Privacy Policy

This Privacy Policy explains how Xinran Overseas Pte. Ltd. (UEN 201916046H), trading as Xinran International (“Xinran”, “we”, “us” or “our”), collects, uses, discloses, protects and retains personal data. It applies to xinran-international.com, our online forms and communications, and enquiries about our education, business, relocation and related services.

1. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact details: name, salutation, email address, telephone or messaging number, and preferred contact method.
• Enquiry and profile information: current location, nationality, service interests, plans, timing, education or business needs, and the information you choose to provide.
• Communications: messages, call notes, correspondence, feedback and records of requests.
• Technical and usage data: IP address, browser and device information, approximate location, referring pages, pages viewed, form events and cookie or similar identifier data.
• Third-party information: information received from a person authorised by you, a referral source, or a service partner involved in your request.

Please do not send passport, financial, health or other sensitive information through a general website form unless we specifically request it through an appropriate channel.

2. How we collect personal data

We collect personal data directly from you when you complete a form, contact us, subscribe, speak with our team or engage our services. We may also collect technical data automatically and receive information from authorised representatives, referral sources and service partners.

3. Why we use personal data

We may use personal data to:

• respond to enquiries and arrange consultations;
• assess needs and provide requested information, proposals or services;
• coordinate education, company, relocation or other service matters;
• communicate service updates and maintain client relationships;
• send relevant content or marketing where you have consented or where otherwise permitted by law;
• operate, secure, troubleshoot and improve our website and services;
• prevent fraud, abuse and security incidents;
• meet legal, regulatory, accounting, audit and dispute-resolution requirements; and
• carry out other purposes notified to you at or before collection.

4. Consent and marketing choices

Where consent is required, it remains valid until withdrawn. You may withdraw consent with reasonable notice by writing to privacy@xinran-international.com. We will explain the likely consequences and generally aim to give effect to the withdrawal within 10 business days; if more time is needed, we will tell you. Withdrawal does not affect processing already carried out lawfully and may limit our ability to provide a requested service. You may opt out of non-transactional marketing at any time using an unsubscribe option or by contacting us. We will handle telephone marketing in accordance with applicable Singapore requirements, including the Do Not Call provisions where relevant.

5. When we disclose personal data

Website enquiry data is used internally by Xinran. We do not sell personal data or share website enquiries with competitors. Access is limited to Xinran personnel who need the information for their work.

Where reasonably necessary, personal data may also be processed or disclosed to:

• hosting, form, email, communications, analytics, security and other technology providers acting on our behalf and restricted from using the data for their own purposes;
• professional advisers who owe duties of confidentiality;
• a third party only where you specifically instruct or consent to the disclosure for a service you request;
• regulators, public authorities, courts or law-enforcement bodies where required or permitted; and
• a buyer, investor or successor in connection with a proposed or completed business transaction, subject to appropriate safeguards.

6. Overseas transfers

Some service providers or partners may process personal data outside Singapore. Where the Singapore Personal Data Protection Act 2012 (“PDPA”) applies, we will take reasonable steps to ensure transferred personal data receives a standard of protection comparable to that required under the PDPA, unless an exception applies.

7. Retention

We retain personal data only for as long as reasonably needed for the purposes described above, to maintain necessary business records, or to meet legal and regulatory requirements. We securely delete, anonymise or cease retaining data when it is no longer required.

8. Security and accuracy

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information. No system is completely secure, so please use care when sending information online. Please tell us if your personal data changes so that we can keep it accurate and complete.

9. Your requests and complaints

Subject to the PDPA and applicable exceptions, you may request access to personal data under our control and information about how it was used or disclosed during the preceding 12 months; ask us to correct an error or omission; withdraw consent; update communication preferences; or raise a complaint. We will respond as soon as reasonably possible or practicable. If we cannot respond to an access or correction request within 30 calendar days, we will notify you in writing of when we expect to respond. We may need to verify your identity and may charge a reasonable fee where permitted for an access request, in which case we will provide an estimate before proceeding.

10. Children and young people

Our general website forms are intended for adults. A parent or lawful guardian should contact us when an enquiry concerns a child and should provide only information necessary for the enquiry. We may request additional consent or verification where appropriate.

11. External websites

Our website may link to third-party websites. Their privacy practices are separate from ours. Please review the privacy policy of the relevant third party before providing data to it.

12. Changes to this policy

We may update this Policy to reflect changes in our services, technology or legal requirements. The current version and effective date will be posted on this page. Material changes may also be notified through an appropriate channel.

13. Data Protection Contact

Attention: Data Protection Officer
Company: Xinran Overseas Pte. Ltd.
Address: 60 Paya Lebar Road, Paya Lebar Square, Lobby 2, #13-38, Singapore 409051
Email: privacy@xinran-international.com