Privacy Policy

Applicability:

This Privacy Policy applies to the provision of all Services run by ICR Pte Ltd and its related companies, including onSponge Pte. Ltd. and its franchises under the “I Can Read”, “Oodles Math”, “onSponge” and “Yue Xue Le” brand names.

1. Introduction

At ICR Pte Ltd and our related companies (“Group”, “we”, “us”, or “our”), including onSponge Pte. Ltd., we recognise the importance of the personal data you have entrusted to us. We are committed to managing, protecting, and processing your personal data in strict compliance with the Singapore Personal Data Protection Act 2012 (“PDPA”) and its subsequent amendments.

This Privacy Policy outlines how we collect, use, disclose, and manage the personal data of our students, parents, guardians, customers, employees, and users of our physical centres, e-commerce stores, and digital portals.

2. Personal Data We Collect

“Personal Data” refers to any data, whether true or not, about an individual who can be identified from that data or from that data together with other information to which we have or are likely to have access.

Depending on your interactions with us, we may collect:

• Parent/Guardian & Customer Information: Name, email address, mobile number, residential and shipping addresses, payment/billing information, and signature.
• Student Information: Name, age, date of birth, gender, school level, literacy and mathematics diagnostic results, academic progress reports, medical information relevant to classroom safety, and attendance records.
• Digital & Forum Data: IP addresses, login credentials, browser type, forum interactions, and usage data relating to our online portals, learning platforms, e-commerce stores, and community platforms.
• Media: Photographs, video recordings, and CCTV footage captured within our learning centres or during events. 

Note on NRIC/FIN: We do not collect full NRIC, FIN, or passport numbers unless required by law or necessary to establish identity to a high degree of fidelity.

3. Purposes for Collection, Use, and Disclosure

A. Educational and Centre Operations

• Conduct literacy and academic diagnostic assessments.
• Enrol students into suitable programmes.
• Track and report academic progress.
• Manage billing, fee collection, and attendance.
• Communicate with parents or guardians regarding student matters and emergencies.

B. E-Commerce, Publications, and Retail

• Process orders and payments.
• Fulfil deliveries of physical publications and digital goods.
• Manage online customer accounts.
• Handle customer service enquiries, exchanges, and refunds.

C. Business, Franchise, and Intra-Group Operations

• Facilitate operations across our Group companies.
• Support authorised franchise operations.
• Conduct audits, financial reporting, market research, and curriculum improvements.

D. Marketing and Promotional Activities

• Send updates about programmes, workshops, camps, publications, and events with your consent.
• Feature student achievements and activities in marketing materials where appropriate.
• Comply with Singapore’s Do Not Call (DNC) Registry requirements.

4. Consent and Withdrawal

By providing your personal data, registering for assessments, purchasing products, or enrolling in programmes, you consent to our collection, use, and disclosure of your personal data in accordance with this policy.

Parents or legal guardians must provide consent on behalf of minors under 18 years old.

You may withdraw consent by giving reasonable notice.

• Marketing communications can be stopped using the unsubscribe link or by contacting us.
• Withdrawal of consent for core operational purposes may prevent us from providing services or fulfilling orders.

5. Access and Correction

• You may request access to your personal data or your child’s personal data.
• You may request corrections to ensure information remains accurate and up to date.
• A reasonable administrative fee may apply for complex access requests.

6. Protection of Personal Data

• Access is restricted to authorised personnel on a need-to-know basis.
• Digital records are protected using encryption, firewalls, and password security.
• Third-party service providers are contractually required to safeguard personal data.
• Reportable data breaches will be handled in accordance with PDPA requirements.

7. Retention of Personal Data

Personal data is retained only as long as necessary for legal and business purposes and will thereafter be securely destroyed, anonymised, or deleted.

8. Transfer of Personal Data Outside Singapore

Where personal data is transferred overseas, we ensure an appropriate standard of protection comparable to the PDPA through suitable legal safeguards.

9. Photography, Filming, and CCTV

• CCTV operates in common areas for safety and security purposes.
• Explicit consent will be obtained before using identifiable images of children for public marketing.

10. Cookies and Digital Portals

Our websites and portals use cookies to improve user experience, maintain login sessions, and analyse website traffic. Disabling cookies may limit certain functionality.

We may also use third-party analytics services, including Google Analytics, to improve our online services.

11. Changes to this Policy

We may amend this Privacy Policy from time to time. Updated versions will be published on our websites and made available at our centres.

12. Contacting the Data Protection Officer

Email: dpo@icanread.asia
Phone: +65 3158 5888

13. Governing Law

This Privacy Policy and your use of our services shall be governed by and construed in accordance with the laws of the Republic of Singapore.

Effective date: 4 June 2026
Last updated: 19 June 2026