Privacy Policy

1. Data controller

Hikmah Pte. Ltd. is the data controller for personal data collected through our website and programmes.
Address: 28 Cross Street, #15-09, Singapore 048421
Email: [email protected]
Telephone: +65 6491 7236

Hikmah is registered in Singapore and processes personal data in accordance with the Personal Data Protection Act 2012 (PDPA) and any applicable regulations issued under it.

2. What data we collect

We collect the following categories of personal data, depending on how you interact with us:

• Contact details: name, email address and telephone number, provided when you submit an enquiry form or register for a programme.
• Programme information: which programme you are enrolled in, session attendance, and feedback you provide at the end of a programme.
• Payment details: we do not store card or bank details; payment is processed via PayNow or bank transfer and handled outside our systems.
• Website usage data: pages visited, time on site and browser type, collected via analytics cookies if you have consented to their use.
• Session questionnaire responses: for the Family Conversations Track, responses to pre-session questionnaires are held in confidence and used solely to prepare the facilitator for each session.

3. How we use your data

We use personal data for the following purposes:

• To respond to your enquiry and advise on programme suitability.
• To confirm your place in a programme, send session reminders and provide access to recordings and materials.
• To send feedback forms at the end of programmes and act on the responses.
• To contact you about future programme dates, if you have not opted out. You may opt out at any time by writing to [email protected].
• To understand how our website is used, using aggregated analytics data, in order to improve it.

The legal basis for processing is consent (for marketing communications and analytics cookies), contract performance (for programme delivery) and legitimate interest (for responding to enquiries).

4. Data retention

We retain personal data only as long as necessary:

• Enquiry data (not enrolled): 12 months from the date of enquiry, then deleted.
• Programme participant data: 3 years from the end of the programme, for record-keeping and to allow participants to re-enrol or request materials.
• Family Conversations Track session notes: retained for the duration of the programme plus 6 months, then securely deleted.
• Analytics data: aggregated, retained for 24 months.

5. Data sharing

We do not sell, rent or share personal data with financial institutions, advertisers or data brokers. We do not receive referral fees from any third party and have no commercial arrangements that would create an incentive to share participant data.

We may share data with service providers who assist our operations — for example, our email delivery provider or our website hosting provider — under data processing agreements that require them to protect your data and use it only for the purposes we specify.

6. Data protection measures

We take reasonable steps to protect personal data from unauthorised access, use or disclosure:

• Access to personal data is restricted to Hikmah staff and facilitators who need it for their work.
• Our website uses HTTPS encryption. Emails containing personal data are sent via encrypted channels where possible.
• In the event of a data breach that is likely to cause harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) as required by the PDPA.

7. Cookies

Our website uses cookies. Essential cookies are used to operate the site and cannot be disabled. Analytics and preference cookies are used only with your consent. You may manage cookie preferences at any time via our Cookie Policy page.

8. Your rights under the PDPA

Under the Singapore PDPA, you have the right to:

• Access the personal data we hold about you.
• Correction of any inaccurate or incomplete personal data.
• Withdraw consent for us to contact you about future programmes.
• Lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg if you believe your data protection rights have been infringed.

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

9. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you read their privacy policies before sharing personal data with them.

10. Children's privacy

Hikmah's programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete the data promptly.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the Last Updated date at the top of the page. For material changes, we will notify enrolled participants by email. Continued use of our website or programmes after a change constitutes acceptance of the updated policy.

12. Contact

For questions or requests relating to this policy or your personal data: