Legal
Privacy Policy
Last updated: 24 August 2026
This policy explains what personal data the Tampines East Zone 4 community platform collects, why, who can see it, and the choices you have. It covers the public event site (www), the volunteer Hub (sign-in, profiles), the Events tools, and the Outreach engagement tools - the same committee-run platform end to end.
1. Who this applies to
This policy covers everyone who uses any part of the platform: browsing the public events site at tampineseast.com, holding a volunteer account on the Hub, taking part in events, or volunteering for door-to-door outreach. "We", "us" and "the committee" mean the Tampines East Zone 4 Residents' Network committee, who run this platform for the community.
2. The public event site collects nothing
Browsing tampineseast.com - viewing upcoming events, highlights, or the archive - doesn't require an account, doesn't set any tracking or analytics cookies, and doesn't ask you for any personal information. It only reads public event details (title, date, venue, poster) from our systems.
3. What we collect when you have a volunteer Hub account
- Account details: your display name, email address, phone number, and RN committee position (if any).
- Profile photo: if you choose to add one, both your original upload and a cropped version.
- Access requests: if you apply for an account, we collect the name, email, phone number, and position you provide at that time.
- Sign-in sessions: a secure login cookie that keeps you signed in for up to 8 hours, and a second cookie that only holds the time your session expires - neither is used for tracking.
4. What we collect when you use Events
- RSVPs: which events you register for. This is visible to the organizers running that specific event, not to the wider membership.
- Volunteering/team roles: if you take on a role for an event (e.g. as a committee lead or helper), your name and photo are shown to organizers and fellow volunteers on that event - never on the public site, which deliberately excludes who's running an event.
- Permit documents: where an event needs a permit, organizers may upload supporting documents, which are stored against that event.
5. What we collect for Outreach (door-to-door engagement)
Outreach visits are recorded against a unit/household, not against any identified individual - we don't hold a database of names by address. The volunteer who made the visit, the outcome, and any organisation the household expressed interest in are recorded. If a volunteer chooses to type a free-text note about a visit, that note could occasionally include a name or personal remark they've written themselves - volunteers are asked to keep these notes factual and respectful.
6. Who can see your data
By default, your email and phone number are masked (partially hidden) everywhere except your own profile - other members and even most admin screens only see a partial value (e.g. j***@example.com). Full, unmasked details are visible only to you, and to an administrator specifically editing your profile (e.g. to fix a typo or help you recover access). Every change to your name, email, phone, or photo is logged with who made the change and when.
7. How your data is stored and protected
Passwords are never stored in readable form - only a one-way cryptographic hash. Uploaded photos and documents are stored on our server, not with a third party. Write access to the platform is rate-limited to reduce the impact of a compromised account or automated abuse.
8. How long we keep it, and deleting your account
We keep your account data for as long as you're an active volunteer. If you ask us to delete your account, we permanently remove your login, profile, and photos. Some historical records - like a checklist entry from a past event you once helped with - may keep a reference to the fact "someone" filled that role without your name attached, since we don't rewrite completed event history. If you'd like your account removed, contact the committee using the details below.
9. Your rights
Under Singapore's Personal Data Protection Act (PDPA), you can ask us to: tell you what personal data we hold about you; correct inaccurate data; withdraw your consent to any particular use; or delete your account entirely. To exercise any of these, contact the committee using the details in section 11.
10. Third parties
We don't sell, rent, or share your personal data with advertisers or other third parties. The platform runs on our own infrastructure; no external analytics or advertising services are embedded in any part of it.
11. Changes to this policy
If this policy changes in a meaningful way, we'll update the "last updated" date above. Continued use of the platform after a change means you accept the updated policy.
12. Contact us
Questions about this policy, or requests relating to your personal data, can be directed to the Tampines East Zone 4 committee at [insert committee/Data Protection Officer contact email].