General Privacy Information

Key Definitions and Practical Examples

To make this policy actionable we define terms using scenarios from our training delivery. Each definition is paired with an example to show how it works in practice, such as how a resume becomes personal data when attached to an enrollment form, or how a session recording is treated when used for internal coaching.

Personal data means any information relating to an identifiable person. Example: when you submit a CV and contact details to apply for a leadership bootcamp, those files are personal data used to evaluate eligibility and to communicate course logistics.

Processing covers any operation performed on personal data — collection, storage, analysis, transfer. Scenario: grading assignments and storing results in our learning management system is processing used to produce a final competency report for the learner.

User refers to any individual interacting with Telysor services: learners, hiring managers, trainers, and corporate admins. Example: a corporate admin uploading participant details for a company-sponsored cohort.

Service denotes the educational offerings provided by Telysor, including online modules, in-person workshops, assessment services and employer-facing reporting dashboards. Example: blended programs that combine case-study labs and employer mentoring.

Cookies are small text files stored on your device to support session continuity, preferences and analytics. Example: a cookie that remembers your chosen language and another used to maintain your logged-in session during an intensive weekend workshop.

Purposes of Processing (with Examples)

We process personal data for specific operational and compliance purposes connected to delivering professional training. For each purpose we illustrate with a scenario so you can see how data flows in practice.

• Course administration: register learners, schedule sessions and deliver materials. Example: using your contact details to send calendar invites and workshop pre-reading.
• Assessment and certification: grade assignments, produce competency reports and issue certificates. Example: compiling assessment scores into a final competency report that a participant may download.
• Billing and business administration: process payments, issue invoices and handle refunds. Example: using billing contact details and PO numbers provided by your employer.
• Support and learner services: respond to queries, provide reasonable adjustments and handle technical issues. Example: using chat logs to diagnose an access problem during a live lab.
• Quality improvement and research: analyze anonymized engagement data to refine case-based curriculum and to publish aggregate learning outcome statistics.
• Marketing and communications: with consent, we may send course updates, newsletters or event invitations. Example: opt-in emails about a new career-advancement track relevant to your role.
• Compliance and legal obligations: maintain records for auditing, tax and regulatory reporting as required under Singapore law or contractual requirements of corporate partners.
• Fraud detection and safety: detect and prevent misuse of the learning platform and protect personal data through security monitoring.

Legal Bases for Processing

We rely on appropriate legal bases depending on the processing activity. Below we pair each legal basis with real-life situations to clarify when it applies.

• Contractual necessity: processing required to perform our contract with you or your employer (e.g., delivering course materials, issuing certificates and processing payments).
• Consent: for optional processing such as marketing communications and certain integrations with third-party professional profiles. You can withdraw consent at any time without affecting core services.
• Legitimate interests: where we have a balanced interest to operate and improve our platform, such as analyzing anonymized engagement metrics to refine case-study content, provided this does not override your rights.
• Legal obligation: when we must retain or disclose personal data to comply with laws, such as accounting records for audits and tax purposes under Singapore regulations.

GDPR and Data Subject Rights (where applicable)

If GDPR applies to your circumstances, you have specific rights. We explain these rights with examples showing how to act on them in the context of our training services.

• Right of access: you may request a copy of personal data we hold about you, for example your assessment records and enrollment history, and we will provide them in a commonly used format.
• Right to rectification: correct inaccurate or incomplete personal data, such as an updated employer name or corrected certification details.
• Right to erasure: request deletion of personal data where there is no overriding legal or contractual reason to retain it; for example deleting optional marketing preferences and profile details.
• Right to restriction of processing: ask us to suspend processing in specific situations, such as while a correction is being verified for an assessment record.
• Right to object: object to processing based on legitimate interests, such as profiling for marketing; we will evaluate and explain any further processing that may continue for legal or contractual reasons.
• Right to data portability: obtain personal data provided in a structured, commonly used and machine-readable format, for example to transfer your competency report to another provider upon request.

Cookies and Similar Technologies

We use cookies to operate the site and learning platforms. Below we describe types, categories and how you can manage them, illustrated with examples from course workflows.

Types of cookies include session cookies (to keep you logged in during a workshop), persistent cookies (to remember your language choice), and third-party cookies used by analytics providers to produce anonymized engagement reports.

Categories: essential (required for platform access), preferences (language and layout), analytics (usage patterns for course improvement) and marketing (optional newsletters and event promotions).

Manage cookies via your browser settings or the cookie banner on lfysor.club. Example: disable analytics cookies if you prefer we not collect anonymized engagement metrics during a self-paced course.

View our Cookie Policy for detailed controls and third-party cookie listings.

Sharing and Disclosure of Personal Data

We share personal data only as necessary to deliver services, comply with law, or with consent. Each sharing scenario below explains who receives data and why, with practical safeguards described.

• Service providers: platform hosts, payment processors and analytics vendors who process data under contract and only as instructed for tasks like billing and learning platform hosting.
• Employer partners: with explicit consent or contractual arrangement we share participant lists and competency reports with sponsoring employers for workforce development tracking.
• Accreditation bodies and certifiers: we provide assessment records and relevant learner data when you enrol in a certified program that requires external audit.
• Legal and regulatory authorities: where required by law or valid legal process we may disclose personal data to comply with obligations in Singapore or other jurisdictions.
• Research partners: anonymized or pseudonymized datasets may be shared with academic collaborators for independent evaluation of training methods, with identifiers removed.
• Mergers and corporate transactions: if Telysor is involved in a business sale or restructuring, relevant personal data necessary for continued service delivery may be transferred under appropriate safeguards.

International Data Transfers

Personal data may be transferred to countries outside Singapore where our cloud hosts, partners or subcontractors operate. We assess each transfer and apply contractual and technical safeguards.

Safeguards include use of providers in jurisdictions with adequacy determinations, standard contractual clauses, encryption of data in transit and at rest, and careful vendor assessment to ensure contractual commitments to protect data.

Data Retention and Deletion

We retain personal data only as long as necessary for the purposes described or as required by law. Retention periods are practical and linked to scenarios such as certification validity and tax record requirements.

Account data: retained for the duration of your active account and for a limited period after account closure to allow resolution of any outstanding administrative matters; typical retention is up to 3 years post-closure unless a longer period is required by law or contract with a corporate sponsor.

Support and communications: support tickets and chat transcripts are kept for up to 2 years for quality assurance and dispute resolution unless otherwise requested.

Logs and analytics: anonymized engagement metrics retained for up to 5 years to support longitudinal research into training outcomes; raw logs with identifiers are retained only as long as operationally necessary.

Deletion requests will be evaluated and implemented where there are no overriding legal or contractual reasons to retain data (for example, required audit records). We provide a clear example workflow for an erasure request related to course completion records.

Security Measures

We apply industry-standard technical and organizational measures to protect personal data. Below are the practical controls used in typical learning and assessment scenarios, including how we protect recorded assessments and collection.

• Data encryption: TLS for data in transit and encryption at rest for learner records and assessment files stored in our cloud systems.
• Access controls and role-based permissions: only authorized staff and contracted trainers have access to personal data necessary for their role, enforced by least-privilege principles.
• Operational safeguards: regular security assessments, vendor security reviews, logging and incident response processes to address and learn from any security events.

Your Rights and How to Exercise Them

You have rights to access, correct, delete and restrict processing of your personal data. We provide step-by-step examples and the contact route to make a request, including expected timelines and practical considerations such as verifying identity.

• How to request access, correction or deletion: contact [email protected] with proof of identity and a clear description of the request. Example: request a copy of your assessment transcripts for job applications.
• How to withdraw consent or object to processing: use the options in your account settings for marketing preferences or email [email protected] to object to specific processing based on legitimate interest; we will respond with next steps and any consequences for service delivery.
• Request correction of inaccurate personal data held by Telysor and supply supporting documents or examples that clarify the change requested.
• Request deletion of personal data where retention is no longer necessary for the purposes collected, subject to legal and contractual exceptions.
• Request restriction of processing when accuracy is contested, when processing is unlawful but deletion is not desired, or when data is needed to establish, exercise or defend legal claims.
• Object to processing for direct marketing or profiling when you consider the processing incompatible with your rights or interests; Telysor will assess requests on a case-by-case basis.
• Request portability of your personal data in a structured, commonly used and machine-readable format where processing is based on consent or contract and the processing is automated.
• Withdraw consent at any time for processing activities that rely on consent, without affecting the lawfulness of processing carried out prior to withdrawal.

How to exercise your privacy rights

To exercise any of the rights above, submit a request by email or post including your name, Business ID if applicable (S2909019A), the specific right you wish to exercise and supporting details or documents. For business accounts, include a proof of authorization. We process requests in accordance with Singapore data protection principles and seek to verify identity before taking action.

[email protected]

Telysor aims to acknowledge requests within 7 business days and to provide a substantive response within 30 calendar days. Complex requests or those requiring third-party verification may take longer; you will be advised of any extension and the reason for it.