PDPA 2012
Privacy Policy
Last updated: 30 June 2026
AI Executive Lab Pte. Ltd. ("AI Executive Lab", "we", "us") respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"). This Privacy Policy explains what data we collect, why we collect it, how we use and disclose it, how long we retain it, and what rights you have as an individual.
1. Data controller
The data controller responsible for personal data processed through aiexecutivelab.pro and our executive training programmes is:
AI Executive Lab Pte. Ltd.
UEN 202917384P
168 Robinson Road, #33-15 Capital Tower, Singapore 068912
Email: [email protected]
Telephone: +65 6938 4172
2. Scope
This policy applies to personal data collected when you visit our website, submit enquiry or enrolment forms, attend our lab programmes, communicate with us by email or telephone, subscribe to updates, or interact with our alumni forum. It does not apply to third-party websites linked from our pages; those sites maintain their own privacy practices.
3. Categories of personal data
Depending on your interaction with us, we may collect:
- Identity and contact data: name, job title, employer, work email, work telephone, billing address, and emergency contact where required for in-person programmes.
- Enquiry and correspondence data: messages submitted through contact forms, email threads, and notes from briefing calls.
- Programme administration data: enrolment records, attendance, dietary or accessibility requirements you voluntarily provide, completion status, and certificate issuance records.
- Technical data: IP address, browser type, device identifiers, pages viewed, referral URLs, and cookie identifiers as described in our Cookie Policy.
- Payment-related data: invoicing details and transaction references. We do not store full payment card numbers on our servers; card processing is handled by payment service providers.
We do not intentionally collect sensitive personal data such as health records beyond accessibility needs you disclose for programme logistics, nor national identification numbers unless required by law or corporate billing procedures you initiate.
4. Purposes of collection and use
We collect and use personal data for legitimate business purposes connected to executive AI education, including:
- Responding to programme enquiries and scheduling executive briefings;
- Processing enrolments, issuing invoices, and administering cohort participation;
- Delivering training, facilitating discussions, and issuing completion certificates;
- Improving our website, programmes, and facilitator materials;
- Sending service-related notices (schedule changes, venue instructions, policy updates);
- Complying with legal, regulatory, and accounting obligations in Singapore;
- Protecting our rights, preventing fraud, and maintaining site security.
Where we rely on consent under the PDPA — for example, marketing emails or non-essential analytics cookies — we obtain it separately and you may withdraw it without affecting lawful processing for programme administration already completed.
5. Legal bases under the PDPA
Our primary bases for processing are:
- Consent: contact form submissions where you tick the PDPA consent checkbox; optional marketing subscriptions; optional analytics cookies after banner acceptance.
- Contractual necessity: processing required to perform enrolment agreements and deliver purchased programmes.
- Legitimate interests: improving our services, securing our systems, and maintaining business records, balanced against your privacy rights.
- Legal obligation: tax, accounting, and regulatory retention requirements applicable in Singapore.
6. Disclosure to third parties
We do not sell personal data. We may disclose data to:
- Hosting and email infrastructure providers operating under confidentiality obligations;
- Payment processors for invoicing and card transactions;
- Professional advisers (lawyers, accountants) when necessary;
- Government authorities when required by law or valid legal process.
Where data is transferred outside Singapore, we take reasonable steps to ensure recipients provide a standard of protection comparable to the PDPA, including contractual safeguards where appropriate.
7. Retention
We retain personal data only as long as necessary for the purposes described:
- Enquiry records: up to twenty-four months after last meaningful contact unless an enrolment follows;
- Enrolment and certificate records: up to seven years for legal and audit purposes;
- Marketing consent records: until withdrawal plus a short suppression period;
- Server logs: typically ninety days unless needed for security investigations;
- Cookie consent choices: six months as stated in our cookie banner.
When retention periods expire, we delete or anonymise data where feasible.
8. Security measures
We implement administrative, technical, and physical safeguards appropriate to the nature of the data we hold — access controls for staff, encrypted transport (HTTPS) for website traffic, and secure handling of enrolment records. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security but we review practices periodically.
9. Your rights under the PDPA
Subject to exceptions in the PDPA, you may:
- Request access to personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Withdraw consent for processing that relies on consent;
- Request information about how we have used or disclosed your data over the past year.
Submit requests to [email protected]. We respond within thirty days where practicable. We may charge a reasonable fee for manifestly unfounded or excessive requests as permitted by law.
10. Personal Data Protection Commission
If you believe we have not handled your personal data in accordance with the PDPA, you may contact the Personal Data Protection Commission (PDPC) in Singapore after attempting to resolve the matter with us. Visit pdpc.gov.sg for guidance.
11. Cookies and similar technologies
Our website uses cookies as described in the Cookie Policy. Essential cookies support basic functionality; analytics cookies run only after you accept them via the cookie banner. You may change preferences at any time by clearing site data or revisiting the banner after clearing stored consent.
12. Children
Our programmes target senior executives and are not directed at individuals under eighteen. We do not knowingly collect personal data from children. Contact us if you believe we have inadvertently received such data.
13. Contact form and honeypot
Our contact form includes a hidden honeypot field to reduce automated spam. Submissions that populate this field are silently discarded. Legitimate submissions require explicit PDPA consent via an unchecked-by-default checkbox.
14. Marketing communications
We send programme updates and executive education newsletters only where you have opted in or where permitted under the PDPA for existing customers with a clear opt-out. Every marketing email includes an unsubscribe mechanism. Withdrawing marketing consent does not affect lawful processing for programme administration or legal compliance.
15. Automated decision-making
We do not use solely automated decision-making that produces legal or similarly significant effects on individuals. Contact-form spam filtering uses simple honeypot rules, not profiling of individuals.
16. Changes to this policy
We may update this Privacy Policy to reflect legal, technical, or business changes. The "Last updated" date at the top will change when we publish revisions. Material changes affecting how we use personal data already collected will be communicated where required by law.
17. Contact
For privacy questions or to exercise your rights:
AI Executive Lab Pte. Ltd.
[email protected]
+65 6938 4172
168 Robinson Road, #33-15 Capital Tower, Singapore 068912
15. Marketing communications
Where you opt in, we may send programme updates, cohort announcements, and executive AI insights relevant to senior leaders. You may withdraw consent at any time via unsubscribe links or by emailing privacyaiexecutivelab.pro. Withdrawal does not affect lawfulness of prior processing.
16. Programme attendance records
We maintain attendance logs, assessment notes, and completion records for quality assurance and certificate issuance. These records may include your organisation, job title, and participation in AI governance practicum exercises.
17. Payment data
Card payments are processed by PCI-compliant providers. We do not store full card numbers on our servers. Billing addresses are retained for invoice and tax compliance under Singapore regulations.
18. Data breach notification
In the event of a notifiable breach under PDPA, we will assess impact, contain the incident, notify affected individuals and the PDPC where required, and document remedial actions.
19. Third-party links
Our site may link to PDPC, ACRA, or tool vendor documentation. We are not responsible for third-party privacy practices. Review their policies before submitting data.
20. Employee and facilitator data
Staff and contractor personal data is processed under separate employment or services agreements with equivalent security standards.
21. Anonymised analytics
Aggregated, non-identifying statistics may be used to report cohort demographics to corporate sponsors with contractual authorisation. No individual executive is identified without consent.
22. Complaints process
Submit complaints to privacyaiexecutivelab.pro with subject line "Privacy complaint". We acknowledge within 5 business days and aim to resolve within 30 days.
23. Record of processing
We maintain an internal record of processing activities covering enquiry handling, registration, delivery, billing, and alumni communications as required by accountability principles under PDPA.
24. International participants
Regional executives attending Singapore sessions may have data transferred to Singapore as the primary processing location. Corporate contracts may specify additional transfer mechanisms.