your data in a machine-readable format, where applicable under the PDPA's data portability provisions

To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days of receiving a verifiable request. There may be circumstances where we are unable to fully comply, in which case we will inform you of our reasons.

7. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated periodically. However, no transmission over the internet can be wholly without risk, and we encourage you to contact us promptly if you have any concerns about the security of your data.

8. Links to Other Websites

Our website may contain links to third-party websites for your convenience or reference. This Privacy Policy applies only to our own website. We are not responsible for the privacy practices of any third-party site and encourage you to review their respective policies before providing any personal data.

9. Children's Privacy

Our services are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will take steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Material changes will be notified through our website or by email where we hold your contact details. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data, please contact us:

• Data Protection Officer: Bumi Capital
• Email: [email protected]
• Phone: +65 8394 7215
• Address: 17 Phillip Street, #12-03, Singapore 048695
• Office hours: Monday–Friday 9am–6pm, Saturday 9am–1pm

You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your personal data has been handled contrary to the PDPA. Visit www.pdpc.gov.sg for more information.