Purpose limitation
Personal information is used for the purpose it was collected for. It is not repurposed for marketing without a separate basis and consent.
Privacy Policy
This policy explains how Cyberwisdom Group handles personal information across www.cyberwisdom.net and the services described on this site.
Scope & controller<b>Controller.</b> Cyberwisdom Group, headquartered in Singapore at 34 Floor, 77 Robinson Road, Singapore 068896, is the controller for information collected through this website. Certain services are delivered by Cyberwisdom Asia Ltd. in Hong Kong, which acts as a separate controller for the personal information it processes in delivering those services. <b>Scope.</b> This policy applies to www.cyberwisdom.net. The Hong Kong enterprise learning site at cyberwisdom.com.hk is operated separately and publishes its own privacy notice. <b>Contact.</b> Privacy enquiries can be directed to <b>[email protected]</b>.
Who is responsible.
What we collect
Information collected and why.
| Category | Purpose | Basis |
|---|---|---|
| Contact enquiry details | Responding to enquiries, preparing a demonstration and preparing proposals | Legitimate interests in responding to you, and taking steps at your request |
| Account and usage records | Operating learning platforms, administering entitlements and producing audit-ready training records | Performance of contract, and legal obligations in regulated training |
| Learning and assessment records | Delivering training, certifying competence and evidencing CPD compliance | Performance of contract; legal or regulatory obligation |
| Cookies and technical data | Operating the site, remembering preferences and measuring performance | Legitimate interests in operating and improving the site |
| Cookies on client platforms | Remembering a learner, tracking course progress and supporting assessment integrity | Legitimate interests in delivering the learning service |
How it is used
Principles we apply.
Data minimisation
We collect what is needed to deliver the service, to evidence compliance and to operate the platform. We do not collect because it might be useful later.
No sale of personal information
Cyberwisdom Group does not sell personal information. Personal information is not disclosed to third parties except to service providers acting under contract, or where required by law.
Retention
Personal information is retained only for as long as required for the service, for legal or regulatory record-keeping, or for legitimate business purposes — then deleted or anonymised.
Automated decisions
Where AI-assisted processing forms part of a client service, it is applied under the client's instructions with human accountability at consequential steps. It is not used to make decisions about individuals without a human accountable owner.
Your rights
What you can ask for.
- Access. A copy of the personal information we hold about you, and information about how it is used.
- Correction. Rectification of personal information that is inaccurate or incomplete.
- Deletion. Erasure of personal information where the applicable grounds apply.
- Restriction. Restriction of processing while an accuracy concern or a legal obligation is addressed.
- Portability. Personal information in a structured, commonly used, machine-readable format.
- Objection and withdrawal. Object to processing based on legitimate interests, and withdraw consent at any time where processing relies on it.
- Complaint. You may complain to your local data protection authority. We would rather you raise it with us first so we can respond properly.
Security & international transfers
How it is protected.
Security measures and cross-border operation
Cyberwisdom Group operates across Singapore, Hong Kong, mainland China and other Asia-Pacific locations, which means personal information may be processed in more than one jurisdiction. Where information is transferred, the transfer is governed by appropriate safeguards.
- <b>Technical measures.</b> Encryption in transit and at rest, role-based access control with least privilege, segregated environments, and regular penetration testing of client-facing platforms.
- <b>Organisational measures.</b> Staff training, confidentiality obligations in employment contracts, documented incident response, and vendor assurance for subprocessors.
- <b>Transfer safeguards.</b> Where personal information is transferred outside its originating jurisdiction, we rely on an approved transfer mechanism appropriate to the receiving jurisdiction's requirements.
- <b>Incident response.</b> A documented process for identifying, containing and reporting a personal data incident, including notification to affected individuals and regulators where required.
Contact
Questions about this policy.
Privacy enquiries, access requests and complaints can be directed to <b>[email protected]</b>, or by post to Cyberwisdom Group, 34 Floor, 77 Robinson Road, Singapore 068896. We will acknowledge requests and respond within the period required by applicable law.