St Joseph’s Institution (collectively “SJI”, “us”, “we” or “our”) recognises the importance of personal data entrusted to us (individually and collectively referred to hereafter as “Personal Data”), and will take reasonable steps to maintain the security, integrity and privacy of any User Information in accordance with SJI’s obligations under the Personal Data Protection Act 2012 (“PDPA”) and this PDPA Policy. By submitting any Personal Data to SJI, you consent to the practices described hereinafter.
1.1. This PDPA Policy sets out how we collect, use, disclose and protect any Personal Data that you give to us.
1.2. In general, before we collect any personal data from you, we will notify wherever possible, the purpose for which Personal Data may be collected, used and disclosed.
1.3. Please read this PDPA Policy before submitting any information requested by us, or participating in or signing up for any activities, services or products offered by us, so that you are aware of and understand the purposes for which we collect, use and disclose your Personal Data.
1.4. From time to time, we may review and update this PDPA Policy to ensure that it is consistent with any changes in legal requirements. We encourage you to check this web page and our website from time to time for any updated versions of this PDPA Policy that is posted and date stamped so that you are aware of when the PDPA Policy was last updated.
1.5. We may ask for personal data such as:-
a) Personal identification information including your full name, NRIC/FIN numbers, passport numbers, date of birth, photographs or video recordings, closed circuit television (CCTV) footage, and voice recordings of you as an individual or in groups;
b) Contact information including postal address, home/mobile telephone numbers, email;
c) Other personal records including academic qualifications, medical history, health reports, employment records;
d) Payment information including credit or debit card information;
e) Technical data such as your internet protocol (IP) address, access times and browser type.
2.1. Depending on the nature of your interaction with us (e.g. student, parent, alumnus, staff, applicant, vendor, service provider), the Personal Data collected may be used for various purposes including, but not limited to, the following:-
2.1.1. Communicating with users in respect of enquiries, surveys, market research and/or sending materials relating to events, or news that we, our partners and/or third party organisations that we collaborate with may deem necessary for dissemination;
2.1.2. Administering and/or managing relationships with SJI pertaining to conduct of internal business and research purposes, to enhance and develop our websites, outreach and engagement efforts, or any other activity carried out or organised by SJI;
2.1.3. Evaluating suitability for admission or employment, registration for workshops or seminars, scholarships, awards, and/or financial aid (including the conferring, publishing, or releasing of information of these), research support and other support programmes such as fundraising activities and disclosure of Personal Data to donors, grantors, external organisations for purposes of periodic reports, surveys and/or event invitations;
2.1.4. Complying with our legal or regulatory obligations or any of our internal risk management procedures and resolving any disputes that we may have, including the obtaining of references and/or other information from prior employers, or investigating possible misconduct or inappropriate activities;
2.1.5. Supporting teaching, research, professional, and holistic development of students and alumni such as exchange programmes, internships, overseas immersion trips, school camps, candidature matters, SJI key school events, orientation;
2.1.6. Publishing photos and/or videos taken during school programmes or events for publicity purposes;
2.1.7. For record keeping;
2.1.8. Any other purpose of which you are notified of at the relevant time and where your consent to use, process or retain any Personal Data for that purpose is sought, unless such consent is deemed unnecessary under the PDPA or any other applicable law.
(collectively hereafter referred to as the “Purposes”).
Your express consent will be sought when collecting your Personal Data, for the Purposes, uses and disclosures set out above. There will also be instances where your consent for the collection or use of your Personal Data will necessarily be implied from the circumstances by nature of the task or transaction, including your interaction with us or in the course of signing up for, or accepting, any of our activities, services or products.
Where you are supplying the Personal Data of another individual (e.g. information of your child, parent, spouse, and/or employees, etc.), you shall ensure that the individual whose Personal Data is supplied to us has consented to provide us with their Personal Data for the respective purposes, and is informed of and consents to the terms of this PDPA Policy.
We may use and disclose your Personal Data within SJI, and with and to third parties.
SJI will not disclose any Personal Data to any third party, unless required or permitted by the PDPA or by law or otherwise needed in connection with legal proceedings or unless we have received your consent.
Notwithstanding the above, please note that SJI may disclose any Personal Data to third parties without first obtaining your consent in certain situations including, but not limited to the following:-
a) Cases in which the purpose of the disclosure is clearly in your interests, and if consent cannot be obtained in a timely manner;
b) Cases in which the disclosure is necessary to respond to an emergency that threatens the life, health or safety of yourself or another individual;
c) Cases in which the disclosure is necessary to establish, exercise or defend our legal rights, or to obtain legal services; and
d) Cases in which the disclosure is to a public agency and such disclosure is necessary in the public interest.
The above instances of when SJI may disclose your Personal Data are not intended to be exhaustive by any means. However, where SJI discloses your Personal Data to any third parties with your consent, we will employ our best efforts to require such third parties to adhere to the requirements of the PDPA in receiving, processing, using and storing your Personal Data.
Apart from your Personal Data, SJI may disclose to carefully chosen third parties navigational and transactional information in the form of anonymous, aggregate usage statistics (including “page views” on this website and the products herein) and demographics but only in forms that do not reveal the user’s identity or any User Information, except as required by law, as needed in connection with legal proceedings, or unless we have received your consent.
5. Access, Corrections & Withdrawal of Consent
You may request to access and/or correct your Personal Data, or have the option to withdraw your consent for the collection, use or disclosure of your Personal Data for the Purposes currently in our possession or control by submitting a written request to us.
We will require sufficient personal information from you in order to ascertain your identity as well as the nature of your request in respect of your Personal Data in order to address your request adequately. Such written requests to access and/or correct or to withdraw should be sent to: email@example.com.
Once we receive a written request, we will endeavour to address your written request within a reasonable period. Where we are unable to respond to your written request within such time, we will notify you accordingly.
Where your Personal Data is corrected please note that we will send your corrected User information to every other organisation to which your Personal Data had been disclosed by SJI within a year prior to the making of the correction by SJI, unless that organisation does not need the corrected Personal Data for any legal or business purpose.
In the case of withdrawal of your consent, please note that your withdrawal could result in certain consequences arising from such a withdrawal - for example, it may mean that SJI may not be able to continue its communications or relationship with you.
6. Third Parties
Links may be provided from this website to other third party websites. In using such links, users should be aware that each third party website will vary in terms of its privacy and data protection policies, and SJI does not take responsibility for the comprehensiveness or compliance of the privacy policies of, and usage of, personal information collected by others including, without limitation, those of any partner or affiliate vis-à-vis the PDPA or any other applicable law.
You should be aware that identifiable personal information - such as your name or e-mail address - that you voluntarily disclose that is accessible to other Users (e.g. on bulletin boards or in chat areas) could be collected and disclosed by others. SJI cannot take any responsibility for such collection and disclosure.
We will take reasonable efforts to ensure that your Personal Data is accurate and complete and updated.
Reasonable security arrangements will be made to prevent any unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your Personal Data so as to ensure that your Personal Data is adequately protected and secured. However, we cannot completely guarantee the security and be fully responsible for any unauthorized use of your Personal Data by third parties which are wholly attributable to factors beyond our control.
We will also take reasonable efforts to ensure that the Personal Data in our possession or under our control is destroyed and/or anonymized as soon as it is reasonable to assume that (i) the purpose for which that Personal Data was collected is no longer being served by the retention of such Personal Data; and (ii) retention is no longer necessary for any other legal or business purposes.
8. Updates on Data Protection Policy
Please note that SJI’s PDPA Policy is reviewed periodically. SJI reserves the right to modify its PDPA Policy at any time without notice. We encourage you to check this web page and our website from time to time for any updated versions of this PDPA Policy. Your continued use of this website will be deemed conclusive acceptance of such modification.
9. Feedback/Complaint Process
If you have any feedback, complaint or grievance in respect of how SJI has handled or is handling your Personal Data or our PDPA Policy, please do not hesitate to contact us at: firstname.lastname@example.org.
Please note that we will require you to verify your identity before we can respond efficiently and fairly to your request.