Personal Data Protection Policy (PDPA)

Effective date: 20 December 2025
Last updated: 20 December 2025

EDR² (“we”, “us”, or “our”) is committed to protecting your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).

This policy explains how we collect, use, disclose, and protect your personal data when you interact with us — including visiting our workshop, registering for activities, using our website, or participating in events and programmes.


1. Personal Data We Collect

Depending on your interaction with EDR², we may collect the following personal data:

  • Full name
  • Email address
  • Contact number
  • NRIC / FIN (only where legally or operationally required, e.g. safety, insurance, or compliance)
  • Photographs, audio, or video recordings taken during workshops or events
  • Attendance records (check-in and check-out time)
  • Emergency contact details (for selected activities)
  • Any other information you voluntarily provide to us

2. How We Collect Personal Data

Personal data may be collected through:

  • Workshop or event registration forms (online or physical)
  • On-site check-in / check-out systems
  • Website forms and enquiries
  • Email, WhatsApp, or other communications
  • Photography or videography during events
  • Volunteer, vendor, or partner registration

3. Purpose of Collection, Use, and Disclosure

We may collect, use, or disclose your personal data for the following purposes:

  • Workshop and event registration, administration, and attendance tracking
  • Safety, security, and emergency management
  • Communication relating to workshops, events, or operational matters
  • Volunteer, vendor, or partner coordination
  • Issuance of certificates, attendance records, or internal reporting
  • Compliance with legal, regulatory, or funding requirements
  • Internal analysis to improve our programmes and services
  • Marketing or publicity purposes (only where consent has been given)

We will not use your personal data for purposes beyond those stated without obtaining your consent, unless permitted or required by law.


4. Photography, Audio, and Video Recording

Photographs, audio, or video recordings may be taken during workshops or events for documentation, educational, or marketing purposes.

If you do not wish to be photographed or recorded, please inform our staff before or during the session.


5. Disclosure of Personal Data

We do not sell your personal data.

Your personal data may be disclosed only where necessary to:

  • Service providers supporting our operations (e.g. registration systems, IT services)
  • Government agencies or authorities where required by law
  • Event partners or funders, where relevant and appropriate

All third parties are required to handle personal data responsibly and in accordance with applicable laws.


6. Protection and Retention of Personal Data

We take reasonable measures to protect your personal data from unauthorised access, misuse, loss, or disclosure.

Personal data is retained only for as long as necessary to fulfil the stated purposes or to comply with legal and operational requirements. When no longer required, data will be securely disposed of or anonymised.


7. Access and Correction of Personal Data

You may request to:

  • Access personal data held by us
  • Correct any inaccurate or incomplete personal data

Requests may be subject to identity verification and reasonable administrative processing time, as permitted under the PDPA.


8. Withdrawal of Consent

You may withdraw your consent for the collection, use, or disclosure of your personal data at any time by contacting us.

Please note that withdrawing consent may affect our ability to provide certain services, workshops, or access to the workshop.


9. Contact Information (PDPA)

For questions, requests, or feedback relating to personal data protection, please contact:

Data Protection Officer (DPO)
EDR² – Eat, Drink, Repair, Repeat
📧 Email: [insert email address]
📍 Community Workshop @ VidaCity, Singapore


10. Changes to This Policy

EDR² may update this Personal Data Protection Policy from time to time. Any changes will be published on this page with the updated effective date.