Privacy Statement

1. Information We Collect

Personal Data

Personal data refers to data about an individual who can be identified from that data, or from that data combined with other information. The following personal data is collected through our membership application form:

Other Information

The following information is also collected as part of the membership application. This information does not on its own identify an individual and does not constitute personal data under the PDPA, but is used by NPAA for the purposes described in Section 4:

2. NRIC/FIN and PSLE Certificate

Collection of Full NRIC/FIN

Your full NRIC or FIN number is required as part of the membership application process. This is necessary to:

• Verify your identity as a former student of Northland Primary School
• Ensure the integrity of the membership verification process
• Align with GovTech Myinfo's key principles

In line with the Joint Advisory issued by the Personal Data Protection Commission (PDPC) and the Cyber Security Agency of Singapore (CSA) in June 2025, NPAA does not use your NRIC/FIN number as a password, login credential, or for any form of digital authentication. The NRIC/FIN is an identifier — not an authenticator.

As noted in the PDPC's Advisory Guidelines on Key Concepts in the PDPA, the NRIC number is data assigned exclusively to a specific individual, and as such constitutes personal data. NPAA handles it accordingly with appropriate care.

PSLE Certificate

Applicants are required to upload an unedited copy of their PSLE Certificate to verify eligibility as a former Northland Primary School student. Applicants must not edit, crop, or mask any part of the certificate. The NRIC number visible in the PSLE Certificate is not extracted, stored, or used independently by NPAA.

3. Personal Data of Children and Young Persons

NPAA's membership is open to former Northland Primary School students of all ages. Youth Membership is available to applicants aged 20 and below, which means some applicants may themselves be children or young persons. Ordinary Members may also provide the personal data of their own children as part of the membership application.

NPAA handles all personal data with care and in compliance with the PDPA. In addition, the PDPC's Advisory Guidelines on the PDPA for Children's Personal Data in the Digital Environment (March 2024) and Chapter 8 of the Advisory Guidelines on the PDPA for Selected Topics set out specific considerations that apply to the personal data of children and young persons, which NPAA observes.

Youth Applicants

Where an applicant is a child or young person, NPAA ensures that the personal data collected is handled appropriately and proportionately in accordance with the PDPA and the applicable PDPC guidelines. The personal data of such applicants is used only for the purposes described in Section 4, and access is restricted to authorised committee members.

For young persons aged 14 to 16, the PDPC recognises that they may be capable of giving valid consent where they sufficiently understand the nature and consequences of doing so. With this in mind, NPAA has intentionally designed the Youth Membership application form to be a simplified version of the Ordinary Membership application form — written in plain language so that applicants can clearly understand what they are consenting to.

Children of Ordinary Applicants

By submitting your children's personal data as part of your Ordinary Membership application, you confirm that you are the parent or legal guardian of the children named, and that you consent to NPAA collecting and using this data for the purposes described in Section 4 of this Privacy Statement.

In keeping with the PDPC's data minimisation principle, we only collect children's data that is necessary for those purposes. We will not use it for any other purpose, and will not disclose it to any third party except as described in Section 5.

4. How We Collect and Use Your Data

We collect and use your personal data for the following purposes:

• Process and administer your membership application
• Verify your eligibility as a former student of Northland Primary School
• Communicate with you about your membership status, alumni events, and NPAA activities
• Facilitate your participation in school and alumni programmes
• Better understand our membership community in order to organise relevant activities and opportunities
• Maintain accurate and current membership records for the Association
• Comply with any applicable legal or regulatory obligations

In accordance with the Purpose Limitation Obligation under the PDPA, we will not use your personal data for purposes other than those stated above without your consent, unless permitted or required by law.

5. Disclosure of Your Data

We may share your personal data with the following parties, strictly for the purposes described in this Privacy Statement:

• Northland Primary School — to facilitate school-related programmes, activities, and alumni engagement coordinated with the school.
• Event vendors and service providers — where necessary to organise alumni events and activities on our behalf. These parties are contractually required to handle your data in a manner consistent with this Privacy Statement and the PDPA.
• Government agencies — where required by law or in compliance with any regulatory obligation.

We do not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

6. Protection of Your Data

NPAA takes reasonable and appropriate security measures to protect your personal data from unauthorised access, use, disclosure, modification, or destruction. These include restricting access to personal data to authorised committee members only, securing data transmissions, and applying access controls to our records systems.

In accordance with the PDPC's guidelines on children's personal data, access to the personal data of children and young persons is limited strictly to those committee members who require it for the purposes described in this Privacy Statement.

No transmission of data over the internet can be guaranteed to be completely secure. While we strive to protect your personal data, we cannot guarantee the absolute security of any information transmitted to us.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2012 (PDPA), you have the following rights:

• Access — request a copy of the personal data we hold about you, and information about how it has been used or disclosed in the past year
• Correction — request that we correct any inaccurate or incomplete personal data we hold about you
• Withdrawal of consent — withdraw your consent for us to collect, use, or disclose your personal data at any time, subject to any legal or contractual restrictions

Please note that withdrawing your consent may affect our ability to process your membership application or maintain your membership with NPAA.

8. Cookies and Analytics

This website uses Google Analytics 4 (Google LLC) to help us understand how visitors use our site. Google Analytics uses cookies to collect anonymised usage data, including IP addresses, browser type, device type, pages visited, and time spent on pages. This data is processed by Google LLC in accordance with their Privacy Policy. We do not use advertising cookies or targeted marketing cookies.

9. Regulatory References

This Privacy Statement has been prepared with reference to the following legislation, guidelines, and advisories:

• Personal Data Protection Act 2012 (PDPA)
• Advisory Guidelines on Key Concepts in the Personal Data Protection Act — PDPC (Revised April 2026)
• Joint Advisory against using NRIC Numbers for Authentication — PDPC and CSA (June 2025)
• Advisory Guidelines on the PDPA for Selected Topics — PDPC (Revised May 2024)
• Advisory Guidelines on the PDPA for Children's Personal Data in the Digital Environment — PDPC (March 2024)

10. Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or applicable law.

11. Contact Data Protection Officer

In accordance with the Personal Data Protection Act 2012, NPAA has appointed a Data Protection Officer (DPO) who is responsible for ensuring that NPAA complies with the PDPA in the collection, use, and disclosure of personal data.

To exercise your rights under the PDPA, or if you have any questions, concerns, or requests regarding this Privacy Statement or the handling of your personal data, please contact our DPO at: