Legal · Privacy
Privacy Policy
Wellthread respects your personal information and handles it with care. This policy explains what data we collect, why we collect it, and how we look after it — in plain terms.
Last Updated: 14 February 2025 · Effective Date: 14 February 2025
1. Introduction
Wellthread ("we", "us", "our") is a financial education provider based in Singapore. We are committed to managing the personal data of our programme participants, enquirers, and website visitors responsibly, in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and its associated regulations.
This Privacy Policy applies to personal data collected through our website at wellthread.live, through our contact forms, and through direct correspondence with our team.
If you have questions about this policy or how we handle your data, please contact us at [email protected].
2. Personal Data We Collect
We may collect the following categories of personal data:
Information you provide directly
- Full name and preferred name
- Email address
- Phone number (where provided voluntarily)
- Enquiry details and message content submitted through our contact form
- Programme enrolment information (if you proceed to register)
Information collected automatically
- Browser type, operating system, and device information
- IP address (anonymised where technically feasible)
- Pages visited and time spent on our website (via analytics tools)
- Referring URL
- Cookie identifiers and preference settings (see Section 7)
3. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- Responding to enquiries — to contact you regarding programme information you have asked about
- Programme administration — to manage enrolments, session scheduling, and materials distribution
- Service communications — to send you relevant programme updates, session reminders, and follow-up resources
- Website analytics — to understand how our website is used so we can improve it (aggregate, non-identifiable data is prioritised)
- Legal compliance — to meet any obligations under Singapore law
We do not use your personal data for automated decision-making or profiling that produces significant effects on you.
4. Legal Basis for Processing
Under Singapore's PDPA, we collect and use personal data where:
- You have given your consent (e.g. by submitting our contact form)
- It is necessary to fulfil a contract with you (e.g. programme enrolment)
- We have a legitimate interest that does not override your rights (e.g. improving our website based on aggregate usage patterns)
- We are required to do so by applicable law
5. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We may share data in limited circumstances:
- Service providers — third-party tools we use for email delivery, website hosting, or analytics, who are contractually bound to process data only on our behalf and in accordance with PDPA requirements
- Analytics platforms — we may use tools such as Google Analytics in anonymised or aggregated form; you may opt out via your browser or cookie settings
- Legal authorities — if required by a court order, regulatory requirement, or other lawful process under Singapore law
We do not transfer your personal data outside Singapore without ensuring appropriate protections are in place.
6. Data Retention
We retain personal data only for as long as is necessary for the purposes outlined above, or as required by applicable law. As a general guide:
- Enquiry records — retained for up to 12 months after the last interaction, or until you request deletion
- Programme participant records — retained for up to 5 years following the completion of the programme for administrative and audit purposes
- Analytics data — retained in aggregated form per our analytics provider's default configuration
When data is no longer required, it is securely deleted or anonymised.
7. Cookies and Tracking
Our website uses cookies to function properly and to help us understand how visitors engage with our content. Categories include:
- Essential cookies — required for basic site functionality; these cannot be disabled
- Analytics cookies — used to measure page visits and navigation patterns in aggregated form
- Preference cookies — used to remember your cookie consent choices
When you first visit our website, you will be asked to accept or decline optional cookies. You may update your preferences at any time via our Cookie Policy page.
8. Your Rights Under the PDPA
Under Singapore's Personal Data Protection Act, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate or incomplete data be corrected
- Withdrawal of consent — withdraw consent for data processing (where processing is based on consent), subject to legal or contractual limitations
- Data portability — request that data be provided in a machine-readable format where technically feasible
To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days of receiving a valid request.
You may also lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) if you believe your personal data has been handled in a manner inconsistent with the PDPA. Further information is available at pdpc.gov.sg.
9. Data Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or loss. These measures include:
- HTTPS encryption for all web communications
- Restricted access to personal data within our team on a need-to-know basis
- Periodic review of data handling practices
In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the PDPC and affected parties in accordance with the PDPA Notification of Data Breaches Obligation.
10. Links to External Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.
11. Children and Minors
Our programmes and website are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that personal data has been submitted by a minor without parental consent, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. Where changes are material, we will make reasonable efforts to notify affected individuals.
Continued use of our website after any update constitutes acceptance of the revised policy.
13. Contact Information
For any privacy-related enquiries, please contact us:
- Email: [email protected]
- Address: Wellthread, 16 Collyer Quay, #18-01, Singapore 049318
- Phone: +65 6583 2714