Privacy Policy

1. Who We Are

Drukwer Kinkoop is a financial education provider based in Singapore. We operate programmes covering personal finance, investment concepts, and long-range financial planning. Our registered address is 38 Beach Road, #29-11 South Beach Tower, Singapore 189767.

For data-related enquiries, contact us at [email protected].

2. What Personal Data We Collect

We collect personal data when you:

• Submit an enquiry or contact form on our website
• Register or enrol in one of our programmes
• Attend a programme session (in-person or remote)
• Communicate with us by email, phone, or in writing

The types of data collected may include:

• Full name and preferred name
• Email address and phone number
• General financial background (where voluntarily provided for programme placement)
• Session attendance and participation notes
• Payment details (processed via third-party payment providers — we do not store card details)

We also collect non-personal technical data via cookies and analytics tools. See our Cookie Policy for details.

3. How We Use Your Data

We use personal data for the following purposes:

• Programme delivery — to enrol participants, manage attendance, and provide session materials
• Communication — to respond to enquiries and send programme-related information
• Administration — invoicing, record-keeping, and scheduling
• Service improvement — understanding how participants use our programmes to refine content and delivery
• Legal compliance — meeting obligations under applicable Singapore law

We do not use personal data for automated decision-making, and we do not sell personal data to third parties.

4. Legal Basis for Processing

Under the PDPA, we process personal data based on:

• Consent — when you submit a form or enquire about our programmes
• Contractual necessity — when processing is required to deliver a programme you have enrolled in
• Legitimate interest — for service improvement, internal analytics, and reasonable business communications
• Legal obligation — where retention is required under Singapore law

5. Data Retention

We retain personal data for as long as it is needed for the purpose it was collected, or as required by applicable law. As a general guide:

• Enquiry and contact form data: up to 12 months if no programme enrolment follows
• Programme participant records: up to 5 years from last programme participation
• Financial and payment records: as required by the Inland Revenue Authority of Singapore (IRAS) guidelines

When data is no longer needed, it is securely deleted or anonymised.

6. Data Sharing

We do not sell or rent personal data. We may share data with:

• Payment processors — to complete transactions securely
• Technology service providers — such as email platforms or scheduling tools used to operate our programmes
• Legal or regulatory authorities — where required by law or court order

Any third-party service providers are required to handle data in accordance with applicable data protection standards. We do not transfer personal data outside Singapore unless adequate data protection is in place.

7. Data Protection Measures

We maintain reasonable technical and organisational measures to protect personal data, including:

• Encrypted data transmission (HTTPS) on our website
• Access controls limiting data visibility to authorised staff
• Regular review of data handling processes
• Secure disposal of data when retention periods expire

In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) in accordance with the PDPA's mandatory breach notification requirements.

8. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. We do not use cookies to track individuals across other websites. You can manage cookie preferences at any time through our Cookie Policy page, which includes controls for each category of cookie.

9. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Withdrawal of consent — withdraw consent to the collection, use, or disclosure of your data at any time
• Data portability — request your data in a structured, machine-readable format where applicable

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. In some circumstances, we may be unable to fulfil a request — for example, where retention is required by law — and we will explain why.

If you feel your data rights have not been respected, you may also lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately before providing any personal data.

11. Children's Privacy

Our programmes are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will take steps to delete it promptly.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our services following any update constitutes acceptance of the revised policy. For significant changes, we will make reasonable efforts to inform programme participants directly.

13. Contact Us

For any data protection enquiries or to exercise your rights: