Privacy Policy

Olive Tree Development Center

Effective Date: 27 November 2025
 

1. Introduction and Compliance

Olive Tree Development Center ("OTDC," "we," "us," or "our") is committed to protecting the privacy and confidentiality of all personal data we collect, use, and disclose. We conduct our business in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore and other relevant legislation, including those governing health and child-related services.

Our Address: 179A and 181A Thomson Road, 2nd Floor Goldhill Shopping Center, Singapore
 

This policy outlines how we manage the personal data of our clients (children/students), parents, guardians, and personnel.
 

2. The Data Protection Officer (DPO)

We have designated a Data Protection Officer (DPO) who is responsible for ensuring OTDC's compliance with the PDPA.

• Data Protection Officer: 

• Contact Email: info@olivetree.sg]

• Contact Number: +65 6252 5200

All requests related to personal data, including access, correction, or withdrawal of consent, should be directed to the DPO.
 

3. Collection of Personal Data

We collect Personal Data primarily to facilitate the developmental and therapeutic services requested by you. We only collect data that is relevant and reasonably required for these purposes.
 

A. Types of Data Collected

Category

Examples of Data Collected

Personal Identifiers

Name, NRIC/FIN/Passport number, date of birth, gender, nationality, residential address.

Contact Information

Parent/Guardian phone numbers, email addresses, emergency contact details.

Sensitive Health Data

Medical/Developmental history, assessment reports, diagnosis, therapy notes, Individualized Education Plan (IEP) details, progress reports.

Financial Data

Payment details, bank account information for billing, funding/subsidy application details.

Visual Data

Photographs and video recordings taken during therapy sessions, events, or via CCTV footage on our premises.

Website Data (Usage Data)

IP addresses, browser type, pages viewed, time spent on site (collected via cookies and analytics).

B. Method of Collection

We generally collect Personal Data directly from you or your authorised representative through:

• Registration and enrolment forms.

• Therapy/assessment consultations and interviews.

• Email, phone, and in-person communications.

• CCTV systems within our premises for security purposes.

• Voluntary submission via our website contact forms.

4. Purposes for Collection, Use, and Disclosure

We will notify you of the purpose(s) for which your Personal Data is being collected, used, and disclosed, and we will only collect, use, and disclose data for the purposes for which consent has been obtained, or as otherwise permitted or required by law.

Purpose Category

Specific Examples of Use

Service Provision

Administering assessments, designing and conducting intervention/therapy, managing appointments, case management, and monitoring progress.

Administration & Finance

Processing payment and billing transactions, processing applications for government funding (e.g., MSF, ECDA subsidies), maintaining client records.

Safety & Compliance

Ensuring the safety of staff and clients on our premises (CCTV), complying with legal or regulatory requirements (e.g., PDPA, HCSA), and internal audits.

Communication

Responding to enquiries, sending appointment reminders, providing updates on your child’s progress, and sharing relevant programme information.

Improvement

Internal research, service evaluation, and staff training (always using anonymised data where possible, or with explicit consent).

5. Disclosure and Transfer to Third Parties

We will not sell or rent your Personal Data to third parties. We will only disclose your data to third parties in the following limited circumstances:

1. With Your Express Consent: To other relevant professionals or entities (e.g., your child's school, a paediatrician, or other external therapists) where you have provided written consent for the purpose of continuous care.

2. Service Providers: To third-party service providers (e.g., IT vendors, secure cloud storage providers, payment processors) who perform functions on our behalf. These parties are contractually bound to protect the data to a standard comparable to the PDPA.

3. Legal and Regulatory Requirements: To government agencies (e.g., ECDA, MSF, MOH) and law enforcement, only when legally required or authorised to do so.

If we need to transfer Personal Data out of Singapore, we will take steps to ensure that the recipient organisation is legally obliged to protect the transferred data to a standard that is at least comparable to the protection under the PDPA.

6. Protection and Security of Personal Data

We implement reasonable administrative, physical, and technical security measures to protect Personal Data in our possession from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.

• Administrative: Access controls limiting data to only authorised therapists and staff involved in your child's care.

• Physical: Secure storage of hardcopy records and restricted access to data storage facilities.

• Technical: Use of secure, encrypted systems for storing electronic records and secure network practices.

While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure.

7. Retention of Personal Data

We will retain Personal Data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws and regulations specific to child and health records in Singapore. When data is no longer needed, we will securely delete or anonymise it.

8. Your Rights: Access, Correction, and Withdrawal of Consent

You have the following rights regarding the Personal Data we hold about you or your child:

A. Access and Correction

You may request to:

• Access a copy of your or your child's Personal Data we hold.

• Correct or update any of your Personal Data that is inaccurate or incomplete.

We may charge a reasonable fee for an access request. We will strive to respond to all such requests as soon as reasonably possible.

B. Withdrawal of Consent

You may, at any time, withdraw your consent for the collection, use, and disclosure of your Personal Data for any purpose by submitting a written request to the DPO.

• Consequence of Withdrawal: We will inform you of the likely consequences of withdrawing consent (e.g., we may no longer be able to provide certain services). We will process your request within a reasonable time, and the withdrawal will not affect any legal consequences arising from such withdrawal.

9. Updates to This Policy

We may update this Privacy Policy from time to time to ensure it remains consistent with our business needs and any changes in legal or regulatory requirements. We will post the revised policy on this webpage, and the Effective Date at the top of the policy will be updated.