LittleWaves

Back to lessons for parents

Privacy notice

Effective date: 12 October 2026

This notice explains how LittleWaves collects, uses and looks after your personal data, and your child's. We follow Singapore's Personal Data Protection Act 2012 (PDPA). We have kept it short and in plain English. If anything is unclear, just ask us.

Who we are

LittleWaves is a swim school in Singapore. We teach toddlers, children and adults at families' own condo and landed-home pools. LittleWaves is a partnership registered with ACRA (UEN 53510917B). In this notice, "we" and "us" mean LittleWaves.

What we collect

We only ask for what we need to run your lessons.

  • When you contact us through the form on our website: your name, email, WhatsApp number and your message.
  • When you sign up for lessons: the parent or guardian's name and contact details, and each swimmer's name and age. We also ask for the pool location, the class format, how many lessons you want and when you'd like to start, plus anything you think we should know.
  • For safety: an emergency contact, and any health information you choose to tell us so your coach can teach safely.
  • When we chat on WhatsApp or email: the messages you send us.
  • When you pay: the payer's name and the reference that comes with a bank transfer or PayNow payment. We never see or keep your card or bank login details.
  • Photos and videos: only with a parent's written consent. Our client agreement has an optional photo and video permission. You can say no, and it does not affect your child's lessons.
  • Coaches who apply to work with us: your name, age, contact details, the regions you can coach in, your certificates and any notes you add. If you join us, we also collect your bank or PayNow details to pay you, and what we need for a background check.

Why we use it

  • To reply to your questions and arrange a trial or lessons.
  • To keep a record of past enquiries and lessons, so we recognise you if you get in touch again.
  • To schedule lessons, match you with a coach and keep you updated.
  • To keep swimmers safe, and to reach the right person in an emergency.
  • To send invoices and keep track of payments.
  • To hire, train, schedule and pay our coaches.
  • To keep the records the law asks us to keep.
  • With your separate consent, to share your review on our website and social media.
  • If you give the optional photo and video permission in our client agreement, to use photos or videos of lessons in our marketing, such as our website, social media and printed flyers. This permission is optional.

We do not sell your personal data. We do not send marketing emails. If we ever want to send you offers, we will ask first. You can say no to reviews, photos and videos, or withdraw consent later, and it does not affect your child's lessons. Once you withdraw, we stop using them in anything new and take down what we reasonably can.

By giving us your details, you agree to us using them as this notice describes. You can withdraw your consent at any time by emailing us. We will confirm and act on it within a reasonable time. If withdrawing means we can no longer run your lessons (for example, without a contact number we cannot reach you about a cancelled class), we will tell you before we act on it.

Children's personal data

Most of our swimmers are children, so we collect their details from a parent or guardian, not from the child. If your child is under 18, please make sure the details come from you. A parent or guardian can ask to see, correct or withdraw consent for their child's data at any time.

Who we share it with

We share only what each person needs to do their part:

  • Your coach, who gets the swimmer's name, age, the pool location, lesson times and any safety notes.
  • The tools we use to run LittleWaves, such as WhatsApp, Gmail, Notion (our records), n8n (our forms), Telegram (alerts to our team), Connecteam (coach scheduling) and Vercel (our website host). They hold data on our behalf, and we choose services with sound security.
  • Our bank, to receive payments and pay coaches.
  • Professional advisers or authorities, when the law requires it or to deal with an emergency.

Sending data outside Singapore

Several of the tools above store data on servers outside Singapore, mainly in the United States and Europe. When we use them, we take reasonable steps to make sure your data is protected to a standard comparable to the PDPA, for example by choosing providers bound by contracts and security commitments that require this.

How we keep it safe

Only the people who need your data can see it. Our accounts are password protected, and we limit access when someone leaves the team. No system is perfectly secure. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission (PDPC) as the PDPA requires.

How long we keep it

We keep personal data only as long as we need it for the reasons above, or as long as the law requires. As a guide:

  • Enquiries that do not lead to lessons: up to 2 years, so we recognise you if you ask again.
  • Swimmer and parent records: while lessons continue, and up to 5 years after the last lesson, in case you come back or there is a question about past lessons.
  • Invoices and payment records: 5 years, as Singapore tax rules require.
  • Coach applications that do not go ahead: up to 12 months.

After that we delete it or remove anything that identifies you. We may keep anonymous totals (for example, how many enquiries came in each month) to plan our classes. These cannot be traced back to you.

Seeing or correcting your data

You can ask us for a copy of the personal data we hold about you or your child, and how we have used or shared it in the past year. You can also ask us to correct anything that is wrong. Email us with your request. We will reply within 30 days. If we need longer, we will tell you within those 30 days when you can expect our answer. We may charge a small fee for a copy of your data, and we will tell you the fee before we start.

Our website

Our website is hosted by Vercel, which keeps basic technical logs (such as IP address and browser type) to run the site and keep it secure. The contact form sends what you type to our team, and nothing else.

We count visits to our website with a simple, privacy-friendly tool. It does not use cookies and does not store anything that identifies you. It only tells us totals, such as how many people visited a page.

Contact us, and our Data Protection Officer

Our Data Protection Officer handles questions, requests and complaints about personal data. You can reach them at:

If you are not happy with our answer, you can contact the PDPC at www.pdpc.gov.sg.

Changes to this notice

We may update this notice from time to time. The latest version is always on this page, with the date it took effect at the top.