Last updated: 22^nd June 2026

This Privacy Policy explains how Mutiny Consulting Pte. Ltd. (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit cjp.institute or learn.cjp.institute (the “Sites”), or enrol in a CJP course.

1. What Personal Data We Collect

We collect personal data in the following ways:

• Information you provide directly: name, email address, and any other details you submit through enrolment forms, contact forms, or account registration on Thinkific.
• Course activity data: progress through courses, quiz results, and certificate completion status, held within Thinkific.
• Email engagement data: open rates, click activity, and subscription preferences, via our email marketing provider.
• Website usage data: pages visited, time on site, device and browser type, and approximate location, collected via website analytics tools.
• Payment information: processed directly by Thinkific and its payment processors. We do not directly receive or store your full card or bank details.

2. How We Use Your Data

We use personal data to:

• Provide access to purchased courses and track your progress.
• Issue certificates of completion.
• Respond to enquiries and provide customer support.
• Send course-related communications and, where you have opted in, marketing communications about new courses, offers, or content.
• Understand how the Sites are used, in order to improve content and user experience.
• Meet legal and accounting obligations.

3. Legal Basis for Processing

Where Singapore’s Personal Data Protection Act (PDPA) applies, we collect, use, and disclose personal data only with consent or as otherwise permitted or required by law, and we limit our use to the purposes notified to you at or before the point of collection.

Where the GDPR applies, we rely on the following legal bases:

• Contract: processing necessary to deliver a course you have purchased.
• Consent: for marketing emails and non-essential analytics or tracking, which you may withdraw at any time.
• Legitimate interests: for basic website analytics and security, balanced against your rights.
• Legal obligation: for financial record-keeping.

4. Third Parties Who Process Your Data

We share personal data with the following categories of third-party service providers, solely to deliver the services described in this policy:

• Thinkific (course hosting, delivery, and payment processing), a Canada-based platform; see Thinkific’s own privacy policy for details of its processing.
• Hostinger (website usage analytics) ; see Hostinger’s own privacy policy for details of its processing.
• Mailchimp (email communications and marketing automation); see Mailchimp’s own privacy policy for details of its processing.
• Google Analytics (website usage analytics) ; see Google’s own privacy policy for details of its processing.

We do not sell personal data to third parties.

5. International Data Transfers

Because our service providers operate internationally, your personal data may be processed in countries outside Singapore or your country of residence, including the United States and Canada. Where required, we rely on appropriate safeguards offered by these providers (such as standard contractual clauses) to protect data transferred internationally.

6. Data Retention

We retain personal data for as long as necessary to provide the services described in this policy, maintain accurate business and accounting records, and comply with legal obligations. Course completion records may be retained indefinitely to allow certificate verification.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data, subject to legal and contractual retention requirements.
• Withdraw consent to marketing communications at any time, including via the unsubscribe link in any email.
• Object to or restrict certain processing, where applicable under GDPR.
• Request a copy of your data in a portable format, where applicable under GDPR.

To exercise any of these rights, contact us at support@mutiny.asia. California residents have equivalent rights under the CCPA and may contact us using the same details.

8. Cookies and Tracking

The Sites use cookies and similar technologies to operate correctly, remember preferences, and gather anonymous usage statistics. You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

9. Children’s Privacy

The Sites and courses are intended for working professionals and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

10. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “last updated” date, and where required by law, we will notify you directly.

12. Contact Us

Questions about this Privacy Policy, or requests relating to your personal data, can be sent to support@mutiny.asia