PDPA notice

Privacy & Data Protection.

Personal data is collected for enrolment and course administration and handled in compliance with Singapore's Personal Data Protection Act. This notice explains what is collected, why, how long it is kept, and your rights.

Carbyne Education Pte. Ltd. (UEN 202623731G) is the owner of Get Certified PT (UEN 53497783M), the registered Training Provider for the IFPA Certified Personal Fitness Trainer course.

1. What we collect and why

Learner particulars: full name, NRIC or passport number (for identity and funding verification), date of birth, contact details, and residential address - required for registration, screening, and SSG-funded enrolment records.
Emergency contact details, used only if a safety issue arises during training.
Medical declarations relevant to safe practical participation.
Silver Strength participant details: name, contact details, date of birth, language, availability, and health-readiness answers. These are used to confirm the programme's 60+ age requirement, administer the initiative, match seniors with suitable volunteers, and plan sessions safely. Silver Strength does not request Myinfo or collect CHAS status, NRIC, or FIN.
Training records: attendance, assessment outcomes, feedback, support actions, and communications - required for completion evidence and provider quality obligations.
In the learner and facilitator systems, privacy-minimised activity evidence may record logged-in page visits, generic interface or form actions, and server-recorded critical training actions for accountability, security, and quality. Each row keeps an opaque LMS account reference; only LMS administrators may resolve it to the current account display name when reviewing evidence. The evidence record and snapshot do not copy names, email, phone, NRIC/FIN, address, payment, support, or form content, and deliberately exclude keystrokes, visible page text, query strings, images, and screenshots.

2. How data is used and shared

Data is used to administer enquiries, applications, course delivery, assessment, certification, and post-course advisory.
For SSG-funded courses, required records are submitted to SkillsFuture Singapore systems (TPGateway), including e-attendance and assessment results, and contact details support the TRAQOM learner survey.
Certification-relevant details are shared with the International Fitness Professionals Association (IFPA) to administer the online test and issue credentials.
After enrolment is confirmed, the submitted mobile number will be used to send a private invitation to a course WhatsApp group for course communication and voluntary peer learning. Joining is optional. A learner who accepts the invitation should expect WhatsApp/Meta and other group members to receive the profile details their WhatsApp account makes visible, which may include their profile name, photo, and mobile number, as well as anything they post. Learners should not post NRIC/FIN, medical details, payment information, or other sensitive personal data in the group.
For Silver Strength, date of birth stays in the restricted Education admin record and is not sent to volunteer trainers or included in the LMS beneficiary feed. Only the minimum contact, matching, availability, language, and the participant's own safety declaration needed to run the initiative cross those service boundaries.
Personal data is not sold or shared for third-party marketing.

3. Retention and protection

Training and assessment records are retained for at least 5 years from course completion, after which they are reviewed for secure disposal.
Privacy-minimised activity evidence is accessible only to LMS administrators and is normally retained for 730 days. It is retained longer only when required for an active investigation or a legal or regulatory obligation, then reviewed for secure disposal. It is separate from authoritative training and assessment records, which follow the retention period stated above.
Digital records are stored on password-protected cloud systems with two-factor authentication and regular backups.
Access is restricted by role; physical records, where they exist, are kept in a locked cabinet accessible only to the Director and Management Representative.
Staff are briefed on PDPA obligations during induction.

4. Cookies and advertising measurement

This website uses the Google Ads tag and the Meta (Facebook) Pixel. These set cookies and collect page-visit and device information so we can measure whether our advertising works (for example, that an application or payment followed an ad) and reach interested visitors with relevant ads on Google and Meta platforms.
These tools do not receive your name, NRIC, medical declarations, or any application form contents - they see pages visited, standard device information, and events such as an application being submitted or a payment completing (with the course fee amount).
Google and Meta process this data as described in their own privacy policies. You can opt out of personalised advertising via Google's Ads Settings (adssettings.google.com) and Meta's Ad preferences, and you can block or clear cookies in your browser at any time - the website works fully without them.
The admin console and learner-facing systems are excluded from advertising measurement.

5. Your rights

You may request access to, or correction of, your personal data by contacting the provider.
You may withdraw consent for non-essential communications (such as alumni updates) at any time; records required for regulatory retention are kept for the stated period.
Enquiries about personal data are acknowledged within 1 business day and answered within 2 business days.