How CyberCare Learn handles your personal data
Last updated: 10 November 2026
This notice applies to personal data collected through learn.cybercare.com.sg by CyberCare Pte Ltd (UEN 202528324G), "CyberCare", "we". We follow Singapore's Personal Data Protection Act 2012 (PDPA), Malaysia's Personal Data Protection Act 2010, Australia's Privacy Act 1988 and Australian Privacy Principles, and New Zealand's Privacy Act 2020. The highest applicable standard applies to you.
Gaurav Goel · dpo@cybercare.com.sg · +65 8989 8937
CyberCare Pte Ltd, 246 MacPherson Road, #03-01, BeTime Building, Singapore 348578
What we collect
- About you: first and last name, work email address, mobile number and job title.
- About your organisation: name, industry, size, country and city; optionally office address, state or region, and postcode.
- Your preferences: training topics, your free-session topic, how you heard about us, and whether you opted in to marketing emails.
- Technical data: your IP address and the time you registered and confirmed your email, used for security and as a record of your consent.
We do not ask for NRIC, MyKad, passport, tax file numbers or other government identifiers, payment details or sensitive information. Please don't include them.
Why we collect it
- To verify your email address and register you for CyberCare Learn.
- To schedule your free 45-minute session and send Microsoft Teams invitations for the training you asked about.
- To contact you about those sessions by email, phone or WhatsApp.
- To protect the service from abuse and to keep records of consent.
- Only if you opt in: to email you occasional news about CyberCare services and events. Every such email has an unsubscribe link. We will not make marketing calls or send marketing text messages.
If you don't provide the required details, we can't register you. The optional address fields are not needed to attend online training.
Consent and withdrawal
We rely on your consent, which you give when you register. You can withdraw it at any time by emailing dpo@cybercare.com.sg. We will then stop using your data and delete it, except where the law requires us to keep it. Withdrawing consent means we can no longer send you training invitations.
Who we share it with
Only authorised CyberCare staff can see your data. We use these service providers, who process it only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting, security and database | Database in the Asia-Pacific region; global network |
| Resend (email delivery) | Sending verification codes and confirmations | United States |
| Microsoft (Teams, Microsoft 365) | Training sessions and our email | Asia-Pacific and other regions |
We do not sell or rent your personal data.
Transfers outside your country
Some providers store or process data outside Singapore, Malaysia, Australia or New Zealand. Before transferring, we take reasonable steps to make sure your data receives protection comparable to your local law, including contractual data protection terms. By registering, you consent to these transfers. If you're in Australia, please note that overseas recipients may not be bound by the Australian Privacy Principles.
How we protect it
Data is encrypted in transit. Email addresses are verified with one-time codes that are stored only in hashed form. Admin access requires a one-time code sent to a restricted company mailbox. Our information security is certified to ISO/IEC 27001. If a data breach is likely to cause you serious harm, we'll notify you and the relevant regulator as required by law (for example, within 3 days of assessment for the PDPC in Singapore).
How long we keep it
We keep your registration while you remain interested in our training. We delete it when you ask, or after 24 months with no activity. Records of consent may be kept for up to 2 years after deletion to show we acted lawfully.
Your rights
You can ask us to give you a copy of your data, correct it, or delete it. Email dpo@cybercare.com.sg and we'll respond within 30 days, or within 20 working days if you're in New Zealand. There is no charge for reasonable requests.
Complaints
Please contact our Data Protection Officer first. If you're not satisfied, you can contact your regulator:
- Singapore: Personal Data Protection Commission (pdpc.gov.sg)
- Malaysia: Personal Data Protection Department (pdp.gov.my)
- Australia: Office of the Australian Information Commissioner (oaic.gov.au)
- New Zealand: Office of the Privacy Commissioner (privacy.org.nz)