Privacy Policy

Our Commitment to Privacy

Create How is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using our website and services, you consent to the data practices described in this policy.

Information We Collect

Personal Information

When you interact with our services, we collect information that you provide directly to us. This includes:

• Contact Information: Name, email address, phone number when you fill out contact forms or enroll in courses
• Account Information: Username, password, and profile details if you create an account
• Course Information: Course selections, progress, assignments, and feedback
• Communication Data: Messages, inquiries, and feedback you send through our contact forms or support channels
• Payment Information: Billing details processed through secure payment providers (we do not store complete payment card information)

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage patterns:

• Usage Data: Pages visited, time spent on pages, navigation paths, and interaction with website features
• Device Information: Browser type, operating system, device model, and screen resolution
• Location Data: General geographic location based on IP address (country and city level)
• Cookie Data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy
• Referral Information: Source of traffic and referring websites

Information from Third Parties

We may receive information about you from third-party services such as social media platforms if you interact with us through these channels, or from payment processors when you make purchases.

How We Use Your Information

We use the collected information for various purposes to provide and improve our services:

Service Delivery

• Process course enrollments and manage your participation in our programs
• Provide course materials, access to learning platforms, and student support
• Communicate about course schedules, updates, and important announcements
• Process payments and maintain transaction records
• Respond to your inquiries and provide customer support

Service Improvement

• Analyze website usage to improve functionality and user experience
• Develop new courses and features based on student feedback and needs
• Conduct research and analysis to enhance our educational content
• Monitor and maintain website security and performance

Marketing Communications

• Send promotional materials about new courses and special offers (with your consent)
• Provide educational content and resources related to content creation
• Share updates about Create How news and community events
• You can opt out of marketing communications at any time

Legal Compliance

• Comply with legal obligations and regulatory requirements
• Enforce our terms and conditions and protect our legal rights
• Prevent fraud, security breaches, and other harmful activities
• Respond to legal requests from authorities when required by law

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities, such as receiving marketing communications
• Contract Performance: When processing is necessary to fulfill our contractual obligations to provide courses and services you have enrolled in
• Legitimate Interest: When we have legitimate business interests, such as improving our services, preventing fraud, and maintaining security
• Legal Obligation: When we must process data to comply with legal requirements, such as tax and accounting obligations

Data Sharing and Disclosure

We do not sell your personal information. We share your data only in the following circumstances:

Service Providers

We work with third-party service providers who assist us in operating our business. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data:

• Payment processors for handling transactions securely
• Email service providers for sending communications
• Cloud hosting services for data storage and website hosting
• Analytics providers for understanding website usage
• Learning management system providers for course delivery

Business Transfers

If Create How undergoes a business transition such as a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and how it affects your data.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Access Controls: We limit access to personal information to authorized personnel who need it for their work
• Secure Storage: Personal data is stored on secure servers with regular backups
• Regular Audits: We conduct periodic security assessments and updates to our systems
• Staff Training: Our team receives training on data protection and security practices

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:

• Contact Form Submissions: 3 years from submission date
• Course Records: 5 years after course completion for educational records
• Financial Records: 7 years as required by Singapore tax regulations
• Marketing Data: Until you withdraw consent or request deletion
• Website Analytics: Typically 26 months in accordance with platform policies

After the retention period expires, we securely delete or anonymize your personal information.

Your Privacy Rights

You have the following rights regarding your personal information:

Right to Access

You can request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format.

Right to Rectification

You can request correction of inaccurate or incomplete personal information. We will update your information promptly upon verification.

Right to Erasure

You can request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent.

Right to Data Portability

You can request to receive your personal information in a structured, machine-readable format and transmit it to another service provider.

Right to Object

You can object to processing of your personal information for direct marketing purposes or when processing is based on legitimate interests.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore if you believe we have not handled your data properly.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.

International Data Transfers

Your information may be transferred to and processed in countries other than Singapore. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

We rely on standard contractual clauses approved by relevant authorities and ensure service providers comply with applicable data protection requirements.

Children's Privacy

Our services are intended for individuals aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date.

For significant changes, we may provide additional notice such as email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.