1. Who We Are

wonder: education reimagined (“wonder”, “we”, “us”, “our”) is a not-for-profit social enterprise registered in Singapore (UEN T2LP0110J). We work at the intersection of critical economic literacy and global citizenship education, delivering programs for schools, professional development for educators, and learning experiences for students across Asia and globally.

This Privacy Policy applies to all personal data collected through:

• Our website: www.wonder-educationreimagined.org
• Our course platform: courses.wonder-educationreimagined.org (hosted on Podia)
• Our email communications and newsletter
• Our contact forms and enquiry processes
• The Sammi Project page and any associated photo submission forms

2. What Personal Data We Collect

2.1 Data you give us directly

When you interact with wonder, you may provide us with:

• Name and email address (newsletter sign-up, contact form, course enrolment)
• Professional details (school name, job title, country) — provided when booking a consultation or enrolling in DISRUPT
• Payment information — processed securely through our website with SSL certificate and Woo-Commerce verified payment system.
• Messages and enquiries submitted through our contact form
• Photos submitted to the Sammi Project gallery (see Section 2.3 below)

2.2 Data collected automatically

When you visit our website, we may automatically collect:

• Technical data: IP address, browser type and version, device type, operating system
• Usage data: pages visited, time spent on pages, links clicked, referring URLs
• Cookie data: see Section 5 (Cookies) for full details

This data is collected through Google Analytics 4 and standard server logs. It is used in aggregate to understand how visitors use our site — not to identify individuals.

2.3 Special note: The Sammi Project photo submissions

If you submit a photo to The Sammi Project gallery, we collect the photo and any accompanying message or name you provide. Photos that include children require explicit parental/guardian consent. By submitting a photo, you confirm that:

• You are the parent or legal guardian of any child depicted, or you have obtained their consent if they are 18 or older
• You consent to the photo being displayed on our website
• You understand that you may request removal at any time by contacting hello@wonder-educationreimagined.org

3. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We share data only with trusted third-party service providers who help us operate wonder, and only to the extent necessary:

• manages our mailing list and sends newsletters. You can unsubscribe from any email. — Mailchimp or ConvertKit (email newsletter)
• processes your name, email, and booking details to schedule consultations. — In our website (consultation booking)
• receives anonymised usage data. We use IP anonymisation. Google’s privacy policy applies. — Google Analytics (website analytics)
• hosts our website. Your data may be processed on servers in accordance with Hostinger’s data processing agreement. — Hostinger (web hosting)

All third-party providers are contractually required to handle your data in compliance with applicable privacy laws. We do not transfer your personal data outside of Singapore or the jurisdictions of these providers without appropriate safeguards.

4. Cookies

Our website uses cookies — small text files stored on your device. Here is what we use and why:

• necessary for the website to function (e.g. remembering your preferences during a session). These cannot be disabled without affecting site functionality. — Essential cookies
• Google Analytics 4 cookies help us understand how visitors use the site — which pages are popular, how long people stay, where they come from. These are used in aggregate only. IP addresses are anonymised. — Analytics cookies.

On your first visit to our site, you will be asked to consent to non-essential cookies via a cookie banner. You can withdraw consent at any time by adjusting your browser settings or clearing your cookies.

5. How Long We Keep Your Data

• until you unsubscribe. We will delete your data within 30 days of unsubscription. — Newsletter subscribers
• up to 2 years from the date of enquiry, in case of follow-up. — Consultation enquiries
• up to 7 years from enrolment, for financial and programme records. — Course enrolment records
• up to 2 years from the date of submission. — Contact form messages
• up to 26 months (Google Analytics default). — Website analytics data
• until you request removal, or until the gallery is closed. — Sammi Project photos

We periodically review data we hold and delete anything no longer needed for its original purpose.

6. Your Rights Under the PDPA

Under Singapore’s Personal Data Protection Act, you have the right to:

1. Access the personal data we hold about you
2. Correct any inaccurate or incomplete personal data
3. Withdraw consent for the collection, use, or disclosure of your personal data — with reasonable notice. Note that withdrawing consent may affect our ability to provide certain services (e.g. if you withdraw consent for course enrolment data, we cannot deliver the course)
4. Request that we stop using your data for marketing purposes at any time
5. Request deletion of your data (subject to any legal retention obligations)

To exercise any of these rights, contact us at hello@wonder-educationreimagined.org. We will respond within 10 business days.

If you are based in the European Union or European Economic Area, you may also have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority.

7. How We Protect Your Data

We take data security seriously. Our protective measures include:

• All data is transmitted via HTTPS (SSL encryption)
• Access to personal data is limited to Wonder and, where strictly necessary, our web developer
• Payment data is handled exclusively by Stripe (PCI-DSS compliant) — we never see or store your card details
• Our email and course platforms are password-protected with two-factor authentication
• We conduct periodic reviews of data we hold and delete what is no longer needed

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of determining the breach, and notify affected individuals as required by law.

8. Children’s Data

wonder programs serve students of all ages, including children under 18. We are committed to the protection of children’s personal data.

• We do not knowingly collect personal data from children under 13 directly through our website without verified parental consent.
• For school programs (The Rich Feast, M:iiM, Learning With Wonder), any student data is handled by the school institution and is subject to their own data protection policies. wonder does not collect or retain individual student data from school programs.
• For the Sammi Project photo gallery, parental or guardian consent is required for photos of children under 18. See Section 2.3.

9. Changes to This Policy

We may update this Privacy Policy from time to time — for example, if we introduce new services, change our data practices, or if the law changes. When we do:

• The effective date at the top of this document will be updated
• If the changes are significant, we will notify newsletter subscribers by email
• The current version will always be available at wonder-educationreimagined.org/privacy-policy

10. Contact Us

For any questions, concerns, or requests relating to your personal data:

If you are not satisfied with our response, you may contact Singapore’s Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.