隱私政策
最後更新日期:*Required
1. 我們是誰及本政策的適用範圍
本隱私政策說明迪傲太平洋控股集團(以下稱「我們」)如何依照新加坡《2012年個人資料保護法》(以下稱「PDPA」)收集、使用、披露及保護個人資料。
由於集團旗下各項業務相互合作並共用同一套客戶紀錄,本政策適用於整個集團,包括:
- dredugroup.com,由迪傲太平洋控股有限公司(DR Pacific Holdings Pte Ltd,公司註冊號碼 200821037N,地址:No 99 Rangoon Road, Singapore 218384)營運(留學規劃、學校申請、學生准證、課程及相關服務);
- vinga.com.sg,由 *Required(公司法定名稱及註冊號碼)營運(學生宿舍、落地、簽證、保險、健康支援及學生生活服務);
- 我們的 Web App 及 Vinga 手機應用程式(Google Play、App Store 及華為應用市場 AppGallery);以及
- 我們的辦公室、宿舍、活動、電話專線及即時通訊帳號。
依照 PDPA,上述每一家公司均為獨立的機構。當您與其中一家公司往來時,即由該公司收集您的個人資料;第6條說明這些資料如何與集團內其他公司共用。
2. 我們收集的個人資料
視乎您使用的服務,我們可能收集:
- 身份資料:姓名、出生日期、性別、國籍、照片及護照資料。只有在法律要求(例如申請學生准證或長期探訪准證)或必須高度準確地核實您的身份時,我們才會收集護照、新加坡身份證(NRIC)或外國人身份號碼(FIN),這符合新加坡個人資料保護委員會(PDPC)就身份證號碼及其他國民身份號碼所發出的諮詢指引。
- 聯絡資料:地址、電郵、電話號碼及即時通訊帳號(WhatsApp、微信、LINE、KakaoTalk 等)。
- 家長及監護人資料:學生家長或監護人的姓名、關係及聯絡資料。
- 學業資料:在校紀錄、成績單、證書、考試成績(例如 AEIS)、課程選擇及申請資料。
- 移民及旅遊資料:學生准證、長期探訪准證及簽證資料、航班及抵達資料。
- 健康及保險資料:疫苗接種紀錄、您為安排醫療支援而提供的醫療資料,以及保單資料。我們將這類資料視為敏感資料,並限制可查閱的人員。
- 住宿資料:宿舍預訂、房間、膳食及住宿紀錄,以及宿舍和辦公室內的閉路電視(CCTV)影像。
- 付款資料:費用、發票及付款紀錄。信用卡付款由我們的付款服務商處理,我們不會儲存完整的卡號。
- 帳戶及應用程式資料:Web App 及手機應用程式的登入資料、申請進度及您傳送給我們的訊息。
- 網上資料:IP 位址、裝置及瀏覽器資料、瀏覽過的頁面及您到達我們網站的途徑,透過 Cookie 及類似技術收集(第8條)。
- 代理及合作夥伴資料:使用我們代理入口(Agent Portal)的留學代理及合作夥伴的聯絡及業務資料。
3. 未滿18歲的學生
我們的許多學生未滿18歲。對於未滿18歲的學生,我們會請家長或法定監護人代為給予同意並接收我們的通知;但如學生已足以理解給予同意的性質及後果,且法律允許學生本人給予同意,則屬例外。家長或監護人可隨時聯絡我們,查閱、更正或撤回對其子女個人資料的同意。
4. 我們使用您個人資料的目的
我們使用個人資料以:
- 回覆查詢,並舉辦線上或線下諮詢及說明會;
- 規劃升學,並準備及向學校、大學及課程機構遞交申請;
- 向新加坡移民與關卡局(ICA)及其他機關申請學生准證、長期探訪准證、簽證及相關許可;
- 提供宿舍住宿、膳食、清潔、洗衣、監護及生活關顧、接機及落地服務;
- 安排保險、醫療預約、疫苗認證及健康支援;
- 提供補習、預備課程、課外活動、研學團及競賽;
- 處理付款、開立發票及記帳;
- 營運我們的 Web App、手機應用程式及代理入口,包括您的帳戶及申請進度;
- 保障宿舍、辦公室及系統的安全,包括使用閉路電視;
- 履行我們的法律、監管及申報責任;以及
- 在取得您同意的情況下,向您發送我們服務的推廣資訊(第7條)。
我們只會為上述目的、在收集時告知您的目的,或 PDPA 另行允許的情況下,收集、使用及披露個人資料。
5. 同意
我們會在收集您的個人資料之前或收集時徵求您的同意,例如透過表格上的同意勾選框。您可隨時聯絡我們撤回同意(第12條)。我們會告訴您撤回同意對我們所提供服務的影響:例如,如缺少所需資料,我們便無法替您遞交入學或學生准證申請。
6. 集團內共用及與第三方共用
集團內共用。集團旗下各公司會互相共用個人資料,讓學生和家庭從第一次查詢到抵達及在新加坡生活,都由同一個團隊跟進。例如,您透過 dredugroup.com 查詢新加坡留學,之後需要宿舍床位時,宿舍團隊便會收到所需的資料。各公司共用同一個客戶資料庫。接收資料的公司只會為第4條所列目的使用資料,並依照本政策及集團公司之間的書面協議加以保護。
新加坡以外的集團公司及代表:*Required
與集團以外的第三方共用。我們只會在第4條所列目的需要時,向以下各方披露個人資料:
- 學校、大學、課程及考試機構;
- 政府機關,包括新加坡移民與關卡局及教育部,以及法律規定我們須向其披露資料的任何人士;
- 保險公司、診所、醫院及醫療服務提供者;
- 交通、接機及活動服務提供者;
- 轉介您或代表您的留學代理及合作夥伴;
- 我們的付款服務商,資訊科技、主機託管、軟件及應用程式開發服務商,以及即時通訊平台;以及
- 我們的專業顧問、核數師及保險公司。
代我們處理個人資料的服務商均受合約約束,須保護資料並只按我們的指示使用。我們不會出售個人資料。
7. 推廣訊息及我們使用的平台
我們大部分的家庭來自台灣和香港,因此我們會在他們常用的平台上溝通及刊登廣告。我們只會在取得您同意後才發送推廣訊息;推廣同意是表格上一個獨立、可選的勾選框,您可隨時透過訊息內的連結或聯絡我們取消訂閱。除非您已明確且毫不含糊地給予同意,否則我們不會向已登記於新加坡「謝絕來電登記處」(Do Not Call Registry)的新加坡電話號碼發送推廣訊息。
我們正在使用或可能使用的平台包括:
- 搜尋及影片:Google(搜尋、Google Ads、Google Analytics、Google Tag Manager、Google 地圖、Google 商家檔案)、YouTube、Microsoft Bing 及 Microsoft Clarity、Yahoo、百度;
- 社交媒體:Facebook、Instagram、Threads、Messenger、TikTok、抖音、小紅書、微博、嗶哩嗶哩(Bilibili)、西瓜視頻、今日頭條、Dcard、PTT、LinkedIn、X(Twitter)、Pinterest、Snapchat、Telegram;
- 即時通訊:WhatsApp、微信、LINE、KakaoTalk、Telegram、短訊及電郵;
- 應用程式商店:Google Play、Apple App Store、華為應用市場 AppGallery。
當您在這些平台上與我們互動時,平台亦會按其本身的隱私政策收集資料。我們刊登廣告時,可能會向平台提供經雜湊加密的聯絡資料,或在我們的網站使用平台的像素或標籤,讓廣告觸及合適的受眾並衡量成效。我們新增平台時會更新此清單。
8. Cookie 及類似技術
我們的網站及應用程式使用 Cookie、像素、標籤及類似技術。必要 Cookie 讓網站正常運作(例如記住您選擇的語言及保持登入狀態)。在取得您同意後,分析 Cookie 讓我們了解網站的使用情況,而第7條所列平台的廣告 Cookie 及像素則協助我們展示相關廣告並衡量成效。您可在 Cookie 橫額中接受或拒絕非必要 Cookie,並可隨時更改選擇,亦可在瀏覽器中封鎖 Cookie。
9. 將資料轉移至新加坡境外
當我們的服務需要時,我們會將個人資料轉移至新加坡境外:例如轉移給集團在台灣和香港的代表及合作夥伴、海外的學校及代理,以及第6條和第7條所列的平台及服務商,其中部分會將資料儲存在其他國家或地區(包括美國及中國內地)。在這些情況下,我們會依照 PDPA 第26條採取措施(主要透過合約),確保接收方對資料的保護標準與 PDPA 相若。如台灣、香港或中國內地的法律亦適用於我們處理您資料的方式,您亦享有該等法律所賦予的權利。
我們主要的資料儲存地點:*Required
10. 我們如何保護及保存個人資料
我們以合理的安全措施保護個人資料,包括存取控制、加密連線、限制查閱健康及身份文件,以及員工保密責任。如資料外洩可能對您造成重大損害,我們會依照 PDPA 的規定通知您及個人資料保護委員會。
我們只會在第4條所列目的需要或法律規定的期間內保存個人資料,其後會將資料刪除或匿名化。保存期限:*Required
11. 您的權利
您可要求查閱我們所持有關於您的個人資料,以及過去一年內這些資料曾如何被使用或披露;要求我們更正資料;以及撤回同意。我們會在30天內回覆查閱及更正要求,或在該期限內告知您我們將於何時回覆。我們可能就查閱要求收取合理費用,並會事先告知您費用金額。如您對我們的回覆不滿意,可聯絡新加坡個人資料保護委員會(www.pdpc.gov.sg)。
12. 聯絡我們的資料保護主任
如對您的個人資料有任何疑問、要求或投訴,請聯絡我們的資料保護主任:
- 電郵:*Required
- 電話:*Required
- 郵寄:Data Protection Officer, DR Pacific Holdings Pte Ltd, No 99 Rangoon Road, Singapore 218384
請註明您的全名、聯絡資料及要求的簡要說明。
13. 政策修訂及語言
我們可能會修訂本政策。頁首的日期顯示最新版本;如有重大修訂,我們會透過網站或應用程式通知您。本政策同時備有英文及簡體中文版本;如各版本之間有任何差異,概以英文版本為準。本政策受新加坡法律管轄。
Privacy Policy
Last updated: *Required
1. Who we are and what this policy covers
This Privacy Policy explains how the DR Pacific Holdings group ("we", "us", "our") collects, uses, discloses and protects personal data under Singapore's Personal Data Protection Act 2012 ("PDPA").
It is one policy for the whole group, because our businesses work together and share the same customer records. It applies to:
- dredugroup.com, operated by DR Pacific Holdings Pte Ltd (迪傲太平洋控股有限公司), UEN 200821037N, No 99 Rangoon Road, Singapore 218384 (study planning, school applications, student passes, courses and related services);
- vinga.com.sg, operated by *Required (legal name and UEN) (student hostels, arrival, visa, insurance, health support and student-life services);
- our Web App and the Vinga mobile app (Google Play, App Store and Huawei AppGallery); and
- our offices, hostels, events, telephone lines and messaging accounts.
Each company named above is a separate organisation under the PDPA. When you deal with one of them, that company collects your personal data, and section 6 explains how it is shared with the other companies in the group.
2. Personal data we collect
Depending on the services you use, we may collect:
- Identity: name, date of birth, gender, nationality, photograph, and passport details. We collect a passport, NRIC or FIN number only when a law requires it (for example, a student pass or long-term visit pass application) or when we must verify your identity to a high degree of fidelity, as the PDPC's Advisory Guidelines on NRIC and other national identification numbers require.
- Contact: address, email, telephone number, and messaging IDs (WhatsApp, WeChat, LINE, KakaoTalk and similar).
- Parent and guardian: the name, relationship and contact details of a student's parent or guardian.
- Education: school records, transcripts, certificates, test results (for example AEIS), course choices and applications.
- Immigration and travel: student pass, long-term visit pass and visa details, flight and arrival details.
- Health and insurance: vaccination records, medical information you give us so that we can arrange medical support, and insurance policy details. We treat this data as sensitive and limit who can see it.
- Accommodation: hostel booking, room, meals and stay records, and CCTV images in our hostels and offices.
- Payments: fees, invoices and payment records. Card payments are processed by our payment provider; we do not store full card numbers.
- Account and app: login details for the Web App and mobile app, application status and messages you send us.
- Online: IP address, device and browser information, pages viewed and how you reached our sites, collected through cookies and similar technologies (section 8).
- Agents and partners: the contact and business details of education agents and partners who use our Agent Portal.
3. Students under 18
Many of our students are under 18. For a student under 18, we ask a parent or legal guardian to give consent on the student's behalf and to receive our communications, unless the student is old enough to understand the nature and consequences of giving consent and the law allows the student to consent personally. A parent or guardian may contact us at any time to access, correct or withdraw consent for their child's personal data.
4. Why we use your personal data
We use personal data to:
- answer enquiries and hold online or in-person consultations and information sessions;
- plan studies, and prepare and submit applications to schools, universities and course providers;
- apply for student passes, long-term visit passes, visas and related permits with the Immigration and Checkpoints Authority and other authorities;
- provide hostel accommodation, meals, cleaning, laundry, guardian and pastoral care, airport pickup and arrival services;
- arrange insurance, medical appointments, vaccination certification and health support;
- provide tuition, preparatory courses, activities, study tours and competitions;
- process payments, issue invoices and keep accounts;
- run our Web App, mobile app and Agent Portal, including your account and application status;
- keep our hostels, offices and systems safe, including by CCTV;
- meet our legal, regulatory and reporting duties; and
- with your consent, send you marketing about our services (section 7).
We collect, use and disclose personal data only for these purposes, or for a purpose we tell you about when we collect it, or as the PDPA otherwise permits.
5. Consent
We ask for your consent before or when we collect your personal data, for example through the consent box on our forms. You may withdraw your consent at any time by contacting us (section 12). We will tell you what withdrawing means for the services we provide: for example, we cannot submit a school or student pass application without the data it requires.
6. Sharing within our group and with others
Within the group. The companies in our group share personal data with each other so that a student and family deal with one team from first enquiry through to arrival and life in Singapore. For example, when you ask dredugroup.com about studying in Singapore and later need a hostel place, the hostel team receives the details it needs. The companies share one customer database. Each receiving company uses the data only for the purposes in section 4 and protects it under this policy and a written agreement between the group companies.
Group companies and representatives outside Singapore: *Required
Outside the group, we disclose personal data only as needed for the purposes in section 4, to:
- schools, universities, course and examination providers;
- government authorities, including the Immigration and Checkpoints Authority and the Ministry of Education, and anyone we must disclose to by law;
- insurers, clinics, hospitals and medical providers;
- transport, airport pickup and activity providers;
- education agents and partners who referred you or who act for you;
- our payment provider, IT, hosting, software and app development providers, and messaging platforms; and
- our professional advisers, auditors and insurers.
Service providers who process personal data for us are bound by contract to protect it and to use it only on our instructions. We do not sell personal data.
7. Marketing, and the platforms we use
Most of our families are in Taiwan and Hong Kong, so we communicate and advertise on the platforms they use. We send marketing only with your consent, which is a separate, optional box on our forms, and you can opt out at any time through the link in a message or by contacting us. We do not send marketing messages to Singapore telephone numbers registered on the Do Not Call Registry unless you have given us clear and unambiguous consent.
The platforms we use, or may use, include:
- Search and video: Google (Search, Google Ads, Google Analytics, Google Tag Manager, Google Maps, Google Business Profile), YouTube, Microsoft Bing and Microsoft Clarity, Yahoo, Baidu;
- Social media: Facebook, Instagram, Threads, Messenger, TikTok, Douyin, Xiaohongshu (RED), Weibo, Bilibili, Xigua Video, Toutiao, Dcard, PTT, LinkedIn, X (Twitter), Pinterest, Snapchat, Telegram;
- Messaging: WhatsApp, WeChat, LINE, KakaoTalk, Telegram, SMS and email;
- Apps: Google Play, Apple App Store, Huawei AppGallery.
When you interact with us on these platforms, the platform also collects data under its own privacy policy. When we advertise, we may give a platform a scrambled (hashed) contact detail or use its pixel or tag on our sites, so that our adverts reach the right audience and we can measure results. We update this list when we add a platform.
8. Cookies and similar technologies
Our websites and apps use cookies, pixels, tags and similar technologies. Essential cookies make the sites work (for example, language choice and keeping you logged in). With your consent, analytics cookies tell us how the sites are used, and advertising cookies and pixels from the platforms in section 7 help us show relevant adverts and measure them. You can accept or refuse non-essential cookies in our cookie banner and change your choice at any time, and you can also block cookies in your browser.
9. Transfers outside Singapore
We transfer personal data outside Singapore when our services require it: for example, to our group's representatives and partners in Taiwan and Hong Kong, to schools and agents overseas, and to the platforms and service providers in sections 6 and 7, some of which store data in other countries (including the United States and Mainland China). When we do, we take steps under section 26 of the PDPA so that the recipient protects the data to a standard comparable to the PDPA, mainly through contracts. Where the laws of Taiwan, Hong Kong or Mainland China also apply to our handling of your data, you have the rights those laws give you as well.
Our main data storage location: *Required
10. How we protect and keep personal data
We protect personal data with reasonable security arrangements, including access controls, encrypted connections, restricted access to health and identity documents, and staff confidentiality duties. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.
We keep personal data only as long as we need it for the purposes in section 4 or as the law requires, then delete or anonymise it. Retention periods: *Required
11. Your rights
You may ask us for access to the personal data we hold about you and how it has been used or disclosed in the past year, ask us to correct it, and withdraw consent. We respond to access and correction requests within 30 days, or tell you within that time when we will respond. We may charge a reasonable fee for an access request and will tell you the fee first. If you are not satisfied with our response, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.
12. Contact our Data Protection Officer
For any question, request or complaint about your personal data, contact our Data Protection Officer:
- Email: *Required
- Telephone: *Required
- Post: Data Protection Officer, DR Pacific Holdings Pte Ltd, No 99 Rangoon Road, Singapore 218384
Please include your full name, contact details and a short description of your request.
13. Changes and language
We may update this policy. The date at the top shows the latest version, and we will tell you about significant changes through our websites or apps. This policy is also published in Traditional and Simplified Chinese; if the versions differ, the English version applies. This policy is governed by the laws of Singapore.