Privacy policy

1. Who we are

In this policy, “RepBase”, “we”, “us”, and “our” means RepBase Pte Ltd, a Singaporean private company limited by shares. Mail correspondence may be sent to our Australian agent at:

For privacy questions, requests, or complaints, contact [email protected]. We are responsible for the personal information described in this policy, subject to the laws that apply to a particular person or activity.

2. What we collect

We collect only what is reasonably needed for the current website and waitlist experience.

Information you give us

• Contact details: email address, preferred name or full name, and, for a trainer application, an optional phone number.
• Role and fit details: whether you are joining as a customer or trainer, plus goals, preferred areas, certifications, specialties, experience, training preferences, languages, rate ranges, and optional professional links that you choose to submit.
• Correspondence: information you include when you email us or ask us to access, correct, delete, or explain information about you.

Information collected automatically

Our hosting, delivery, and security providers may receive technical information such as an IP address, browser and device details, request time, pages requested, approximate location derived from an IP address, and security or error logs. We use this information for delivery, rate limiting, fraud prevention, troubleshooting, and site security.

The website currently uses browser session storage to help complete a waitlist confirmation flow. It does not currently use non-essential analytics cookies. Necessary cookies or similar technologies may be used by hosting or security services where required for the site to function or to protect it.

Information we do not ask for on this website

Please do not submit medical records, government identifiers, payment card details, passwords, or detailed health information through a waitlist form or email. The future RepBase app may collect different information under separate notices and terms.

3. How we use personal information

We may collect, hold, use, and disclose personal information to:

• provide, maintain, and secure this website and its forms;
• record and manage customer and trainer waitlist entries;
• contact you about your submission, the availability of RepBase, or relevant next steps;
• identify duplicate submissions, prevent abuse, and enforce rate limits;
• understand broad interest in the product and improve the website and waitlist experience;
• respond to access, correction, deletion, or privacy complaints; and
• comply with legal obligations, lawful requests, and reasonable business, security, and dispute-resolution needs.

We will not use personal information for a materially different purpose without notifying you and, where required, obtaining consent. We do not currently use phone numbers for telemarketing. If that changes, we will apply the consent and opt-out requirements that apply to the relevant channel, including Singapore’s Do Not Call requirements where relevant.

4. Consent and legal framework

We aim to manage personal information in accordance with applicable obligations under the Singapore Personal Data Protection Act 2012 (PDPA) and its regulations, and the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs), where those laws apply.

When you submit a waitlist form, you provide information for the purposes explained at the point of collection and in this policy. Depending on the circumstances, our handling may also be necessary to provide a service you request, protect the website and our users, comply with law, or pursue a legitimate business purpose that is not overridden by your rights. You may withdraw consent by contacting us, although this does not affect handling already carried out and may mean we cannot keep you on a waitlist or respond to a request.

5. When we share information

We may share personal information with service providers that help us run the website, such as hosting, database, security, email, and technical support providers. These providers may process information on our instructions and are expected to protect it and use it only for the service they provide.

We may also disclose information to our professional advisers, insurers, regulators, courts, law-enforcement bodies, or a purchaser or successor of the relevant business where reasonably necessary and lawful. We do not sell or rent personal information to advertisers or data brokers.

Overseas processing

Some providers may store or process information in Singapore, Australia, the United States, or another country where they operate. Before transferring personal data from Singapore, we take steps required by the PDPA’s Transfer Limitation Obligation to provide a standard of protection comparable to the PDPA, unless an exception applies. For Australian personal information, we take reasonable steps required by APP 8 and other applicable law for overseas disclosures. Contact us if you want more detail about the categories of providers involved.

6. Security and retention

We use reasonable technical and organisational safeguards appropriate to the information and the risks, including access controls, secure transmission where supported, rate limiting, and restricted administrative access. No internet transmission or storage system is completely secure, so please take care not to send information that the website does not request.

We keep personal information only for as long as it is reasonably needed for the purpose it was collected, for a related legal or business purpose, or to resolve a dispute. When it is no longer needed, we take reasonable steps to delete it, destroy it, or remove the means by which it can be associated with you, subject to lawful retention requirements and secure backups.

7. Access, correction, deletion, and marketing choices

To request access to personal information we hold about you, ask how it has been used or disclosed, correct an error, withdraw consent, or ask us to delete information that we no longer need, email [email protected]. Please tell us what you are asking for and use the email address associated with the information where possible. We may need to verify your identity before responding.

We will respond within the period required by applicable law. As a practical target, we aim to acknowledge requests promptly and respond within 30 calendar days where reasonably possible. Some requests may be refused or limited under an exception, for example where providing access would unreasonably reveal another person’s information, prejudice an investigation, or conflict with a legal obligation. If we refuse or limit a request, we will explain the reason where permitted and tell you how to seek review or complain.

You may stop receiving optional updates by using an unsubscribe instruction we provide or by emailing us. You may still receive service messages needed to respond to a request or manage your relationship with us.

8. Complaints, regulator review, and data breaches

Contact us first

If you believe we have mishandled your personal information, please email [email protected] with what happened, when it happened, the information involved, and the outcome you want. We will acknowledge the complaint, investigate it fairly, and provide a written response within a reasonable period. If we need more time, we will explain why and provide an update.

Singapore

If you are not satisfied with our response, or we do not respond within the applicable period, you may ask the Personal Data Protection Commission (PDPC) to review or investigate the matter. The PDPC’s access and correction guidance generally asks individuals to give an organisation 30 calendar days to respond before requesting a review. The PDPA also provides for appeals to the independent Data Protection Appeal Panel in relation to certain PDPC directions or decisions.

Australia

If you are not satisfied after contacting us, you may lodge a written privacy complaint with the Office of the Australian Information Commissioner (OAIC). The OAIC generally asks you to complain to us first and wait 30 days, or receive an unsatisfactory response, before lodging a complaint. The OAIC may attempt conciliation or make a determination, and its guidance explains when a decision can be appealed or reviewed. This does not remove any right you may have to use an approved external dispute-resolution scheme, a court, or a tribunal.

Data breaches

If a data breach occurs, we will assess it and take the steps required by applicable law. This may include notifying affected individuals and the relevant regulator where the breach is notifiable, and taking steps to contain, remediate, and prevent recurrence.

9. Children and third-party links

This website is not directed to children. Do not submit information on behalf of a child unless you are authorised to do so. The website may link to third-party sites or services. Their privacy practices are governed by their own notices, not this policy.

10. Changes to this policy

We may update this policy when our website, waitlists, providers, or legal obligations change. The “Last updated” date above shows when the current version took effect. If a change is material, we will take reasonable steps to bring it to your attention.

Questions about this policy can be sent to [email protected].