1. Introduction
1.1 The Catholic Leadership Centre (collectively referred to herein as “CLC”, “we”, “us”, “our”) is committed to protecting the personal data of individuals who provide personal information to us, including personal data provided through our websites as referred to in Clause 1.1 of the Terms and Conditions of Use.
1.2 The personal data collected by CLC enables us to carry out our work of forming and equipping Catholic leaders in Singapore under Singapore Law. CLC is bound by the Singapore Personal Data Protection Act (2012) (the “Act” or “PDPA”) which governs how CLC collects, uses and/or discloses any personal data.
1.3 This Policy describes ways in which CLC collects, uses, discloses, stores, and disposes of personal data.
2. Types of personal data collected
2.1 “Personal data” generally refers to any data, whether true or not, about an individual who is identifiable from the provided data or information to which we have or are likely to have access to. This will include the data from our records which may be updated from time to time. Business contact information (e.g. full name, business address, business telephone number) is not considered as personal data so long as it is used strictly for business-to-business (B2B) transactions.
2.2 The personal data that CLC may collect about you includes the following (the list is non-exhaustive):
- Enrolment information relating to a person’s enrolment at a Catholic school, retreat or training centre. This will include:
- Personal information, such as name, age, date of birth, religion and birth sex
- Personal contact information such as telephone numbers, email addresses and platform user handles
- Parish, Church organisation or school which you belong to
- Photographs and video recordings such as photos taken during services and events, CCTV recordings
- Testimonials or quotes taken from your feedback
- Payment information such as bank accounts if you are employed by CLC
- Employment information such as employment history and academic qualifications when applying for internships or employee positions
- Account profile information such as username
- Usage and Technical information such as internet protocol addresses, cookies and browser information related to your use of any of our online platforms
- Marketing information such as your preferences in receiving details of our services and programmes
3. Purpose of collecting personal data
The exact personal data collected will depend on the purpose and needs of CLC. We endeavour to only collect, use or disclose personal data which we consider reasonably necessary for the purposes underlying such collection, use or disclosure.
3.1 CLC collects personal data for purposes such as those indicated below (the list is non-exhaustive):
3.1.1 Events, Activities and Services
- To register attendance and manage participation for events and activities such as training courses, retreats, workshops, seminars etc conducted by CLC
- To track the events and activities attended by participants
- To promote and publicise the work of CLC (photos and short quotes only)
3.1.2 Donations, Giving and Payments for services
- To process donations and all types of giving
- To process payments and refunds
3.1.3 Volunteering, Internship and Employment
- To assess and manage volunteer recruitment and deployment to ministries
- To assess and manage applications of interns and employees
3.1.4 Online Services
- To administer the dissemination of information and news by way of newsletters, magazines and the like
- To process and manage registrations
- To maintain user accounts
- To respond to requests and queries
- To analyse and personalise online services experience
3.1.5 Others
- To process data for statistical analysis and reporting
- To carry out our obligations arising from any contracts entered into between you and us
- To comply with legal obligations and regulatory requirements
3.2 Where CLC collects data for purposes other than those listed above, CLC will disclose to you such purpose by suitable means.
4. Use of personal data
4.1 All personal data will be used for the purpose for which it was collected. CLC may also use the personal data for purposes which are permitted by law.
4.2 For prospective employees, CLC may collect personal data by speaking with employment referees. We may contact applicants’ previous employers who have not been nominated as referees. All personal data given as part of a prospective employment application will be used to assess the applicant’s suitability for the position that has been applied for. Such personal data may also be used to assess the individual’s suitability for a position for which the applicant has not applied, but one which we believe the individual may be suited for. Should this be the case, we will obtain consent before considering the applicant for such other position.
5. Disclosure of personal data
5.1 We disclose some of the personal data we have collected about you to the following parties outside CLC:
- Catholic organisations which are body corporates, registered societies or are otherwise legal entities in their own right
- Government agencies such as the Ministry of Manpower, Commissioner of Charities, Registry of Societies
- Providers of professional services such as lawyers, auditors
- Banks, insurers, payment gateway service providers and other financial institutions
- Third party service providers such as freight and courier services, data processing, cloud services, web hosting companies
5.2 CLC may from time to time and in compliance with all applicable laws on data protection disclose your personal data to third parties, whether located in Singapore or elsewhere, in order to carry out the purposes set out above. Where CLC makes such disclosure, confidentiality agreements would be in place in order to protect the personal data.
5.3 CLC may distribute aggregated statistical information to the Vatican and other Catholic Church agencies for reporting purposes. In most cases, personal data will be anonymised such that no individual will be identified.
5.4 CLC will NOT disclose any personal data for direct marketing purposes without your prior consent.
6. Obtaining Consent
By providing your personal data to CLC, you consent to the CLC’s collection, use and disclosure of your personal data in accordance with this Policy.
6.1 Before collection, usage or disclosure of your personal data, CLC will notify you of the purposes and will obtain express consent from you. We will not collect more personal data than is necessary for the stated purpose and will seek fresh consent from you if the original purpose for the collection, use or disclosure of your personal data has changed.
6.2 Under certain circumstances, CLC may assume deemed consent from you when you voluntarily provide your personal data for the stated purpose such as when you apply for a job with us or pose for a photo for CLC.
6.3 We may rely on exceptions to the need for consent under the PDPA for the collection, use or disclosure of your personal data under the following circumstances:
- The personal data is publicly available
- The personal data is disclosed by a public agency or disclosed to a public agency
- The personal data is necessary for any investigation or proceedings
- The personal data is necessary for evaluative purposes (e.g. determining the suitability of a job applicant for the job applied for)
- The personal data is necessary for the purpose of managing or terminating an employment relationship
- The personal data is necessary to respond to an emergency that threatens your life, health and safety or of another individual.
6.4 Third-Party Consent
If you have a one-on-one meeting with us, communicate with us in any form or have a transaction with us on behalf of another individual (e.g. your spouse, child or family member), you represent and warrant that the collection, use and disclosure of that personal data to us, as well as the further processing of that personal data by us for the purposes set out in this Policy is lawful.
7. Accuracy of information
7.1 CLC strives to ensure the accuracy of the personal data that we have by taking reasonable precautions and performing verification checks to ensure that the personal data we have collected from you is reasonably accurate, complete and up-to-date.
7.2 From time to time, CLC may do a verification exercise with you to update on any changes to your personal data. If you are in an ongoing relationship with CLC, it is important that you update us of any changes to your personal data.
7.3 However, you also play a part to ensure that the personal data provided is accurate, relevant and up-to-date. Please see the next section 8 on how you may correct any errors or omissions of your personal data.
8. Access and Correction of personal data
8.1 You may request for access to your personal data that CLC has in our possession or under our control and how it may have been used and/or disclosed by us in the previous one year. Before CLC accedes to your request, we may need to verify your identity by checking your legal identification document. We will respond to your request as soon as possible, or within 30 days from the date we receive your request. If we are unable to do so within 30 days, we will let you know and give you an estimate of how much longer we require.
8.2 CLC is entitled to impose a reasonable charge on the requestor for providing them with the personal information, particularly where photocopying, scanning and/or some form of electronic transfer is required.
8.3 All access requests must be made in person and in writing using the specified form. Access requests are to be directed to the relevant Data Protection Officer (see below). Please bring along proper identification documents to confirm your identity.
8.4 If you find that the personal data that CLC holds about you is inaccurate, incomplete or not up-to-date, please contact us to correct the data. Unless CLC is satisfied on reasonable grounds that a correction should not be made, we will correct the data as soon as possible, or within 30 days from the date we receive your request.
9. Withdrawal of Consent
9.1 If you wish to withdraw your consent to any collection, use or disclosure of your personal data, you should give CLC reasonable advance notice. We will advise on the exact time frame required to respond to the notification and effect any change. However, all changes to be effected should be implemented no more than one month from the date of notification.
9.2 If you withdraw your consent to the collection, use and disclosure of your personal data, CLC may NOT be able to:
- Attend to your training or formation needs
- Offer you volunteer opportunities, internship or employment
- Deal with any enquiries, difficulties or concerns that you might have
9.3 Your request for withdrawal of consent can take the form of an email to us by contacting the Data Protection Officer or through the “UNSUB” feature on an online service.
10. Protection of personal data
10.1 CLC has implemented reasonable and appropriate security measures to protect the personal data we hold about you against loss, misuse, destruction, unauthorised alteration/modification, access, disclosure or similar risks. CLC has also put in place reasonable and appropriate organisational measures to maintain the confidentiality and integrity of your personal data and will only share your data with authorised persons on a ‘need to know’ basis.
10.2 You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your personal data and are constantly reviewing and enhancing our information security measures.
11. Retention of personal data
- 11.1 CLC will only retain the personal data collected for as long as it is required for the fulfilment of the purposes or allowed by any applicable law to be retained and will ensure that personal data that is no longer needed will be destroyed or disposed of in a secure manner.
- 11.2 Any unsolicited personal data received from individuals will be assessed whether it is necessary to provide the individual with services that they have requested for and will be deleted if found to be unnecessary.
12. Transfer of personal data
12.1 CLC may transfer your personal data outside of Singapore. Where CLC does so, we will comply with the PDPA and other applicable data protection and privacy laws.
13. Questions and feedback
13.1 If there are any queries about this policy or feedback regarding the handling of personal data, please contact CLC’s Data Protection Officer at david.ong@catholic.org.sg directly.
13.2 Any query or complaint should include, at least, the following details:
- Your full name and contact information
- Brief description of your query or complaint
13.3 All feedback is taken seriously and will be reviewed accordingly. CLC will endeavour to resolve all raised issues efficiently.
14. Links to Other Sites
14.1 Our Web Services may contain links to other Web Services that are not operated by us. If you click on a third-party link, you will be directed to that third party’s website.
14.2 It is important that you review the privacy policy of every site you visit. We have no control over, and are unable to assume any responsibility for the content, privacy policies or practices of any third-party sites or services.
15. Changes to the policy
15.1 CLC may review and update our policy from time to time and will notify you of any changes by posting the latest version of our Policy on our Web Services. Please revisit this page periodically for any changes.
15.2 Changes to this Policy are effective when they are posted on this page.
Last update: 12 November 2024