​

Waldorf Steiner Education Association Singapore (“the School”, “we”, “us”, or “our”) is committed to protecting the personal data of our students, parents, guardians, staff, and website visitors in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This Privacy Policy explains how we collect, use, disclose, and protect personal data.

​

1. Personal Data We Collect

We may collect personal data including but not limited to:

a) Students

• Name, date of birth, nationality

• Identification details (e.g. birth certificate or passport, where required)

• Educational records and assessments

• Medical or health information (for safety and care purposes)

• Photographs, videos, and audio recordings (e.g. for school activities)

b) Parents / Guardians

• Name, contact details (email, phone number, address)

• Emergency contact information

• Relationship to the child

• Payment and billing information

c) Website Visitors

• Name and email address (if you submit an enquiry form)

• Technical information such as IP address, browser type, and cookies (where applicable)​
   

2. Purpose of Collection, Use, and Disclosure

We collect and use personal data for purposes including:

• Student enrolment, education

• Communication with parents and guardians

• Safety, health, and emergency management

• Administrative, billing, and regulatory requirements

• Organising school events, camps, and programmes

• Website enquiries and communications

• Compliance with legal and regulatory obligations

Personal data will not be used for purposes beyond those stated, unless required or permitted by law or with consent.

​

3. Consent

By providing personal data to us, you consent to the collection, use, and disclosure of such data for the purposes stated in this policy.

Consent may be withdrawn at any time by contacting our Data Protection Officer. Please note that withdrawing consent may affect our ability to provide certain services.

​

4. Disclosure of Personal Data

We may disclose personal data to:

• Government authorities or regulators (e.g. ECDA, MOE, where applicable)

• Service providers (e.g. IT systems, payment processors, insurers)

• Medical professionals in case of emergency

All third parties are required to protect personal data in accordance with PDPA.

​

5. Protection of Personal Data

We take reasonable steps to safeguard personal data, including:

• Secure storage of physical and digital records

• Restricted access to authorised personnel only

• Use of password protection and secure systems
  ​

6. Accuracy of Personal Data

We make reasonable efforts to ensure that personal data is accurate and complete. Parents and guardians are encouraged to inform us of any changes.

​

7. Retention of Personal Data

Personal data will be retained only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Thereafter, it will be securely disposed of.

​

8. Access and Correction Requests

You may request access to or correction of your personal data by contacting our Data Protection Officer. Requests will be handled in accordance with PDPA requirements.

​

9. Cookies (if applicable)

Our website may use cookies to improve user experience. You may disable cookies through your browser settings.

​

10. Data Protection Officer (DPO)

If you have any questions, requests, or concerns regarding personal data, please contact our Data Protection Officer:

Name of DPO: Steven Choong

Designation: Data Protection Officer

​

Company Website: https://histellar.com
Company Mainline: +65 8914 0498

Office Number: +65 8490 8570
Business Email: steven@histellar.com
 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be published on our website.

​

Last updated: 14/12/2025