Privacy Policy
ThreeLeaf Learning Center (“ThreeLeaf”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, protect and retain personal data when you use our website, shop, learning portal, memberships, courses, live classes, activities, events, ThreeLeaf Coins, referral programme, Referral Cash Wallet and related services (collectively, the “Services”).
- What we collect and where it comes from
- How and why we use it
- Class, activity and marketing communications
- Memberships, Coins, referrals and the Cash Wallet
- Disclosure, overseas processing, security and retention
- Your choices and how to contact us
1. Scope and your acknowledgement
This Policy applies to personal data in our possession or under our control. By providing personal data or using a Service, you acknowledge the practices described here. Where consent is required, we will seek it in an appropriate manner. We do not require consent to collect, use or disclose more personal data than is reasonable for providing a requested product or service.
If you give us another person’s data, you confirm that you are authorised to do so and have informed that person of the relevant purposes. Please give us accurate, complete and current information.
2. Personal data we may collect
Depending on how you interact with us, we may collect:
- Identity and contact data: name, username, email, telephone number, billing and delivery address, and account identifiers.
- Account and membership data: login and profile details, membership plan and status, benefits, renewal or expiry information, tier eligibility, Ambassador review or approval status, and programme participation.
- Order and payment data: products or services ordered, amounts, discounts, coupons, delivery details, invoices, transaction status and limited payment references. Card or payment credentials are generally handled by the relevant payment provider rather than stored by us in full.
- Learning and event data: course and lesson enrolment, access and progress, completion, assessment or certification status, live-class registrations, attendance records, activity participation, lucky-draw or attendance-check results, and related communications.
- Rewards data: ThreeLeaf Coin balance, earning, redemption, reversal and adjustment history; membership reward rates; and records used to calculate reward eligibility.
- Referral and Cash Wallet data: referral codes and links, referrer/referee relationship, attributable eligible purchases, commission rate and calculation, pending and available balances, reversals, withdrawal history, fraud-review flags, and payout details such as account-holder name, PayNow identifier or bank account information. Sensitive payout fields may be encrypted at rest.
- Communications and preferences: enquiries, support messages, reviews, survey responses, consent records, and email or marketing preferences.
- Technical and usage data: IP address, device and browser information, login and security events, cookies, pages viewed, referring URLs, and interaction or diagnostic data.
3. How we collect personal data
We collect data directly from you when you register, order, enrol, attend, submit a form, save payout details, request a withdrawal or contact us. We also receive data automatically through our website and systems, from a referrer or referral link, from payment and delivery providers, from learning and event tools, and from service providers that support our operations. We may generate programme records from your transactions and participation.
4. How we use personal data
We may use personal data for purposes reasonably connected with the Services, including to:
- create, administer, authenticate and secure accounts;
- process orders, payments, delivery, returns, refunds and customer support;
- provide courses, lessons, learning materials, assessments, certificates, live classes, activities and attendance functions;
- send requested or necessary operational communications;
- administer memberships, entitlements, renewals, tiers and eligibility;
- calculate, issue, redeem, adjust and reverse ThreeLeaf Coins;
- attribute referrals, calculate and hold commissions, process withdrawals, maintain Cash Wallet ledgers, verify payout details and prevent duplicate or fraudulent claims;
- personalise and improve our Services, content and customer experience;
- perform analytics, system testing, auditing, accounting and record-keeping;
- detect misuse, security incidents, payment risk, self-referral, collusion and other suspected fraud;
- comply with law, regulatory requests, tax and accounting duties, and enforce our agreements or protect legal rights; and
- send marketing where you have consented or where otherwise permitted by law.
5. Class, activity and other communications
Operational messages
By registering for a course, live class, activity or event, you request that we use your contact details to administer that registration. We may therefore send confirmation, access links, preparation information, reminders, rescheduling or cancellation notices, attendance confirmations and closely related follow-up. Live-class registration messages are intended for the person who actually registered through the relevant registration process. We do not treat a person as registered merely because another user supplied or shared a class link.
Likewise, account, order, membership, security, referral, Coin and Cash Wallet notices may be sent when needed to operate those features. Because these are service messages, opting out of promotional marketing may not stop them. You may withdraw consent where applicable, but this can affect our ability to provide access, reminders, payouts or other requested features.
Promotional marketing
Marketing may include newsletters, promotions, new class invitations and general activity announcements not tied to an existing registration. We will provide an unsubscribe method where appropriate. An unsubscribe may take a reasonable period to process and does not affect transactional or legally required communications. You can also contact us using the details below.
6. Membership, ThreeLeaf Coins and referral programmes
We use account, purchase, learning, attendance and programme-activity records to determine membership status, benefits, reward rates and qualification criteria. Where a tier or Ambassador status depends on stated conditions or administrative review, we may use those records to assess and document eligibility.
ThreeLeaf Coins and Referral Cash Wallet earnings are separate. Coins are loyalty rewards used within the ThreeLeaf ecosystem subject to the applicable programme rules. Referral earnings are conditional cash commissions recorded in a separate ledger. We process eligible sales, refunds, cancellations and chargebacks because these may create, hold, release or reverse a Coin or commission entry.
For referral integrity, we may compare account, contact, address, order and payout identifiers to flag possible self-referrals, shared identities, duplicate accounts, collusion or abuse. A flag may lead to manual review; it is not necessarily a finding of wrongdoing.
7. Cookies and similar technologies
We and our providers may use cookies or similar technologies for login, cart and checkout functions, preferences, security, referral attribution, analytics and advertising. Essential cookies support requested website functions. Where required, you may manage non-essential cookies through the available consent controls or browser settings. Disabling cookies may affect account, cart, class or referral functions.
8. When we disclose personal data
We may disclose only the data reasonably needed to:
- hosting, website, cloud, database, email, communications, analytics and security providers;
- payment processors, banks and payout providers;
- delivery, fulfilment and customer-support providers;
- instructors, facilitators or event providers administering a registered class or activity;
- professional advisers, auditors and insurers;
- government, regulators, law enforcement or courts where required or permitted by law; and
- a buyer, successor or adviser in a proposed or completed business transaction, subject to appropriate safeguards.
Third-party platforms you choose to use, such as an external video meeting, messaging or payment service, may also process data under their own privacy terms. We do not sell your personal data as a standalone product.
9. Overseas transfers
Some providers may store or process data outside Singapore. Where the Personal Data Protection Act 2012 (“PDPA”) applies, we take appropriate steps to ensure transferred personal data receives a standard of protection comparable to that required under the PDPA.
10. Protection and data incidents
We use reasonable administrative, technical and physical safeguards appropriate to the nature of the data, which may include access controls, encryption for selected sensitive fields, logging, backups, updates and service-provider controls. No internet or storage system is completely secure. If a data breach is notifiable under applicable law, we will notify the Personal Data Protection Commission and affected individuals as required.
11. Retention
We retain personal data only while it remains reasonably needed for the purposes described here or for legal, accounting, tax, dispute, fraud-prevention and backup requirements. Retention periods vary. We may retain transaction, consent, learning completion, reward and wallet ledger records after an account closes where needed to preserve accurate records or meet legal obligations. When data is no longer required, we will delete, anonymise or otherwise cease retaining it in accordance with our processes.
12. Accuracy, access, correction and withdrawal
You may ask to access personal data we hold about you, learn how it was used or disclosed, or request correction, subject to the PDPA and applicable exceptions. We may need to verify your identity and may charge a reasonable fee where permitted, after telling you the estimated fee.
You may withdraw consent for collection, use or disclosure by giving reasonable notice. We will explain likely consequences and process the request within a reasonable period. Withdrawal does not affect earlier lawful processing and does not require deletion where retention remains legally or operationally necessary.
13. Children and young persons
Our Services are generally directed to adults. A parent or legal guardian should complete purchases, registrations and consents for a child or young person who cannot validly provide them. If you believe personal data was provided without appropriate authority, contact us so we can review it.
14. External links
Our Services may link to third-party sites or tools. Their privacy practices are controlled by them, and you should review their notices before providing personal data.
15. Changes to this Policy
We may update this Policy to reflect changes in law, technology or our Services. The current version and effective date will be posted here. Where a change is material, we may also provide notice through the website, account or contact details we hold. Continued use after the effective date acknowledges the updated notice, but we will seek new consent where the law requires it.
16. Contact and Data Protection Officer
For privacy questions, access or correction requests, consent withdrawal or complaints, contact our Data Protection Officer / privacy contact at info@threeleaflearning.com. Please use the subject line Privacy Request and include enough information for us to identify and respond to your request.
Website: www.threeleaflearning.com
