Skip to content

Personal Data Protection Policy

Your trust, kept with care.

How Fraternitas Singapore handles your personal data, in line with the PDPA and the Personal Data Protection Policy of the Roman Catholic Archdiocese of Singapore.

1

Introduction

Fraternitas Singapore is a ministry of the Franciscan Friars, serving young adults within the Roman Catholic Church in Singapore (the “Church”, “we”, “us”, “our”). We are committed to protecting the personal data of those who entrust it to us.

We are bound by the Singapore Personal Data Protection Act 2012 (the “PDPA”), which governs how we collect, use, and disclose personal data. This notice follows the Personal Data Protection Policy of the Roman Catholic Archdiocese of Singapore, which applies to the agencies, commissions, and groups of the Church and remains the authoritative reference. It describes how this website, in particular, handles your personal data.

2

Personal data we collect

“Personal data” means any data, whether true or not, about an individual who can be identified from that data or from data we have or are likely to have access to. Through this website and the life of the fraternity, we may collect (this list is non-exhaustive):

  • Your name and age group
  • Contact information such as email address, telephone number, and messaging handles
  • Information you give when you subscribe to our newsletter, enquire, register for an event, or ask about membership
  • Photographs and video recordings taken during gatherings, events, and services
  • Usage and technical information such as cookies and browser information when you use this site
  • Your preferences in receiving news and updates from us
3

Purposes for which we use your data

We collect, use, and disclose only the personal data reasonably necessary for purposes such as the following (this list is non-exhaustive):

  • To minister to and accompany the faithful, and to provide pastoral care
  • To register attendance and manage participation in gatherings, retreats, formation sessions, and events
  • To send newsletters, reflections, and news you have asked to receive
  • To respond to your enquiries and requests, and to maintain any account you create
  • To organise the membership and ongoing life of the fraternity
  • For statistical analysis and reporting, and to comply with our legal and regulatory obligations
4

Member accounts

If you create a member account with us, we collect a fuller set of personal data so we can manage your membership well: your full name, email address, phone number, birth year, and the group you belong to (for example, Franciscan Youth or Franciscan Young Adults). You may also choose to share your religion and parish, but these are always optional and never required to sign up or take part.

We use this data to manage your membership, register your RSVPs and attendance at gatherings, and keep you informed of news and events suited to your group. It is stored with Supabase, our database provider, hosted in Singapore.

You may request to see, correct, or delete your member account data at any time by writing to us at the email address below.

5

Use and disclosure

Your personal data is used for the purpose for which it was collected, and for purposes permitted by law. We do not sell, rent, or trade your personal data.

Where necessary to carry out the purposes above, we may disclose data to other bodies of the Church and to the service providers listed in the next section, under appropriate confidentiality arrangements. We will NOT disclose your personal data for direct marketing purposes without your prior consent.

6

Service providers we use

We rely on a small number of service providers to run this website. Each handles only the personal data it needs to do its part:

  • Supabase stores member accounts and profiles, RSVPs, and check-ins at gatherings, including guest check-ins. Our Supabase database is hosted in Singapore.
  • Vercel hosts this website. Vercel Analytics, which it also provides, counts visits to our pages in aggregate, without cookies and without identifying you.
  • Google is involved if you choose to sign in with Google. It confirms who you are and shares your name, email address, and profile picture with us. We never see your Google password.
  • YouTube (part of Google) shows the videos on some of our pages. The video preview image comes from YouTube when the page loads, and the player loads only if you press play, using YouTube's privacy-enhanced mode.
  • Resend delivers the sign-in emails you ask for, sent from auth.fraternitas.sg. It handles your email address and the email itself.
  • Mailchimp sends our newsletter, only to members who have asked to receive it and whose request an admin has approved. It holds your email address.
  • Sentry tells us when something on the live site breaks or runs slowly. It receives technical details about errors, and timing details for a small sample of page visits, such as the page and the type of browser. We do not attach your account details to these reports, and it does not record your screen.
7

Consent and withdrawal

By providing your personal data to us, you consent to our collecting, using, and disclosing it in accordance with this notice. Before collecting your data we will make the purpose known to you, and we will seek fresh consent if that purpose changes.

You may withdraw your consent at any time by emailing us, or by using the unsubscribe link in any newsletter. We will give effect to your withdrawal within one month. Please note that, depending on what you withdraw, we may then be unable to attend to your enquiries, keep you informed, or include you in the life of the fraternity.

8

Access and correction

You may request access to the personal data we hold about you, and information on how it has been used or disclosed in the past year. You may also ask us to correct any data that is inaccurate or out of date. We will respond as soon as possible, and within 30 days; if we need longer, we will let you know.

We may need to verify your identity before acting on a request. Please help us keep your data accurate by letting us know of any changes.

9

Protection, retention, and transfer

We put in place reasonable security and organisational measures to protect your personal data against loss, misuse, and unauthorised access, and we share it only with authorised persons on a need-to-know basis. No method of transmission or storage over the Internet is completely secure, but we continually review our measures.

We retain personal data only as long as needed for the purposes above or as required by law, after which it is securely disposed of.

Our member database is hosted in Singapore. Vercel, Google (including YouTube), Mailchimp, Resend, and Sentry are based in the United States, so some of the data they handle may be processed outside Singapore. Our error and performance reports go to Sentry's United States region, and our sign-in emails are sent through Resend's Tokyo region. Where we transfer data outside Singapore, we do so in compliance with the PDPA.

10

Links to other sites

This website may contain links to sites we do not operate. We are not responsible for the content or privacy practices of those sites, and we encourage you to review the privacy policy of every site you visit.

11

Changes to this notice

We may update this notice from time to time. The latest version will always be posted on this page, and changes take effect once posted. Please revisit periodically to stay informed.

Questions & Feedback

For any question, request, or concern about your personal data, please write to us, or to the Archdiocesan Data Protection Officer.

Fraternitas Singapore: admin@fraternitas.sg

Archdiocesan Data Protection Officer: dpo@catholic.org.sg

This notice follows the Personal Data Protection Policy of the Roman Catholic Archdiocese of Singapore, which remains the authoritative reference.