Privacy policy

Last updated 15 September 2026. This policy explains how swimminglessons.com.sg, operated by the team behind Happy Fish Swim School, our sister swim school ("we", "us"), handles personal data under the Personal Data Protection Act 2012 (PDPA). It covers families who book lessons and coaches who list themselves.

What we collect from families

  • Account and booking data: your name, email address and mobile number; each learner's name, month of birth and swimming level; your postal code, building name and unit number; and any pool notes you give us.
  • Health information you choose to give: medical conditions, disabilities or needs relevant to safety in the water, so the coach can teach safely.
  • Payment data: payments are processed by Stripe. We receive a confirmation and payment references; we never receive or store full card numbers or PayNow credentials.
  • Lesson records: check-in and completion times, an optional check-in location recorded by the coach's phone, lesson notes, your confirmations, reviews and any dispute you raise.
  • Communications: emails we send and their delivery status; emails you send us.

What we collect from coaches

  • Profile: name, gender, photo, bio, years of experience, languages, whether you work with babies, prices, weekly availability and time off.
  • Location: your home postal code and travel radius. We use them to work out distance to families' pools. Your postal code is never shown; profiles show only a general area.
  • Certificates: the details you enter (type, title, issuer, number, expiry date) and the file you upload. The title, issuer and expiry month are shown on your public profile. The file and the certificate number are private: only you and our administrators can open them.
  • Telegram: your Telegram user ID, name and the messages the coach app and bot exchange with you, used to sign you in and send bookings and reminders.
  • Payouts: Stripe collects your identity and bank details directly when you set up payouts, under Stripe's own terms. We store only your Stripe account reference and whether payouts are enabled.
  • Records: lessons, earnings and transfers, declines and strikes, and reviews families leave about you.

Website analytics

If enabled, Google Analytics and the Meta pixel record page views and booking events using cookies or similar identifiers. These do not include names or contact details.

Why we use it

To show families the coaches who can reach their pool, schedule and run lessons, send confirmations and reminders, keep attendance records, take payment, pay coaches, apply the listing rules, respond to questions, handle disputes, and comply with the law. With your consent at booking, we may also send occasional emails about lessons; you can withdraw that consent at any time from the email footer or by writing to us.

Who sees it

  • The coach you book sees the learners' names, ages, levels and notes, the pool address, and the contact details needed to reach you on lesson day, for the lessons they teach and nothing more.
  • Families and the public see a coach's public profile: name, photo, bio, general area, experience, languages, prices, certificate titles and expiry months, rating and reviews. Reviews show the reviewer's first name and the month.
  • Our administrators run the site, review disputes, and can open certificate files.
  • Service providers: Stripe (payments and coach payouts), our email delivery provider, Telegram (the coach app and coach notifications), OneMap by the Singapore Land Authority (postal code lookup), and, if enabled, Google and Meta for analytics. Each uses data only to provide its service to us, under its own privacy terms.

We do not sell personal data and do not share it with other businesses for their marketing, including Happy Fish Swim School.

Where it is stored and for how long

Data is stored on servers we control. Some service providers process data outside Singapore; where they do, we rely on their contractual commitments to protect it to a standard comparable to the PDPA. We keep booking, lesson and payout records for 7 years for accounting purposes, then delete or anonymise them. Health information is deleted when the learner's last package ends unless you ask us to keep it. Certificate files are kept while a coach's account is open and deleted when the coach closes it, unless we need them for an open dispute or legal claim.

Cookies

Essential cookies keep you signed in to your account. Analytics cookies are set only if analytics are enabled on the site; you can block them in your browser without affecting booking.

Your rights

You may ask to see the personal data we hold about you, correct it, or withdraw consent for its use, subject to the PDPA. Withdrawing consent for data we need to run your lessons or your listing means we may have to stop them. Write to the contact below; we respond within 30 days.

Security

Data is transmitted over HTTPS and stored with access limited to people who need it. Families sign in with one-time email links; coaches sign in through Telegram. No system is perfectly secure; if we become aware of a breach that is likely to cause significant harm, we will notify you and the Personal Data Protection Commission as the law requires.

Contact and data protection officer

Data protection queries and requests: [email protected], marked "PDPA".