Privacy Policy

1. Personal data we collect

To register and enrol you in WSQ-funded training courses, we collect:

• Identity: Full name, NRIC / FIN, date of birth, gender, nationality, race
• Contact: Email address, mobile phone number, residential address
• Employment: Designation, employer (if company-sponsored), education level, employment status, salary range
• Payment: Payment method, transaction reference (we do not store full card or bank details — payments are handled by Stripe; SkillsFuture Credit transactions are handled by SkillsFuture Singapore)
• Course delivery: Attendance, assessment results
• Technical: IP address, browser type, pages visited (used only for security and operational analytics)

2. How we use your data

• To process your course enrolment and payment
• To submit funding claims to SkillsFuture Singapore (SSG) and the Workforce Singapore (WSG) under WSQ funding rules
• To record attendance and assessment results required by SSG
• To issue tax invoices and receipts
• To send course-related communications (joining details, reminders, follow-ups)
• To respond to support enquiries
• To comply with our legal and regulatory obligations

3. Who we share your data with

We share your personal data only with parties that need it to deliver our services to you:

• SkillsFuture Singapore (SSG) / Workforce Singapore (WSG): Enrolment, attendance, assessment, and payment information required under SSG funding rules
• Stripe Singapore: Payment processing (card and PayNow). Stripe's privacy policy applies to data they collect.
• Resend (email infrastructure): Transactional email delivery (your name + email only)
• Cloudflare: Web hosting and security infrastructure
• Our trainers and authorised staff: Course delivery and attendance management

We do not sell, rent or trade your personal data with any third party for marketing purposes.

4. How long we keep your data

We retain learner records (enrolment, attendance, assessment, and payment data) for a minimum of seven (7) years after course completion, in line with SSG audit requirements and Singapore tax record retention rules. After that period, we may anonymise or securely delete the records.

5. How we protect your data

• All web traffic is encrypted in transit via HTTPS (TLS)
• Backend infrastructure is hosted on Cloudflare with access restricted to authorised staff via signed session cookies
• Payment data is handled directly by Stripe — we never see or store full card numbers
• Administrative actions are recorded in an internal audit log

6. Your rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for non-essential processing
• Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore

Note: certain records (e.g. SSG-mandated enrolment, attendance, and payment records) cannot be deleted on request because we are legally required to retain them for audit.

7. Cookies

This site uses only essential cookies (e.g. session cookies for administrative sign-in). We do not use third-party advertising or tracking cookies.

8. Contact us

For privacy enquiries, data access / correction requests, or complaints, contact our Data Protection Officer at enquiry@bracademyglobal.com.

The Beauty Recipe Pte Ltd
803 King George's Avenue, #02-192, Singapore 200803
UEN 53208125X

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by email to active enrolees where appropriate.