Privacy Policy

1.1 Parents, guardians and others registering a child

Your name, relationship to the child, mobile number, email address, preferred contact method and postal code. Once a place is confirmed, your home address. If you are not the child’s parent or guardian, the name and contact number of the parent or guardian.

1.2 The child

• Name, date of birth, school and languages spoken at home.
• Interests, strengths, areas where support is needed, communication style and sensory preferences.
• Diagnosis or learning profile. This is optional, and you choose whether to share it.
• Safety and health information: allergies, medical conditions, medication, dietary requirements and emergency contacts.
• Home information relevant to sessions, such as pets and a suitable space.
• During a programme: session records, progress notes, feedback, correspondence and, only with your consent, photos and videos.

1.3 Coach applicants and coaches

Name, date of birth, contact details, residential area, qualifications, certifications, work experience, availability, answers to application questions and uploaded documents. For applicants who progress: interview notes, references, background check results, signed agreements, training records and payment records.

1.4 Website visitors

We collect anonymous usage information such as pages visited, time on site, device and browser type, and approximate location. We do this in two ways: our own cookieless analytics, which records only the page visited, the referring website and the general device type, with no IP address or personal identifiers; and Google Analytics, which uses cookies provided by Google. We do not use advertising cookies, and we do not use analytics information to identify individual visitors.

1.5 Information we do not collect

We do not collect NRIC, FIN, passport or birth certificate numbers through our website.

We collect personal data when you submit our website forms, contact us by WhatsApp, email or phone, take part in a consultation, during a programme, or when you apply to work with us. We collect a child’s personal data only from the child’s parent or guardian, or from a person registering on their behalf. Where someone other than a parent or guardian registers a child, we confirm with the parent or guardian before proceeding.

We collect, use and disclose personal data for these purposes:

1. assessing whether a programme is suitable for a child, and contacting you about your registration;
2. matching a suitable coach and arranging sessions;
3. keeping a child safe during sessions, including responding to emergencies;
4. delivering sessions, recording progress and sharing updates with you;
5. processing payments and keeping financial records;
6. recruiting, screening, training, managing and paying coaches;
7. internal evaluation, including reviewing programme outcomes, improving our programmes, session guides and coach training, and quality assurance;
8. responding to enquiries, feedback and complaints;
9. meeting our legal, regulatory and safeguarding obligations.

Where practical, we use anonymised or de-identified information for internal evaluation. We will not use your personal data for any other purpose without first notifying you and obtaining your consent, unless the PDPA or another law permits or requires it. We do not sell personal data.

4.1 We collect, use and disclose your personal data with your consent, which you give when you submit our forms or provide information to us, except where the PDPA permits otherwise.

4.2 You may withdraw your consent at any time by giving reasonable notice to our Data Protection Officer. We will tell you the likely consequences, for example, we cannot deliver sessions safely without a child’s safety and health information, and will process your request within 10 working days.

4.3 Withdrawing consent does not affect our right to keep and use personal data where the law allows or requires it.

We will send you news or promotional messages only if you have agreed to receive them, and we comply with Singapore’s Do Not Call Registry rules. You can opt out of marketing messages at any time by replying to us or contacting our Data Protection Officer. Opting out does not affect messages about your child’s registration or sessions.

We disclose personal data only as necessary for the purposes in section 3, to:

1. the coach assigned to your child, who receives only the information needed to deliver sessions safely, and whose access ends when the programme ends or the coach is reassigned;
2. service providers who help us operate, such as website hosting and database, email delivery, cloud storage, analytics and payment processing, who are contractually required to protect the data and use it only for our purposes;
3. emergency services or medical personnel, if a child needs urgent help;
4. government authorities, courts or law enforcement where required or permitted by law, including where we have a genuine concern about a child’s safety under our Child Safeguarding Policy;
5. professional advisers, such as our accountants, auditors, lawyers and insurers, under duties of confidentiality.

Photos and videos are shared only according to the media consent you gave us.

Some of our service providers may store or process personal data on servers outside Singapore. Where this happens, we take appropriate steps to ensure the data receives a standard of protection comparable to that under the PDPA, for example through contractual safeguards.

We make reasonable security arrangements to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal and loss, including:

• encrypted connections (HTTPS) and secured databases that the public cannot access;
• access limited to team members who need it, with coaches seeing only the children assigned to them;
• logging access to records;
• never including a child’s name, health or personal details in emails, using reference numbers instead.

No method of transmission or storage is completely secure, but we work to protect your data and review our safeguards regularly.

We keep personal data only as long as necessary for the purposes it was collected for, or for legal or business purposes. After that, we securely delete it or anonymise it so that it no longer identifies anyone.

Form submissions are removed from our website system within 30 days of being transferred to our secure records.

We rely on you to give us accurate and complete information, and to tell us when it changes, especially a child’s health, medication or emergency contact details. Please contact us to update your details at any time.

11.1 You may ask for access to the personal data we hold about you or your child, and information about how it has been used or disclosed in the past year.

11.2 You may ask us to correct any error or omission in that data.

11.3 Send requests to our Data Protection Officer. We will respond within 30 days. If we need more time, we will tell you within 30 days when we expect to respond.

11.4 We may charge a reasonable fee for an access request. If so, we will tell you the amount before processing the request. Correction requests are free.

11.5 In some cases the PDPA permits or requires us to decline a request; if so, we will explain why.

If a data breach occurs, we will assess it promptly. Where a breach is likely to result in significant harm to you or your child, or affects 500 or more people, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of our assessment, and notify affected individuals where required.

We take or use photos and videos of a child only as chosen on the registration form: no photos; photos shared privately with the family; or photos also used by SparkleSprouts on its website or social media. We never publish a child’s name with a photo. You can change your choice at any time, and we will stop using published photos as soon as reasonably possible.

If you have questions, wish to withdraw consent, request access or correction, or make a complaint, contact:

If you are not satisfied with how we handle your concern, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.

We may update this policy from time to time. The latest version is always published on this page, with the date it was last updated. Where changes significantly affect how we use your personal data, we will notify you.