Privacy Policy

OrcaDive Singapore ("we", "us", "our") operates the OrcaDive parent and admin portal at orcadive.com. We are committed to protecting the personal data of parents, students, teachers, and visitors in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").

For any questions about this policy or your personal data, contact our Data Protection Officer at the contact details provided below.

Account data: your name, email address, phone number (with country code), and password (stored as a one-way hash).

Profile data: preferred name, display name, avatar, SIA membership number, account type (member/guest), and (for guests) referring member details.

Student data: child's full name, date of birth, gender, medical notes, emergency notes, and relationship to the parent.

Operational data: class registrations, payment status and proof of payment, attendance records, medical certificate (MC) records and documents, and level promotion history.

We only collect personal data that is necessary for providing and administering our swimming programmes.

We collect and use your personal data for the following purposes, based on your consent and/or the performance of our services:

• Enrolling students in classes and assigning appropriate skill levels;

• Communicating with you about classes, schedules, payments, and programme updates;

• Recording attendance and tracking student progress and certifications;

• Processing payments and verifying payment proof;

• Handling medical certificates and refund requests;

• Safeguarding student welfare (e.g. medical and emergency notes shared with the assigned teacher);

• Meeting legal, regulatory, and safety obligations.

By registering an account and providing your (and your child's) details, you consent to our collection, use, and disclosure of personal data for these purposes.

Your personal data is shared on a need-to-know basis:

• Assigned teachers can see the names and relevant medical/emergency notes of students in their classes, to safeguard welfare;

• Administrators have access to registration, payment, and student records to manage operations and approve enrolments;

• We do not sell or rent your personal data to third parties.

We may disclose data to authorised third parties (e.g. payment or hosting providers) strictly to operate the service, and only to the extent necessary.

We protect personal data with access controls: parents can only view and manage their own family's records; teachers only see data for their assigned classes; administrators manage records for operational purposes.

Payment proof and medical certificate documents are stored in private storage and accessed only through time-limited, signed links after authorisation checks.

Sensitive credentials (such as API keys) are held in a secure environment vault, never in the queryable database.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to meet legal or operational requirements.

Operational records (registrations, attendance, payments) are retained while a student is active and for a reasonable period thereafter to support progress tracking and audits.

Medical and emergency notes are retained while a student is enrolled and are reviewed for deletion once they are no longer needed.

You may request earlier deletion of your data, subject to our operational and legal obligations (see Your Rights below).

Your data is processed and stored on our platform provider's infrastructure. Where personal data is transferred outside Singapore, we take steps to ensure a comparable standard of protection in line with the PDPA's Transfer Limitation Obligation.

Under the PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you and your children;

• Correct — request correction of inaccurate or incomplete personal data;

• Withdraw consent — withdraw consent for the collection, use, or disclosure of your personal data;

• Request deletion — ask us to delete your personal data where it is no longer necessary.

Parents can export their family's data and submit a deletion request directly from the Data & Privacy section of the parent portal. You may also contact us using the details below.

For access, correction, withdrawal, deletion requests, or any privacy questions, please contact us:

• WhatsApp: +65 8112 0218

• Through the Contact form on this website.

We will respond to verified requests within a reasonable timeframe.