Programme terms & data responsibilities
Last updated 14 April 2026. These terms apply to live cohorts, downloads, and inquiry
forms operated by Urbadan at the Balestier studio address published in the site header.
1. Parties & contact
“Urbadan”, “we”, or “us” refers to the training desk operating urbadan.digital. The data
controller for personal data collected through this marketing site and registration flows is
Urbadan’s Singapore studio at 424 Balestier Road #02-02 Giffard Mansion, Singapore 329810.
Programme questions: [email protected]. Legal correspondence: [email protected].
2. Definitions
“Cohort” means a scheduled instructor-led programme. “Artifacts” means templates, runbooks,
rubrics, or recordings supplied during or after a cohort. “Learner” means an individual
formally enrolled after signing an order form or paying an invoice.
3. Categories of personal data
We collect identity and contact data (name, email, phone), professional data (employer,
role), billing identifiers, technical data (IP address, device type, basic cookie signals),
and learning interaction data (assignment uploads, chat transcripts where used).
4. Purposes & legal bases
We process data to perform contracts (cohort delivery, invoicing), pursue legitimate
interests (improving facilitation quality, securing sandboxes), comply with law (tax,
accounting), and—where required—obtain consent for non-essential cookies or marketing
sends you can refuse without losing core access to programme information.
5. Retention
Inquiry records are kept for twenty-four months unless a longer period is needed to resolve
disputes. Invoices and tax records follow statutory retention (typically seven years).
Learning artifacts containing personal snippets (e.g., pasted SQL with comments) are
scrubbed or returned within ninety days of cohort completion unless a learner requests an
earlier deletion that does not conflict with fraud monitoring.
6. Third-party processors
We rely on vetted processors for email delivery, video conferencing, document storage, and
payment capture. Subprocessors are bound by written terms requiring confidentiality,
security measures, and deletion on exit. A current list is available on request to enrolled
enterprise sponsors.
7. International transfers
Where data leaves Singapore, we rely on appropriate safeguards such as standard
contractual clauses or vendor certifications, documented in our vendor register. Learners may
request a summary of transfers relevant to their cohort tooling.
8. Security measures
We enforce role-based access to cohort rooms, MFA for facilitators, encrypted transport for
all hosted forms, and segregated sandboxes for exercises involving synthetic data. No
absolute security guarantee exists; we commit to prompt incident notification when legally
required.
9. Children’s privacy
Urbadan programmes target working professionals. We do not knowingly enroll children under
sixteen. If you believe a minor submitted data, contact us to delete it unless retention is
legally compelled.
10. Your rights & policy changes
Subject to Singapore law, you may request access, correction, portability (where feasible),
or deletion of personal data we control. Some requests may be limited where they impair
others’ rights or our legal obligations. We may update these terms to reflect regulatory or
product changes; material updates will be posted here with a revised “last updated” date
and, where appropriate, emailed to active learners.