Privacy Notice

Effective date: 4 October 2026 Last updated: 4 October 2026

This Privacy Notice explains how CNAV Business Value Private Limited collects, uses, discloses, protects and retains personal data when you visit or interact with this website, enquire about our services, register for training or otherwise deal with us through DRI Singapore.

1 Who we are

CNAV Business Value Private Limited (UEN 200801431K) operates DRI Singapore pursuant to an agency agreement with DRI Hong Kong & GCC Limited. In this Notice, “CNAV”, “we”, “us” and “our” refer to CNAV Business Value Private Limited.

CNAV is responsible for personal data that it collects or controls through this website and its Singapore training and related activities. Where another organisation collects or controls your personal data for its own purposes, its own privacy notice may also apply.

2 Scope of this Notice

This Notice applies when you:

browse this website or use its functions;
submit an enquiry, request information or contact us;
register or express interest in a course, examination, event or certification-related service;
make or arrange a payment;
subscribe to updates or marketing communications; or
otherwise provide personal data to us through this website.

Separate notices or contractual terms may apply to employees, job applicants, corporate customers and particular programmes. If another notice is provided at the point of collection, you should read it together with this Notice.

3 Personal data we may collect

Identity and contact details: Example are Name, organisation, job title, business or personal email address, telephone number, postal address, country of residence and, where applicable, a DRI account or identification number.
Enquiry and correspondence data: Information in messages, enquiries, feedback, requests, attachments and our correspondence with you.
Training and registration data: Course or event selection, attendance, employer or sponsor, professional details, dietary or accessibility requirements, DRI account or identification number, courses completed, certification applications and status, examination scores, continuing education credits and related activity records, where applicable.
Transaction data: Invoice details, billing address, payment status and transaction references. Payment card details may be processed directly by a payment service provider and may not be retained by CNAV.
Marketing preferences: Your subscription status, communication preferences and records of consent or withdrawal.
Website and device data: IP address, device and browser type, browser version, operating system, referring page, pages viewed, date and time of access, time spent on pages, approximate location, cookie identifiers and other website interaction or log data.
Other information: Any other personal data you voluntarily provide, or that we are permitted or required to collect by law.

Please do not provide NRIC, FIN, passport, health, financial-account or other sensitive information through a general website form unless we specifically request it and explain why it is needed.

4 How we collect personal data

We may collect personal data:

directly from you when you submit a form, register, correspond with us or give us information;
from your employer, sponsor, training coordinator or another person authorised to register you;
automatically through essential website technology, server logs, cookies and similar technologies;
from DRI Hong Kong & GCC Limited, DRI International or other DRI-related entities where necessary to administer an authorised programme, course, examination or certification process; and
from service providers and public or business sources where permitted by law.

If you provide personal data relating to another individual, you should ensure that you are authorised to do so and that the individual has been informed of the relevant purposes.

5 Purposes for collecting using and disclosing data

We may collect, use or disclose personal data for purposes including:

responding to enquiries and communicating with you;
processing registrations and administering courses, examinations, events and related services;
confirming identity, eligibility, attendance, completion or certification where applicable;
managing customer accounts, contracts, payments, refunds, invoices and records;
coordinating with employers, sponsors, instructors, venues and DRI-related organisations;
delivering course materials, notices, results, certificates or other requested services;
operating, securing, troubleshooting and improving the website and our services;
understanding website usage and service demand through analytics, where enabled;
sending newsletters, course announcements or promotional communications where you have consented or where otherwise permitted by law;
preventing fraud, misuse, security incidents and unlawful activity;
meeting legal, regulatory, accounting, audit, insurance and dispute-resolution requirements; and
any other purpose notified to you at or before collection, or permitted or required by law.

We will seek consent before collecting additional personal data or using personal data for a new purpose that has not been notified to you, unless an exception under applicable law applies.

6 Consent and withdrawal

By voluntarily submitting personal data after being informed of the relevant purposes, you consent to its collection, use and disclosure for those purposes, unless another legal basis or exception applies. You may withdraw consent by contacting our Data Protection Officer. Withdrawal will not affect processing already carried out with valid consent or processing permitted or required by law.

Depending on what consent is withdrawn, we may be unable to continue providing a requested service. We will explain the likely consequences before completing the withdrawal request.

7 Cookies and similar technologies

This website may use session and persistent cookies and similar technologies. Essential cookies support security, page navigation, sign-in, restricted or personalised areas, form submission and session management. If configured, preference cookies remember selected settings; analytics cookies help us understand page visits, navigation patterns and service demand; and marketing technologies support relevant communications.

Where required, non-essential cookies will be used only after you make a choice through the cookie banner or settings tool. You may change your choices at any time using the Cookie Settings link available on this website. You may also adjust your browser settings. Refusing or deleting cookies may require you to sign in again and may prevent some restricted, personalised or convenience features from working correctly.

8 Disclosure of personal data

We may disclose personal data, where reasonably necessary, to:

DRI Hong Kong & GCC Limited, DRI International and relevant DRI-related organisations for programme, examination, certification or quality-assurance administration;
your employer, sponsor or training coordinator where it arranged or paid for your participation, subject to the applicable arrangement and notice;
instructors, venues, examination administrators and event service providers;
website hosting, cloud, communications, customer-management, analytics, payment and IT security service providers;
professional advisers, auditors, insurers and prospective transaction counterparties subject to appropriate safeguards; and
government authorities, regulators, law-enforcement bodies, courts or other parties where permitted or required by law.

We require service providers handling personal data on our behalf to protect it and use it only for the agreed purposes, subject to applicable legal requirements.

9 Overseas transfers

Some recipients or service providers may be located outside Singapore, including in Hong Kong or other locations used by DRI-related organisations or technology providers. Where the Singapore PDPA applies, CNAV will take appropriate steps to ensure that transferred personal data receives a standard of protection comparable to that under the PDPA.

10 Protection of personal data

We use reasonable administrative, physical and technical safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss, disposal or similar risks. No internet transmission or storage system is completely secure, and you should use appropriate care when transmitting information online.

11 Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet operational needs, resolve disputes and comply with legal, accounting, audit or regulatory requirements. When personal data is no longer required, we will delete, anonymise or otherwise dispose of it securely, subject to lawful retention requirements.

12 Your requests and choices

Subject to the PDPA and applicable exceptions, you may contact us to:

request access to personal data that we hold about you and information about how it has been used or disclosed;
request correction of inaccurate or incomplete personal data;
withdraw consent to particular uses or disclosures;
unsubscribe from marketing communications; or
raise a question or complaint about our handling of personal data.

We may need to verify your identity and may request information reasonably necessary to process the request. Any fee permitted by law will be notified before it is incurred.

13 DRI accounts activity records and restricted areas

Access to certain DRI resources or personalised features may require registration and additional information. Where applicable, an educational or certification activity record may include courses taken, certification applications and status, examination scores, continuing education credits and payment-related amounts. Some elements of an official DRI activity record may be changed only through the relevant DRI administrator so that the integrity of certification records is preserved.

If you use a DRI International account, directory, examination, certification or payment service, DRI International or another relevant DRI organisation may process your personal data under its own privacy notice. CNAV will disclose data to such organisations only where reasonably necessary for the service, where you have been notified, or where otherwise permitted or required by law.

14 Third party websites

This website may link to websites or services operated by other organisations. Their privacy practices are governed by their own notices, and CNAV is not responsible for their content or privacy practices merely because a link is provided.

15 Children

Our website and professional training services are not directed primarily at children. If a programme is offered to a minor, we may require consent or authorisation from a parent, guardian, school or other responsible organisation, as appropriate.

16 Changes to this Notice

We may update this Notice to reflect changes in law, technology or our operations. The current version will be posted on this website with its effective or last-updated date. Where appropriate, we may provide additional notice of material changes.

17 Contact our Data Protection Officer

For privacy questions, requests or complaints, contact:

Organization: CNAV Business Value Private Limited

Attention: Data Protection Officer

Email: dpo@cnavbv.com

Postal address: 1 One-North Crescent, #07-02, Singapore 138538

We will review and respond to requests and complaints in accordance with applicable legal requirements.