Personal Data Protection Notice


Last updated August 2026

The Good Protein Network Limited (“GFI APAC”, “we”, and ”us”) respects your privacy.  We collect personal data from you to provide you assistance, update you on the impact of your contributions, and communicate about new and ongoing initiatives.  We only use your personal data for purposes that have been notified to you and for which you have given consent, or where the collection, use or disclosure is otherwise permitted under the Personal Data Protection Act 2012 of Singapore (the “PDPA”) or other applicable law. We maintain and use your personal data responsibly.

This Personal Data Protection Notice explains what information we collect, how we use it and what choices you have about our use of it. This notice is layered, so you can easily select the reason we collect, use or disclose your personal information and see what we do with it.

We recognise that information privacy is an ongoing responsibility, and we will, from time to time, update this  Personal Data Protection Notice as we undertake new personal data practices or adopt new privacy policies. If our information practices change materially, we will notify you of these changes by posting them on our website.  If we intend to collect, use or disclose your personal data for a new purpose, we will notify you of that purpose, and where required by the PDPA, obtain your consent before doing so.

By providing personal information to us, you agree to the terms and conditions of this Privacy Notice.

We welcome your questions and comments about this Personal Data Protection Notice at:

Victoria Law, Regional Compliance and Governance Lead
Data Protection Officer
The Good Protein Network Limited
36 Robinson Road, #20-01, City House, Singapore 068877
Email: victorial@gfi.org

General information

  1. Who Manages Your Data
  2. How Do We Get Your Information
  3. Your Data Protection Rights
  4. When Do We Share Your Information
  5. Transfer of Data
  6. How We Protect Your Information
  7. Links to Other Websites
  8. Information About Children
  9. How to Contact Us

How do you engage with us

  1. Sign up for a newsletter
  2. Register for an event
  3. Donors & followers
  4. Job applicants, interns, and volunteers

Who manages your data?

The Good Protein Network Limited (“GFI APAC”), a company limited by guarantee incorporated in Singapore, is the organisation responsible under the PDPA for the personal data we process, unless otherwise stated. 

This policy statement provides information on the policies of GFI APAC under the Personal Data Protection Act 2012 of Singapore, its subsidiary legislation, and other relevant rules and guidelines stipulated by the Personal Data Protection Commission of Singapore.

Our address is:

36 Robinson Road, #20-01, City House, Singapore 068877

For certain processing activities, GFI APAC and each of its affiliates below are jointly responsible for the collection, use or disclosure of your personal data:

The Good Food Institute Asia Pacific (Hong Kong) Limited
Unit A, 22/F, Wing Cheong Comm. Bldg., 23 Jervois St., Sheung Wan, Hong Kong

The Good Food Institute, Inc. 
2503 D. N Harrison St. #19
Arlington, VA 22207
United States

GFI Europe (Belgium) ASBL 
Drève du Pressoir 38, 1190, 
Forest, Belgium

Associação The Good Food Institute Do Brasil 
Rua Dom Pedro II, 471, Vila Contim, Botucatu, São Paulo, 18601-570, Brasil

Alternative Protein Solutions Private Limited (APSPL) 
d/b/a The Good Food Institute India
HD-622, WeWork Vaswani Chambers, 2nd Floor,
264-265, Dr Annie Besant Rd, Municipal Colony, Worli Shivaji Nagar,
Mumbai, Maharashtra – 400030

The Good Food Institute Israel (R.A.) 
Yahalom 7, Shoham 6080507, Israel

How do we get your information?

1. When you give it to us or give us permission to obtain it

Most of the personal information we collect, use or disclose is provided to us directly by you for one of the following reasons:


2. Our partners and service providers share information with us

We also receive personal information indirectly from other sources, including your company/ organization, professional references, publicly available sources, subscription services, and third-party service providers. Where we collect your personal data from a third party, we do so in reliance on the consent you have given to that party, an applicable PDPA exception, or the deemed consent provisions of the PDPA.

3. Data we collect automatically, using cookies or similar technologies

We, and our third-party partners, automatically collect certain types of usage information when you visit our website, read our emails, or otherwise engage with us online. We collect this information through a variety of tracking technologies, including cookies, web beacons, pixels, embedded scripts, location-identifying technologies, file information, and similar technologies.

Here are some of the types of information we collect:


Our purpose in using cookies is to (1) provide custom, personalized content and information; (2) record your consent; (3) recognize and contact you across multiple devices; (4) monitor aggregate metrics such as total number of visitors, traffic, and usage; and (5) diagnose and fix technology problems. 

We collect analytics data or use third-party analytics tools such as Google Analytics to help us identify traffic and usage trends for the website and to help us understand how our audience engages with us. We may also work with third-party partners to employ technologies that permit us to recognize and contact you across multiple devices.

Under the PDPA, we collect and use essential technical data, such as log data, in reliance on deemed consent or applicable exceptions in the First Schedule to the PDPA, including the business improvement and legitimate interests exceptions. We rely on your consent for all non-essential cookies and similar technologies, including analytics, advertising, and cross-device tracking mechanisms.

Obtaining your consent for collecting, using and disclosing your personal data

We will not collect, use or disclose personal data about you unless (a) you have given, or are deemed to have given, your consent under the Personal Data Protection Act of Singapore and any other applicable law to the collection, use or disclosure, as the case may be, or (b) the collection, use or disclosure, as the case may be, without your consent is as required or authorised under the Personal Data Protection Act of Singapore and any other applicable law.

By providing us with any information relating to a third party, you represent to us that you have validly obtained the consent of the third party to provide us with their information for the respective purposes.

Your data protection rights

We must inform you about your rights in relation to the personal data that we have about you. The rights available to you depend on our reason for collecting, using or disclosing your information.

Right to access.You have a right to access your personal data in our possession or under our control and information about the ways in which that personal data has been or may have been used or disclosed by us within a year before the date of your request.  For privacy and security, we may ask you to verify your identity. There are some exemptions, which means you may not always receive all the information we collect, use or disclose if a relevant exception in section 21 or the Fifth Schedule to the PDPA applies.

Right to correction. We do our best to keep your data accurate and up to date. If your personal data is inaccurate or incomplete, you have the right to ask that we correct an error or omission. This right always applies. If we share your personal data with others and if possible, we will inform them about the correction as well.  We shall correct your personal data as soon as practicable upon your request unless a relevant exception in section 22(6) of the PDPA applies.

Right to withdraw consent. The consent your provide for the collection, use and disclosure of your personal information will remain valid until such time it is withdrawn by you in writing. If you wish to withdraw consent at any time on a going-forward basis, you may do so by contacting apac@gfi.org. On receipt of the notice to withdraw the above-mentioned consent, we will inform you of the likely consequences of withdrawing your consent.

Right to lodge a complaint with the data protection authority. If you have a concern about our privacy practices, including the way we handle your personal data, you can report it to the data protection authority in your jurisdiction. If you are in Singapore, you can report it to the Personal Data Protection Commission of Singapore.

If you exercise any of the rights above, we will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to carry out your request, we shall generally inform you of the reason why we are unable to do so.

When do we share your information?

We may share your information with the following trusted parties:

  1. Our global affiliates, agents, and representatives in the course of our operations. Our affiliates may only collect, use or disclose your data for the purposes specified in our data sharing agreements with them, and are required to implement technical and administrative measures to appropriately safeguard your data. We share your data with affiliates for the purposes notified to you and with your consent or deemed consent, or in reliance to an applicable PDPA exception.
  2. Third-party companies, service providers, or individuals that we employ to collect, use or disclose information on our behalf based on our instructions and only for the purposes specified. These data processors are contractually bound to keep your data secure. These providers process data on our behalf as data intermediaries under the PDPA, and we remain responsible for their handling of your data as if we were processing it ourselves.
  3. Online advertisers, including social media sites. If you have consented to receiving marketing communications, we may use your contact information to match to your social media account, to show you GFI APAC content while you use social media services. We rely on your consent as the lawful basis for such collection, use or disclosure.
  4. Law enforcement and government agencies. We are legally obligated to share your information in some circumstances, such as (1) to respond to a subpoena, court order or legal process; (2) to detect, prevent, or otherwise address fraud, security or technical issues; (3) to exercise or protect our rights, property or personal safety or that of others. Such disclosures are made where required or authorised by law, in reliance on the applicable exceptions under the PDPA.


Except for the purposes outlined herein, we will not trade, share or sell your personal information to anyone else.

Transfer of data

GFI APAC is in partnership with its affiliates that operate in many countries. When we transfer your information to a country or territory outside Singapore, we do so only if we have taken appropriate steps to ascertain whether, and to ensure that, the recipient of the personal data is bound by legally enforceable obligations to provide the transferred personal data a standard of protection that is at least comparable to the protection under the Personal Data Protection Act of Singapore.

This applies to every transfer of personal data out of Singapore and is ensured by entering into an agreement with the receiving party to accord similar levels of data protection as those in Singapore. For any personal data collected or otherwise processed within the European Economic Area (EEA), we transfer your information to our affiliates outside of the European Economic Area (EEA) on the basis of Controller-to-Controller Standard Contractual Clauses, also known as Model Clauses, between GFI APAC and each of the affiliate organizations that ensure appropriate safeguards and enforceable data subject rights and effective legal remedies according to the European Commission.

When we transfer your information to a service provider that stores or otherwise collects, uses or discloses your data outside of the EEA, we require them to sign a Data Processing Agreement that allows data transfers only (a) to countries recognized by the European Commission as having an adequate level of protection or (b) pursuant to Controller to Processor Standard Contractual Clauses. Our service providers are required to promptly notify us if they are unable to comply with these requirements.

All the transfers of personal data will be carried out in compliance with the requirements of the PDPA and any other applicable law.

How do we protect your information?

We care about the security and integrity of your information. We implement and maintain industry standard physical, technical, and administrative safeguards, including performing regular self-assessments to prevent unauthorized disclosure of, or access to, personal data and adopting role-based access controls and strong authentication methods. We limit access to personal data and require that employees and agents authorized to access personal data maintain the confidentiality of that data.

We hold our service providers to at least the same data privacy and security standards to which we hold ourselves.

However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%. If, despite our efforts, we learn of a security breach involving your personal information, we will take reasonable steps to investigate the situation and notify affected individuals as soon as practicable if the breach is notifiable under Part 6A of the PDPA and if no exception applies.

Our website may contain links to and from third party websites of our business partners. If you follow a link to any of these websites, please note that these websites have their own privacy notices, statements, or policies that govern your interactions with them. We encourage you to read them. 

Information about children

We do not knowingly collect or store any personal data of persons under the age of 16 and we do not offer any of our services directly to children under the age 16.

How to contact us

The Good Protein Network Limited
Attn: Victoria Law, Regional Compliance and Governance Lead
Data Protection Officer
36 Robinson Road, #20-01, City House, Singapore 068877
Email: victorial@gfi.org

**************************************

Newsletter subscribers

Purpose and lawful basis for collection, use or disclosure

We collect your personal data to inform you about our resources, and update you about industry news, opportunities, and upcoming events. We’ll only use your personal data with your consent in order to send you marketing materials by email. Each time we send you a marketing email, we give you the option to unsubscribe.

We may send your non-marketing service and transactional emails to inform you about updates to our privacy policies or changes to your subscription preferences in reliance on either (i) deemed consent under the PDP or (ii)) an applicable statutory mandate. We may use your personal data to improve our services in reliance on the business improvement exception under the First Schedule to the PDPA.

What information do we collect

We ask for your name and email address to subscribe to the newsletter. We also collect your IP address and gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our newsletter.

Why do we need it

We need this information to be able to perform individual outreach about new resources and opportunities and to send you other communications that you have requested.

When do we share your information

We use external service providers for data processing to support us in carrying out all our marketing activities. These service providers collect, use or disclose data only per our instructions and solely for the purposes described in this notice.

How long do we keep it

We keep your details to send you marketing communications only until you choose to unsubscribe. If you unsubscribe, we will retain a minimal record of your preferences on a suppression list.

What are your rights

We rely on your consent to collect, use or disclose the personal data you provide to us to subscribe to our newsletters and other marketing communications. This means you have the right to withdraw your consent, or to object to further collection, use or disclosure of your personal data for this purpose at any time. Please use the instructions in the email to unsubscribe from further communications or email us at apac@gfi.org

Event/webinar attendees

Purpose and lawful basis for collection, use or disclosure

Our purpose for collecting this information is to facilitate the event and enable access. The lawful basis we rely on for collecting, using or disclosing your personal data is your consent.

What information do we collect

When you register to participate in one of our events, we will ask you to provide your name, email address, company/ organization, professional title, address, billing address, and payment information if payment is required. If you participate as a presenter or panelist, we may also collect your photograph and presentation materials.

For conference attendees, you may have the option to download a mobile app for participant communication and information sharing. The app may store the device identifier associated with your mobile device, but neither we nor the app provider will collect any personal data through the mobile device.

We frequently take photos and record audio and/or video of our events, and may make and store photographs containing your likeness and recordings of your voice and likeness. We may associate your image and the sound of your voice with your name if you are identified during the recording or identify yourself by name.  We will notify attendees before at the event that photography and recording will take place.

Why do we need it

We use this information to collect, use or disclose your registration and payment for the event if applicable; send event-related communications and updates regarding the event; print your badge at the event; send you event-related materials and recordings; contact you about future events; and request feedback via post-event surveys or otherwise; and improve our event administration. We will email you a reminder before the event you registered for, and email you after the event with a recording of the webinar.

We may use, edit, copy, exhibit, publish, or distribute photos and audio or video recording to document and promote our events and our charitable missions. If you do not wish your image or voice to be used in this way, please contact us and we will accommodate your request.

When do we share your information

We share your information with our service providers that collect, use or disclose your information at our direction and only for purposes specified in our contract with them. When you join one of our events via service provider(s) that provides cloud-based peer-to-peer platform for online chat, video conferencing, web conferencing and webinars (the “Online Conferencing Service Provider(s)”), The relevant Online Conferencing Service Provider(s), may have its servers located in other jurisdictions and  may store the meeting metadata, including your IP address, device info, user profile, email, photos, and recordings, none of your personal information collected by such Online Conferencing Service Provider(s) is shared with us. For more information, please refer to the privacy policy of the relevant Online Conferencing Service Provider(s) as and when appropriate.

How long do we keep it

We will retain your information as long as necessary to fulfill the purposes described in this notice or until you ask us to remove it.

What are your rights

To the extent we rely on your consent to collect, use or disclose your personal data, you have the right to object to further collection, use or disclosure, or withdraw your consent at any time.

For more information about your rights, please see Your Data Protection Rights.

Donors and followers

Purpose and lawful basis for collection, use or disclosure

We only collect personal data that is reasonable or necessary to build authentic, well rounded professional relationships with you, understand how your personal, professional, and philanthropic interests may align with giving opportunities at GFI APAC, and secure philanthropic funding. Under the PDPA, we collect, use and disclose this personal data with your consent or deemed consent for the purposes notified to you, or in reliance on applicable exceptions in the First Schedule to the PDPA.

When you make a gift to us, we use the information you provide as necessary for the performance of the contract between you and us in connection with your donation. If you do not provide the necessary data to us or our payment service provider, we will not be able to process your donation.

We also use your data to comply with our legal obligations, including tax reporting.

We will only send you our newsletter and other marketing communications by email if you opt-in to receive them and rely on your consent as the lawful basis for such communications. You may opt out of receiving marketing emails at any time by following the instructions contained in each email we send you.

What information do we collect

When you make a donation, we collect your name, email, billing address in order to process the transaction. We may also collect additional information about your donation, including the amount and purpose of your donation, dedication information, your professional affiliation if your employer participates in the company match program, and any other comments you may choose to provide.

We also collect other personal information that you may share in conversations or other interactions with us, including your address, telephone number, date of birth, marital status, family status, educational history, professional affiliation, social media account pages, and communication preferences.

We may obtain information about you from public records and from databases when conducting due diligence. Where we collect personal data from publicly available sources, we do so in reliance on the applicable PDPA exception for publicly available data.

Why do we need it

We need this information to tailor our engagement plan, process your donations, contact you regarding your donations, update you on the impact of your contributions, and provide other updates that we think will be of interest to you.

When do we share your information

We share your personal information with our employees, agents, and affiliates to support our operations, our service providers to collect, use or disclose it based on our instructions, and our affiliates to enable them to develop authentic, well-rounded, professional relationships with you and better coordinate our philanthropic campaigns. We share your personal data for the purposes notified to you, with your consent or deemed consent, or in reliance on an applicable PDPA exception. For more information on our sharing practices, please read here.

GFI APAC and each of its affiliates are considered jointly responsible for the purposes of data protection law with respect to the shared information. This is because we jointly dictate the purposes for which your personal information is used and the means by which we use your personal information. GFI APAC and its affiliates have arranged to work together to respond to your questions and your requests to exercise any of your data protection rights.

We transfer your information outside Singapore to our affiliates and service providers abroad. We make sure that such data transfers are subject to appropriate safeguards as required by section 26 of the PDPA. For more details, please see Transfer of Data.

How long do we keep it

We will retain your information as long as necessary to fulfill the purposes described in this notice and to comply with our legal obligations, including our tax reporting requirements and data breach notifications.  If you ask us to delete your data or to be removed from our marketing lists, we will keep only basic data to prevent further unwanted collection, use or disclosure.

What are your rights

You have a right to access and correct your data and to withdraw your consent at any time. For more information on your rights, please see Your Data Protection Rights.

Job applicants, interns, and volunteers

Purpose

Our purpose for collecting, using or disclosing your information is to assess your suitability for a role you have applied for and to help us develop and improve our recruitment process. Under the PDPA, we rely on your consent or deemed consent when you submit an application, and on the evaluative purposes exception where applicable. We also rely on your consent to obtain data regarding your criminal record and credit history if required for the role.

What information do we collect

We collect your contact details, information about your previous experience, education, references, and answers to questions relevant to the role that you are applying for.  We will also ask you to voluntarily provide demographic information, including information about your gender, race, ethnicity, health status, and veteran status for statistical purposes. This information will be kept separate from your application and used solely for the purpose of monitoring, informing, and reporting on our diversity efforts. This information, or your decision not to provide it, will not affect your application in any way. 

If we choose to make you an offer of employment, we may ask for your consent to obtain a background check report from an authorized third-party provider. A report may include information about your employment and education history, and where relevant to the role and permitted by Singapore law, court, administrative, and criminal records and creditworthiness to the extent permitted by law.

Why do we need it

We use all the information that you provide during the recruitment process to evaluate your application, to keep records related to our hiring practices,  match applicants to other career opportunities,  and to fulfill legal or regulatory requirements, including compliance with employment and immigration laws.   We will use your contact information, including your email address to inform you about the status of your application. 

When do we share it

We will only share your information with third party service providers as necessary to review your application, facilitate the interview process, and conduct reference,  background, and employment eligibility checks. We only share your information internally with teams directly involved in the hiring process. We will not share your information with any third parties for marketing purposes.

How long do we need it

We will only keep the information for as long as necessary to fulfil the purposes described above. Unsuccessful applicants’ data is retained only for a limited period consistent with our retention schedule, after which it is securely deleted or anonymised unless you consent to us retaining it for future role consideration.

What are your rights

To the extent that we rely on your consent to collect, use or disclose certain types of personal information that you provide voluntarily, you may withdraw your consent at any time by contacting us.

**************************************

The Good Protein Network Limited (“GFI APAC”, “”we”, “us”) uses cookies and other technologies to ensure that everyone who uses our websites has the best possible experience.

This notice provides you with information about how and when we use cookies on our websites or web applications. Cookies, and any similar technologies change over time, so please refer to this notice at regular intervals to ensure you remain aware of how we use them.

What is a Cookie?

A cookie is a small text file that a website saves on your computer or mobile device when you visit the website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie, to develop a record of the user’s online activity. First party cookies are cookies set by the website you’re visiting. Only that website can read them. In addition, a website might potentially use external services, which also set their own cookies, known as third-party cookies.

A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

Cookies help us enhance your experience when using the website and make the content more relevant to you. They also help us understand how people use our site, so that we can better serve our site visitors.

We use session cookies that last until you close your browser and persistent cookies that last until you or your browser delete them.

For more information see: http://www.allaboutcookies.org

How Do We Use Cookies?

We use two types of cookies:

Essential or Strictly Necessary cookies. These cookies are required to enable you to move around our website and use its features. These cookies do not gather information about you that could be used for marketing purposes and do not track where you have been on the internet. This category of cookies cannot be disabled.

Performance or analytics cookies. These cookies measure how often you visit our sites and how you use them. We use this information to get a better sense of how our users engage with us and to improve our sites so that users have a better experience. We collect anonymised information for our internal research purposes only.

We use Google Analytics, a web analytics service provided by Google, Inc., to help us see how our website is used. In doing so, information about your use of our website, including your IP address, may be transmitted to Google and stored on servers in the United States. The data collected by Google Analytics is used to analyse how frequently the same people revisit our website, how the website is found (from advertising or referring websites), and which pages are most frequently viewed. This information is combined with data from thousands of other users to create an overall picture of website use, and is never identified. Google will not associate your IP address with any other data held by Google.

NameSourceData storedPurposeExpiry
_gagfi-apac.orgA random unique number or string of letters to identify your browser, the times and dates that you interacted with the site and the referring pages that led you to the siteCollect aggregate information about how visitors use our website and improve your website experience400 days
_ga_YWENZW8EZ3gfi-apac.orgSession identifier, session count, and engagement timestamps for this analytics propertyMaintain analytics session state so visits are counted correctly400 days
CookieLawInfoConsent, cli_user_preference, viewed_cookie_policy, cookielawinfo-checkbox-*gfi-apac.orgWhich cookie categories you accepted or rejected, and whether you have seen the bannerRecord and honour your cookie consent choices365 days
__cf_bmCloudflareA token derived from your request, used to distinguish human visitors from botsBot detection and site security; strictly necessary and cannot be disabledAbout 30 minutes

Third Party Websites’ Cookies.

When using our website, you may encounter embedded content, such as Youtube videos, or you may be redirected to another website for activities such as surveys, to make a payment, or for job applications. These websites and embedded content may use their own cookies. We do not have control over the placement of cookies by other websites.

Your Options

There are a few ways you can choose how cookies are used on our website:

1. Consent Banner
When you first visit our website, you will encounter a consent banner that asks you to accept or reject certain cookies. Essential cookies cannot be disabled, nor can the tool be used to block cookies on third party websites linked from our website. 


2. Online Tools
There are also online tools that allow you to choose how cookies are used throughout the web based on the device and browser you are using, such as: 


3. Device Settings
Most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. These options vary from browser to browser, so check your browser settings for more information.

Please note that disabling a cookie or category of cookies does not delete previously stored cookies from your browser.

Some browsers have a privacy setting called “Do Not Track,” but there is no standard for how online service should respond to these signals. While we do our best to honor your privacy preferences, we do not currently respond to Do Not Track signals from your browser. More information about Do Not Track is available at www.allaboutdnt.org.

Your mobile device also has settings that allow you to control whether ad partners can use information about your use of mobile applications to show ads to you.  On iOS devices, this setting is called “Limit Ad Tracking” and on Android devices, this setting is called “Opt out of Ads Personalization.”


Cookies that Have Been Set in the Past

Collection of your data from our analytics cookies can be deleted. If cookies are deleted, the information collected prior to the preference change may still be used, however, we will stop using the disabled cookie to collect any further information from your user experience.


Questions

For more information, please contact us at victorial@gfi.org