Privacy notice

About parents and guardians: your name, email address, phone number, and your portal login.

About students: name, date of birth or age, gender, school and level, and any notes you give us that help us teach them.

About your use of our services: classes a student is enrolled in, attendance, make-up lessons, packages, payments and whether they are paid, messages you send us in the portal (and any photos or files attached), and the notices we send you.

We do not store your bank or card details. Payments are handled by our payment provider (see below). The portal uses only the cookies it needs to keep you signed in. We do not use advertising or tracking cookies.

• To enrol students, run classes, mark attendance and arrange make-up lessons.
• To bill you, record payments and send receipts and payment reminders.
• To contact you about classes, schedule changes, notices and messages, by chat and email.
• To keep our records, improve our lessons and services, and meet our legal and accounting duties.

We collect, use and share this data with your consent. Because students are children, we ask their parent or guardian to give that consent on their behalf when you register and when you use the portal. You can withdraw your consent at any time by contacting us (see the end of this notice). If you withdraw consent, we may not be able to keep providing classes or portal access, and we will tell you what that means.

We do not sell your data. Our teachers and staff see the details they need to run each class. We use trusted service providers to run the portal, and they process data for us:

• Supabase, for our database, sign-in and file storage.
• Vercel, which hosts the portal website.
• HitPay, our payment provider for PayNow payments.
• Google Workspace, for the emails we send you.

We may also disclose data where the law requires it.

Some of these providers may store or process data on servers outside Singapore. When that happens, we take steps to make sure your data receives a standard of protection comparable to the PDPA.

You must sign in to see anything. Parents can only see their own family's information, and staff accounts only see what their role needs. Data is encrypted while it travels between your device and the portal. No system is completely secure, but we work to protect your data, and if a breach happens that could harm you we will notify you and the authorities as the law requires.

We keep data while a student is enrolled, and afterwards for as long as we need it for business or legal reasons (for example, financial records are commonly kept for five years). After that we delete or anonymise it.

• Ask to see the personal data we hold about you or your child.
• Ask us to correct anything that is wrong. You can also update your details in the portal.
• Withdraw your consent to how we use your data.
• Ask a question or make a complaint about how we handle data.

We aim to reply within 30 days.

For any privacy request or question, email our Data Protection Officer at hello@happyquillsenglish.com.

We may update this notice from time to time. The date at the top shows when it last changed.