Privacy Policy
The Creative Land, Singapore
Last updated: 1 October 2026
In short
- We collect only what we need to register lessons, take payment and reply to you. We never ask for NRIC numbers or bank details, and we never sell your information.
- Photos and video of a student, and marketing email, are separate choices. Saying no to either changes nothing about your sign-up.
- Your information is stored in Singapore. The one exception is our email provider, Resend, in the United States.
- We keep a family's records for 2 years after their last activity with us, then delete them within the following 6 months. Payment records are kept for 5 years, as Singapore tax law requires.
- You can ask to see or correct your information, or withdraw any consent, at any time by emailing dpo@thecreativeland.com.
1. Who we are
The Creative Land, Singapore ("we", "us") runs creative programmes for children and adults, starting with music lessons at The Musical Land. We are responsible for the personal information described on this page, under Singapore's Personal Data Protection Act 2012 (PDPA).
This policy covers our website, sign-ups at our booth, our Contact Us form and our parent portal.
We have appointed a Data Protection Officer (DPO). You can reach them at dpo@thecreativeland.com.
2. What we collect
When you sign up for a trial lesson
On this page, the account holder is the parent or guardian who signs a child up, or an adult signing up for themselves. The student is the person taking lessons.
- About the account holder: name, email address and mobile number.
- About each student: name and date of birth, and whether the student is the account holder.
- About the lesson: the instrument chosen, and a record of payment (amount, method, date and order number). We do not receive or keep your bank or card details.
- Your consent answers: what you agreed or declined, the exact wording shown, and when.
- How you heard about us, if you tell us. If a family already with us introduced you, we link your account to theirs using the mobile number they gave us. If the person who introduced you is not a family with us, we record only their name, and delete it within 90 days.
We do not ask for medical or special-needs information, NRIC numbers or home addresses at sign-up. If we ever need medical or special-needs information, we will ask for it separately, with its own consent.
When you sign in to our parent portal
See section 5.
When you use our Contact Us form
- Your name, email address, phone number, the topic you choose and your message.
- A scrambled, one-way version of your internet (IP) address. We use it only to stop the form being flooded with spam; it cannot be turned back into your address.
When you browse our website
We count page visits using Vercel Web Analytics: which page was viewed, the site that linked to it, your approximate location, and your browser, operating system and type of device. It uses no cookies and does not identify you. Each visit is counted using a code that is discarded after 24 hours.
We use cookies only to keep you signed in to the parent portal. We do not use advertising or tracking cookies.
3. Why we collect it
- To register a student for a trial lesson and contact you about it, with your consent (see section 4).
- To take payment and keep accounting records. Paying for a lesson is part of our agreement with you, and Singapore tax law requires us to keep payment records.
- To let you access your account. Signing up creates an account under the account holder's email address. We may email that address a link to set up access to the parent portal.
- To reply to messages you send through the Contact Us form.
- To record who introduced you to us.
- To take and use photos and video of a student, only with your separate consent.
- To send you marketing email, only with your separate consent.
- To keep our website working and protect it from spam, and to understand which pages are used.
We use your information only for these purposes. If we want to use it for something new, we will ask you first unless the law allows otherwise.
4. The consents we ask for
We ask for each consent separately. At our booth, a member of our staff reads each one to you and records your answer. We keep the exact wording you were shown, so we always know what you agreed to.
Lesson registration: needed to sign up.
For a parent or guardian:
“As parent or guardian, I agree to The Creative Land collecting my child's name and date of birth to register this trial lesson, and to being emailed about it.”
For an adult signing up for themselves:
“I agree to The Creative Land collecting my name and date of birth to register this trial lesson, and to being emailed about it.”
Photos and video: optional, asked for each student.
For a parent or guardian:
“I agree to The Creative Land taking photos and video of my child at lessons and events, and using them on The Creative Land's website and social media. Optional. Declining changes nothing about this signup.”
For an adult signing up for themselves:
“I agree to The Creative Land taking photos and video of me at lessons and events, and using them on The Creative Land's website and social media. Optional. Declining changes nothing about this signup.”
We use photos and video only where the wording above says: our website and social media.
Marketing email: optional, asked of the account holder.
“Send me updates about The Creative Land's progress before opening, and information about class offers and events afterward. Optional. Declining changes nothing about this signup.”
Account notice: shown next to the email field. This is information for you, not a consent.
“This signup creates an account under this email address. We may use it to send a link that lets the account holder access this signup later, in addition to service email about this trial lesson.”
If we change the wording of a consent, the new wording gets a new version. Answers already given stay recorded against the version that was shown at the time.
5. The parent portal
If you sign in to our parent portal, we also hold:
- your login email address, which is the account holder's email address; and
- your passphrase, stored in a scrambled form that cannot be turned back into your passphrase. No one at The Creative Land can see it.
We use these only to let you sign in and see your own account, students and purchases. To set up or reset your passphrase, we email a single-use link to your account's email address.
6. Companies we use
We use a small number of companies to run our service. Each receives only what it needs for the job below.
- Supabase stores our records (database). Your information is stored in Singapore.
- Vercel runs our website, booth sign-up and parent portal, and counts page visits. It runs in Singapore.
- HitPay processes PayNow payments for trial lessons. We send it only the amount and an order reference. It is based in Singapore.
- Resend sends our emails, such as booking confirmations, parent-portal sign-in emails and replies to Contact Us messages. It stores email addresses and email content in the United States.
- Cloudflare manages our website address and runs the anti-spam check on our Contact Us form. The check looks at your browser and connection, not at the message you type.
7. Information sent outside Singapore
Resend, our email provider, is in the United States. When we email you, Resend receives your email address and the content of that email. When you use the Contact Us form, your message and contact details pass through Resend to reach our team.
We keep what we send to Resend to what is needed to deliver each email. Our booking confirmation, for example, names no one: it contains the instrument and order number, not the student's name or date of birth.
Cloudflare's anti-spam check on our Contact Us form may be processed outside Singapore. It looks at technical details of your browser and connection, not at the message you type, and keeps nothing that identifies you.
Supabase and Vercel are companies based outside Singapore, but they store and process your information in Singapore.
8. How long we keep your information
We keep a family's records for 2 years after their last activity with us. Your last activity is the latest of:
- buying a lesson;
- signing in to the parent portal; or
- contacting us about your account.
After that, we delete your records or anonymise them, so that they no longer identify you.
We delete records in a review carried out every 6 months, so records are deleted within 6 months after the 2-year mark. That is at most about 2½ years after your last activity.
Some records follow different rules:
- Unused trial lessons. We never delete records while a paid trial lesson is still unused.
- Payment records are kept for 5 years, as required by the Inland Revenue Authority of Singapore (IRAS).
- If The Creative Land does not open, we will delete all records within 6 months of that decision, except payment records, which we keep for 5 years as above.
- Contact Us messages are deleted 180 days after we receive them.
- The name of a person who introduced you, if they are not a family with us, is deleted 90 days after we record it.
- Website visit counts use a code that is discarded after 24 hours.
9. How we protect your information
- Information is encrypted when it travels between your device and our website, and when it is stored.
- Only our staff can see family records, and each staff member sees only what their role needs. Staff accounts are created by invitation only.
- We keep a record of changes our staff make to family records.
- Your parent-portal passphrase is never visible to anyone at The Creative Land.
If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission (PDPC), as the law requires.
10. Children's information
Many of our students are children. When the student is a child, a parent or guardian signs them up and gives every consent on their behalf. We collect only the child's name and date of birth, and, if you agree, photos and video of them. We never ask a child for their own contact details.
11. Withdrawing your consent
You can withdraw any consent at any time by emailing dpo@thecreativeland.com. We will tell you what withdrawing means for you before we act on it.
- Lesson registration. Without this consent we cannot keep the student registered. We will stop using the student's details for lessons, and explain what this means for any lesson you have paid for.
- Photos and video. We will stop taking photos and video of the student, and remove those we have posted from our website and social media within 14 days. We cannot remove copies that other people have already saved or shared.
- Marketing email. We will stop sending you marketing email. Every marketing email we send will also include a link to unsubscribe.
Withdrawing an optional consent does not affect the student's lessons.
12. Seeing or correcting your information
You can ask us:
- for a copy of the personal information we hold about you or your child, and how we have used it in the past year; or
- to correct information that is wrong or incomplete.
Email dpo@thecreativeland.com. There is no charge. We may ask you to confirm your identity first. We will reply within 30 days. If we need longer, we will tell you when to expect our reply.
13. Making a complaint
If you are unhappy with how we have handled your information, please contact our DPO first, so we can put it right. You can also complain to the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg at any time.
14. Changes to this policy
When we change this policy, we will update this page and the date at the top. If a change affects something you have agreed to, we will ask for your consent again before relying on it.
15. Contacting our Data Protection Officer
Email: dpo@thecreativeland.com
