Programme terms & participant responsibilities

These terms govern classroom, hybrid, and remote facilitation delivered by Ulnenard (“we”, “us”) from 6 Raffles Boulevard #02-201 Marina Square, Singapore 039594, Singapore. By registering you agree to the version dated at the bottom of this page.

1. Parties & contact point

The data controller for enrolment information is Ulnenard Pte. Ltd. (placeholder entity name—replace with your registered legal name). Primary contact: +65 63388751 and the email addresses published on the contact page.

2. Data categories we collect

We collect identity data (name, employer), contact data (email, phone), billing identifiers, dietary or accessibility notes you volunteer, attendance markers, assignment uploads, and technical logs from our learning portals (IP address, browser type, timestamps).

3. Purposes & legal bases

Contract performance: delivering sessions, issuing certificates, processing payments. Legitimate interests: improving facilitator guides, securing our networks, aggregating anonymised satisfaction metrics. Consent: where you opt into marketing digests or optional analytics cookies described separately.

4. Retention

Enrolment records remain for seven years to meet tax obligations. Assignment artefacts you upload are deleted eighteen months after your cohort ends unless you request earlier removal and no dispute is pending. Support email threads follow a rolling twenty-four-month retention unless legal holds apply.

5. International transfers

Primary processing occurs in Singapore. If we enable processors hosted overseas (for example, video vendors), we rely on standard contractual clauses or comparable safeguards and list subprocessors in your invoice pack.

6. Third-party sharing

We share data with payment processors, learning-tool vendors you interact with during labs, and—only when required—government regulators. We do not sell personal data.

7. Security measures

Access to rosters is limited to facilitators with signed confidentiality clauses. MFA is required on staff accounts handling invoices. Incident response playbooks are tested twice yearly.

8. Your rights

You may request access, correction, portability, or deletion where law permits. Withdraw consent for non-essential communications at any time without affecting completed modules. Appeals follow the process described by the Personal Data Protection Commission (PDPC) in Singapore.

9. Children’s privacy

Programmes target working adults. If we learn a participant is below sixteen without guardian authorisation, we will freeze the account and delete unnecessary data.

10. Policy changes

Material updates appear here with a new effective date. Continued attendance after fourteen days constitutes acceptance unless you withdraw before the next billed milestone.

11. Participant conduct

Harassment, recording peers without consent, or sharing proprietary lab data outside your employer’s approved channels may result in removal without refund except where statute mandates otherwise.

Effective date: 1 February 2026 (placeholder).