Privacy Policy

1. Introduction

Dynamics International School ("DIS", "we", "us") is committed to protecting the personal data of students, parents, and guardians in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore. This Privacy Policy explains how we collect, use, disclose, and protect your personal data through our admissions platform.

2. Data We Collect

We collect the following categories of personal data during the admissions process:

• Parent/Guardian Information: Name, email, phone number, relationship to student, nationality, address
• Student Information: Name, date of birth, gender, nationality, current school, photograph
• Medical Information: Primary diagnosis, additional diagnoses (collected with explicit consent)
• Educational Records: Academic transcripts, assessment reports, school reports
• Immigration Information: Passport details, student pass type and expiry
• Technical Data: IP address, browser type, device information (for security purposes)

3. Purpose of Data Collection

Your personal data is collected and used for:

• Processing and evaluating admissions applications
• Communicating with you about application status and school events
• Complying with regulatory requirements (EduTrust, ICA, CPE)
• Providing appropriate educational support and accommodations
• Financial administration including invoicing and fee protection
• Marketing communications (only with your explicit consent)

4. Legal Basis for Processing

We process your personal data based on your consent (which you may withdraw at any time), contractual necessity for providing educational services, compliance with legal obligations under Singapore law, and legitimate interests in operating an educational institution.

5. Consent Management

You may grant or withdraw consent for specific types of data processing through your parent portal account. Withdrawal of general PDPA consent may affect our ability to process your child's application. Withdrawal of marketing consent will not affect your application status. You may manage your consent preferences at any time through the "Privacy & Consent" section of your parent portal.

6. Data Retention

We retain personal data for the duration of the student's enrolment and for a period of 7 years after the last interaction, in accordance with regulatory requirements. Unsuccessful applications are retained for 2 years. You may request deletion of your data subject to our legal obligations.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption at rest and in transit, access controls, regular security audits, and secure data storage within Singapore (Southeast Asia region) to comply with PDPA data residency requirements.

8. Automated Document Processing

To assist staff with verifying uploaded documents (passports, birth certificates, school reports, immunisation records), we use automated tools to extract text and check that the document matches the information in your application. These tools include:

• Google Cloud Vision (Singapore region, asia-southeast1): optical character recognition and field extraction.
• AWS Bedrock with Anthropic Claude (Singapore region, ap-southeast-1):document classification, name/date matching, and translation of non-English documents.

All automated processing occurs within Singapore. We do not transfer your documents or extracted data outside Singapore. The output of these tools is reviewed by a human staff member before any admissions decision is made; you retain the right to request human-only review of any document under our PDPA grievance process.

9. Sub-Processors and Cross-Border Transfers

We rely on a limited number of sub-processors. The following processors handle parent or student personal data, and all are configured to process and store data within Singapore:

• Microsoft Azure (Southeast Asia region) — application hosting and database storage.
• Google Cloud Vision (asia-southeast1) — automated document OCR.
• Amazon Web Services (ap-southeast-1) — Bedrock-hosted Claude model for document verification.
• Email/SMS delivery providers — limited transactional notifications only.

We do not transfer personal data outside Singapore in the ordinary course of operations. If cross-border transfer ever becomes necessary, we will obtain prior consent and ensure comparable protection in accordance with PDPA section 26.

10. Your Rights Under PDPA

Under the PDPA, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate personal data
• Withdraw consent for data processing
• Request information about how your data has been used or disclosed in the past year
• Lodge a complaint with the Personal Data Protection Commission (PDPC)

11. Data Protection Officer

For any questions or requests regarding your personal data, please contact our Data Protection Officer at dpo@dynamics.edu.sg. We will respond to your request within 30 business days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through your parent portal account or by email. Continued use of our services after changes constitutes acceptance of the updated policy.