Privacy Policy

Mentafund Pte. Ltd. ("Mentafund", "we", "us", or "our") is committed to handling your personal data with care, transparency, and respect. This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, how long we retain it, and the rights you have over it under Singapore's Personal Data Protection Act 2012 ("PDPA").

By accessing our website or engaging with our programmes, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Mentafund Pte. Ltd. is the data controller responsible for your personal data. We operate as a financial education provider in Singapore, offering structured learning programmes to individuals. Our registered address is:

Mentafund Pte. Ltd.
20 Cecil Street, #14-07, PLUS
Singapore 049705
Tel: +65 6459 8321

2. Personal Data We Collect

We collect personal data when you voluntarily provide it to us and when you interact with our website. The categories of data we may collect include:

• Contact information — name, email address, phone number
• Enquiry content — the message or question you submit through our contact form
• Programme registration data — preferred programme, session preferences, and any relevant background information you choose to share
• Payment information — processed through our payment gateway; we do not store full card details
• Usage data — IP address, browser type, pages visited, time on site, and referring URL, collected automatically via analytics tools
• Cookie data — as described in Section 8 below and our Cookie Policy

We collect only the information necessary for the purposes described in this policy. We do not collect sensitive personal data (such as identity card numbers, financial account details, or health information) unless you choose to share it voluntarily in the context of an advisory programme.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries and provide information about our programmes
• To process programme registrations and deliver our educational services
• To send you relevant programme updates, scheduling communications, and follow-up content you have opted into
• To process payments for programme fees
• To improve our website, content, and programme offerings based on aggregated usage data
• To comply with applicable legal and regulatory obligations
• To send marketing communications about new or related Mentafund programmes, where you have given consent to receive such communications

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

Under the PDPA, we rely on the following bases to collect and use your personal data:

• Consent — where you have expressly agreed to the collection and use of your data, such as when you submit an enquiry form or opt into our email series
• Contractual necessity — where processing is necessary to deliver the programme you have registered for
• Legitimate interests — where we have a genuine business reason to process data (such as improving our services) that does not override your rights and interests
• Legal obligation — where we are required to process data to comply with applicable Singapore law

5. Sharing Your Personal Data

We do not sell, rent, or trade your personal data. We share it only in the following circumstances:

• Service providers — third parties who assist us in operating our website, processing payments, or delivering programme communications (e.g. email service providers, payment processors). These parties are bound by data processing agreements and may only use your data for the purposes we specify.
• Analytics providers — anonymised or aggregated data may be shared with analytics tools (such as Google Analytics) to help us understand website performance
• Legal requirements — where we are required by law, court order, or a regulatory authority to disclose personal data
• Business transfers — in the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections

Where we transfer personal data to service providers outside Singapore, we take steps to ensure that the receiving organisation provides a standard of data protection comparable to that under the PDPA.

6. Data Retention

We retain your personal data only for as long as it is necessary to fulfil the purposes described in this policy, or as required by law. Our general retention periods are:

• Enquiry and contact data — 2 years from the date of last contact
• Programme registration and delivery data — 5 years from programme completion, in line with standard financial records retention
• Payment records — 7 years, in line with Singapore's tax and accounting obligations
• Marketing consent records — retained until you withdraw consent, then deleted within 30 days
• Website usage data — aggregated analytics retained for up to 26 months

When data is no longer required, we securely delete or anonymise it.

7. Your Rights Under the PDPA

Under the PDPA, you have the right to:

• Access your personal data that we hold, and request information about how it has been used
• Correct any inaccurate or incomplete personal data
• Withdraw consent to the collection, use, or disclosure of your data at any time — this will not affect the lawfulness of processing carried out before withdrawal
• Data portability — receive a copy of your personal data in a commonly used machine-readable format (where technically feasible)
• Cease use or disclosure of your personal data for direct marketing purposes

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 30 days. We may need to verify your identity before processing certain requests.

If you believe we have not handled your personal data appropriately, you may also lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience and understand how our site is used. Please refer to our Cookie Policy for full details, including the types of cookies we use and how to manage your preferences.

You can adjust your cookie settings at any time by clicking "Cookie Settings" in the footer of our website.

9. Third-Party Websites and Links

Our website may contain links to third-party websites. These are provided for your convenience and do not constitute an endorsement. We are not responsible for the privacy practices of any external sites, and we encourage you to review their privacy policies before providing any personal data.

10. Minors

Our programmes and website are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently received data from a minor, please contact us promptly and we will arrange for its deletion.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will endeavour to provide a more prominent notice. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us: