Privacy Policy

Our Commitment to Privacy

createhoss is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to your data.

This policy applies to all information collected through our website, courses, and any related services. By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Contact Information

When you contact us or enroll in our courses, we collect:

Full name
Email address
Phone number
Mailing address (if applicable)

Usage Data

We automatically collect certain information when you visit our website:

IP address and browser type
Pages visited and time spent on pages
Referring website and exit pages
Device information and operating system
Date and time of visits

Course Information

For enrolled students, we collect:

Course enrollment details and progress
Project submissions and assignments
Attendance records and participation
Feedback and assessment data

Payment Information

When you make a payment, we collect transaction details through secure third-party payment processors. We do not store complete credit card information on our servers.

How We Use Your Information

Service Delivery

We use your information to provide, maintain, and improve our courses, process enrollments, communicate about course schedules, and deliver educational content.

Communication

We contact you regarding your inquiries, course updates, administrative matters, and educational announcements. You can opt out of marketing communications at any time.

Website Improvement

We analyze usage data to understand how visitors interact with our website, identify technical issues, and improve user experience and content relevance.

Legal Compliance

We process data to comply with legal obligations, enforce our terms of service, protect our rights and safety, and respond to lawful requests from authorities.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent:

You have given clear consent for us to process your personal data for specific purposes, such as marketing communications.

Contract:

Processing is necessary for performing our contract with you, such as providing course services you've enrolled in.

Legitimate Interest:

Processing is necessary for our legitimate business operations, website analytics, and service improvement.

Legal Obligation:

Processing is required to comply with applicable laws, regulations, and legal processes.

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with the following categories of recipients:

Service Providers

We work with third-party companies that provide services such as website hosting, email delivery, payment processing, and analytics. These providers have access to personal data only to perform specific tasks on our behalf and are obligated to protect your information.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when necessary to protect our rights, safety, or property.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Encryption: We use SSL/TLS encryption for data transmission and store sensitive data in encrypted formats.
Access Controls: We limit access to personal data to authorized personnel who need it to perform their job functions.
Secure Storage: Our servers are hosted in secure facilities with physical and digital access restrictions.
Breach Notification: In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by law.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

Contact Form Submissions: 3 years from date of inquiry

Student Records: 5 years after course completion for academic purposes

Financial Records: 7 years as required by Singapore tax regulations

Marketing Data: Until you withdraw consent or request deletion

Website Analytics: 26 months of aggregated, anonymized data

After the retention period expires, we securely delete or anonymize your personal data unless longer retention is required by law.

Your Rights

Under applicable data protection laws, you have the following rights:

Right to Access

Request copies of your personal data we hold

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data

Right to Restrict Processing

Request limitation of how we process your data

Right to Data Portability

Receive your data in a structured format

Right to Object

Object to certain types of data processing

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Third-Party Services

Our website and services may contain links to third-party websites and integrate with third-party services. These include:

Google Analytics: Website traffic analysis
Payment Processors: Secure payment processing
Email Service Providers: Course communication and newsletters
Social Media Platforms: Share buttons and embedded content

These third parties have their own privacy policies. We are not responsible for their privacy practices and encourage you to review their policies before interacting with their services.

Children's Privacy

Our courses are designed for individuals aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than Singapore. When we transfer data internationally, we ensure appropriate safeguards are in place through:

Standard contractual clauses approved by regulatory authorities
Data processing agreements with service providers
Compliance with applicable data protection frameworks

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the policy was last revised.

We will notify you of material changes by posting a notice on our website or sending an email to registered users. Your continued use of our services after such modifications constitutes your acknowledgment and acceptance of the updated policy.