Privacy Policy

Introduction

Management Development Institute of Singapore ("MDIS", "we", "our" or "us") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, process, disclose, retain, transfer and protect your personal data. It should be read together with our application forms, consent clauses and other notices which may be provided online or to you from time to time.

This Policy has been developed in accordance with the Personal Data Protection Act 2012 and its regulations ("PDPA") and applicable guidance issued by the Personal Data Protection Commission ("PDPC").

This Policy applies to all individuals who interact with MDIS, including:

  • Prospective MDIS students
  • Current MDIS students
  • MDIS Graduates and alumni
  • MDIS students’ parents and guardians
  • Sponsors
  • Donors
  • Volunteers
  • Scholarship providers
  • MDIS Governing Council members
  • MDIS Staff
  • Agents
  • Visitors
  • MDIS Members
  • Other stakeholders interacting with MDIS

By interacting with MDIS, submitting information to us, accessing our services, requesting our services or products, or otherwise providing personal data to us, you acknowledge that you have been notified of the contents of this Privacy Policy.

For the purposes of this Policy, "personal data" has the meaning given under the PDPA and refers to data about an individual who can be identified from that data alone or from that data together with other information to which MDIS has or is likely to have access.

1. What Personal Data Do We Collect?

Depending on your relationship with MDIS, we may collect your:

  • Name
  • Photograph
  • NRIC, FIN, passport number or other identification information where required, permitted by law or reasonably necessary
  • Date of birth
  • Nationality
  • Gender
  • Race
  • Residential address
  • Mailing address
  • Telephone numbers
  • Email addresses
  • Parent, guardian, sponsor and emergency contact information
  • Academic records
  • Educational qualifications
  • Examination results
  • Attendance records
  • Conduct and disciplinary records
  • Financial and payment information
  • Medical information where relevant
  • Visa, immigration and Student's Pass information
  • Employment and professional information
  • Correspondence and communications with MDIS
  • Course application details
  • CCTV footage
  • Photographs, video recordings and audio recordings during classroom lessons, events or seminars for publicity purposes
  • Information collected through our website, portals and educational systems

MDIS may collect certain technical information through our websites, portals and online systems, such as IP addresses, browser information, device information and usage data, for security, system administration, service improvement and analytics purposes.

We may collect personal data directly from you or from authorised representatives, parents, guardians, sponsors, educational institutions, government agencies, business partners and other lawful sources.

Where you provide us with personal data relating to another individual, you confirm that you are authorised to do so and have obtained any necessary consent.

2. Why We Collect Your Personal Data

We collect, use and disclose personal data for purposes including:

  • Processing applications and admissions
  • Student enrolment and course administration
  • Delivering educational programmes and services
  • Maintaining student and academic records
  • Providing examinations, assessments and certifications
  • Student welfare and support services
  • Providing scholarships, bursaries and financial assistance
  • Managing student accommodation and support arrangements
  • Student's Pass applications and immigration administration
  • Communicating with students, parents, sponsors, graduates and alumni
  • Processing payments and refunds
  • Managing events and student activities
  • Conducting research, analysis and service improvements
  • Managing campus safety and security
  • Maintaining institutional records
  • Communicating with partner universities and awarding institutions
  • Alumni engagement and networking activities
  • Fundraising and donor management activities
  • Complying with legal, regulatory, accreditation and audit requirements
  • Complying with obligations under the Private Education Act, Skills & Workforce Development Singapore ("SWDA") requirements and other applicable laws
  • Any purpose reasonably related to the above purposes

We may also collect, use or disclose personal data without consent where permitted or required under applicable laws, including the PDPA.

3. Who We May Share Your Personal Data With

MDIS does not sell or rent personal data.

Where necessary, as required by law, or to provide the service or product which you have requested for, we may disclose your personal data to:

  • Skills & Workforce Development Singapore ("SWDA"), or any successor regulatory authority
  • Immigration and Checkpoints Authority (ICA)
  • Other government agencies or regulators
  • Partner universities and awarding institutions
  • Examination and accreditation bodies
  • Banking and payment service providers
  • Scholarship providers and sponsors
  • Student insurance providers
  • Accommodation providers where relevant
  • Professional advisers, auditors and insurers
  • Learning management system providers
  • MDIS’ internal departments, management and staff
  • Cloud service providers
  • Technology vendors
  • Authorised agents
  • Service providers supporting MDIS operations
  • Law enforcement agencies
  • Other parties where disclosure is required or permitted by law

We take reasonable steps to require third parties to protect personal data appropriately.

4. Personal Data of Minors

MDIS recognises that many educational institutions process the personal data of minors.

Where a student does not have the legal capacity to provide consent, MDIS may obtain express and explicit consent from the student's parent, guardian or authorised representative in accordance with the PDPA, applicable laws and PDPC guidance.

MDIS will take reasonable steps to ensure that personal data relating to minors is collected, used and disclosed appropriately.

5. Photographs, Video Recordings and CCTV

MDIS may collect photographs, video recordings, audio recordings, recording lessons and CCTV footage for purposes including:

  • Campus safety and security
  • Student identification
  • Academic administration
  • Student activities and events
  • Quality assurance
  • Investigations and disciplinary proceedings
  • Institutional records and archives
  • Marketing and promotional materials

Where appropriate, we will obtain consent before using photographs or recordings for promotional purposes.

6. Withdrawing Your Consent

If you no longer wish to receive marketing messages or wish to withdraw consent, you may do so by completing the Notice of Withdrawal of Consent Form and emailing it to:

dpo@mdis.edu.sg

Subject: ATTN: Notice of Withdrawal of Consent

MDIS will process such requests within a reasonable period and will inform individuals of the likely consequences of withdrawing consent where applicable.

Please note that withdrawal of consent may affect our ability to provide certain services or products and/or to administer and/or process your relationship with MDIS.

7. Access and Correction

You may request:

  • Access to personal data held by MDIS
  • Information about how your personal data has been used or disclosed
  • Correction of inaccurate or incomplete personal data

Requests should be submitted to:

dpo@mdis.edu.sg

MDIS may verify your identity and charge a reasonable administrative fee where permitted by law.

If MDIS is unable to comply with a request, we may provide reasons where permitted by applicable laws.

8. Accuracy of Personal Data

MDIS takes reasonable steps to ensure that personal data collected is accurate, complete and up to date but we also rely on you to provide accurate and complete data.

Individuals are encouraged to notify MDIS promptly of any changes to their personal information.

9. Protecting Your Personal Data

MDIS implements reasonable technical, organisational and physical safeguards to protect personal data.

Safeguards may include:

  • Access controls
  • Role-based permissions
  • Secure authentication controls
  • Encryption where appropriate
  • Network security measures
  • System monitoring
  • Confidentiality obligations
  • Staff training and awareness
  • Secure disposal procedures

MDIS will assess any actual or suspected data breach involving personal data in accordance with applicable legal requirements. Where a data breach is determined to be notifiable under the Personal Data Protection Act, MDIS will notify the Personal Data Protection Commission and affected individuals, where required, as soon as practicable and in accordance with applicable statutory requirements. MDIS will also take reasonable steps to contain, investigate and remediate the effects of any data breach where appropriate.

If you become aware of any actual or suspected misuse of your personal data involving MDIS, please contact our Data Protection Officer immediately at dpo@mdis.edu.sg.

10. Retention of Personal Data

MDIS retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected or as required by law.

Certain records may be retained for extended periods, including:

  • Academic transcripts
  • Qualifications and certifications
  • Examination records
  • Attendance records
  • Disciplinary records
  • Regulatory records
  • Accounting and audit records
  • Alumni records

Such retention may be necessary for verification, accreditation, legal, audit, regulatory, charitable governance, operational or historical purposes. This includes compliance with obligations arising under the Private Education Act, Skills & Workforce Development Singapore ("SWDA") regulatory requirements, applicable accounting and audit obligations, and governance obligations applicable to charities and institutions associated with MDIS

When personal data is no longer required, MDIS will securely destroy, anonymise or dispose of it appropriately.

11. Sending Personal Data Overseas

MDIS may transfer personal data outside Singapore, including to:

  • Overseas university partners
  • International awarding bodies
  • Cloud service providers
  • Technology service providers
  • Other affiliated organisations

Where such transfers occur, MDIS will take reasonable steps to ensure that the recipient provides a standard of protection comparable to that required under the PDPA.

Such safeguards may include contractual commitments, institutional arrangements and recognised transfer mechanisms.

12. Marketing Communications

Where prior express consent has been obtained with regards marketing communications or where otherwise permitted under applicable laws,

MDIS may send information about:

  • Educational programmes
  • Events
  • Seminars
  • Alumni activities
  • Career opportunities
  • Promotions
  • Institutional initiatives

Individuals may opt out at any time in accordance with Section 6.

13. Complaints and Feedback

If you have concerns regarding the handling of your personal data, you may submit a complaint to the Data Protection Officer.

MDIS will endeavour to respond to complaints and provide an outcome following completion of its review.

MDIS will review and investigate complaints within a reasonable timeframe and may request additional information where necessary.

14. Data Protection Officer

MDIS has appointed a Data Protection Officer ("DPO") to oversee compliance with applicable data protection laws and regulations. Our DPO’s details are:

Name: Mr Albert Lim Kok Chuan

Email: dpo@mdis.edu.sg

15. Changes to This Privacy Policy

MDIS may amend this Privacy Policy from time to time to reflect changes in our operations, services, legal obligations or regulatory requirements.

The latest version will be published on the MDIS website and will supersede previous versions. We reserve the right to make changes any time at our discretion without further notice to you. Please check our website regularly for the latest terms and conditions and privacy policy. Thank you.