What happens to personal data you give Cairnhill Institute, in plain terms, under the Personal Data Protection Act 2012.
Last updated 5 August 2026
Who this covers
This policy is issued by Cairnhill Institute Pte. Ltd. (202548579K). It covers personal data collected through this website and through enquiry and admissions correspondence that starts here.
Data belonging to enrolled students is governed by the PEI-Student Contract and the institute's internal records policies, alongside this one.
What each form collects
Every form on this site shows every field it collects. Nothing is gathered beyond what you can see, and no form on this site asks for your NRIC, passport number or date of birth.
| Form | Fields |
|---|---|
| Course sheet request | Name, email, mobile number, your situation, the intake you are asking about |
| Brochure download | Name, email, mobile number |
| Application | Name, email, mobile number, the entry route you are applying under, how you meet the English requirement, the intake, anything you choose to tell us |
| Enquiry form | Topic, name, email, mobile number, your message |
Two of the forms also record where you came from, so that a scan of a printed QR code can be told apart from a click on this site. That value holds no personal data.
Each form records your consent at the point of submission, through the checkbox shown on that form.
Online requests are not connected to a processing system yet, and this site currently stores no form submissions at all. The forms say so themselves. When submissions are connected, the forms and this policy will state where the data goes.
How the data is used
Data from the forms is used for the purpose stated on each form: replying to your enquiry, sending the course sheet, sending the brochure, and carrying on the admissions conversation you started.
We do not sell personal data. We do not add you to a marketing list without asking first, and any marketing message we ever send will carry a working way to opt out.
Who it can be disclosed to
Personal data is disclosed only to service providers who process it for us (such as the companies that host this website and deliver our email), and to regulators or public agencies where the law requires it, including the Committee for Private Education under the Private Education Act.
Providers act on our instructions and are bound to protect the data they handle.
Where the data lives
Our hosting and email infrastructure may store or process data outside Singapore. Where that happens, the PDPA requires, and we ensure, that the data receives a standard of protection comparable to the PDPA's.
Cookies and website data
This site sets no cookies of its own today, and no advertising or analytics cookies run on it. Three things do happen when you browse:
Our hosting provider keeps standard server logs (IP address, browser type, pages requested) for security and operations. The site's typefaces load from Google Fonts, so your browser requests those files from Google's servers. The campus map is a Google Maps embed; content inside that embed is served by Google under Google's own privacy policy.
If analytics or a tag manager is ever connected, this section will be updated before it goes live.
Your rights
Under the PDPA you can ask what personal data of yours we hold and how it has been used or disclosed, ask us to correct it, and withdraw consent for its continued use. On withdrawal we stop using the data and delete it, unless a legal or regulatory requirement obliges us to keep it.
We respond to access and correction requests within 30 days. If a request needs longer, we tell you within those 30 days when the answer will come.
Protection and retention
We make reasonable security arrangements to protect personal data against unauthorised access, use and disclosure. Data is kept only as long as the purpose it was collected for still stands, or as long as education and other laws require, and is then deleted or anonymised.
Contact and complaints
Requests, questions and complaints about personal data go to the institute's data protection contact: admissions@cairnhill.edu.sg. Until that address is published, write to us through the support page and mark your message as a data protection matter.
If you are not satisfied with our answer, you can complain to the Personal Data Protection Commission at pdpc.gov.sg.
Updates are published on this page with a new date at the top. Where a change affects how already-collected data is used, we seek fresh consent first.