Flex International Hub - Privacy Policy for CFtP Users

This Privacy Policy explains how we collect, use, and share your personal data in compliance with Singapore's Personal Data Protection Act (PDPA) and other applicable global regulations.

1. Data We Collect

• Data You Provide: Full Name, Email, Password, GFI Member ID, Professional Title, Work Experience, Bio, Skills, Seeking Tags, and your uploaded CV.
• Technical Data: IP address, browser type, device information, cookies, and usage logs (collected via our backend, e.g., Supabase).

2. How We Use Your Data (Purpose)

We use your data for the following purposes, for which we seek your consent:

• To create and secure your account.
• To verify your CFtP status against GFI records.
• To display your Public Profile Data and CV to all other Users to facilitate connections.
• To recommend relevant opportunities and Users to you.
• To analyze platform usage and create anonymized, aggregated trend reports for GFI's research.
• To communicate with you about service updates.

3. Data Sharing and Disclosure

We share your data with the following parties:

• ALL Other Registered Users: Your Public Profile Data and CV are visible to all Users.
• Service Providers: We share data with third-party vendors who help us operate the Platform, such as our cloud and database provider (Supabase).
• International Transfers: Our service providers may be located outside of Singapore. When we transfer your data, we will ensure that it is protected to a standard that is comparable to the protection under the PDPA.
• Legal Authorities: If required by law, subpoena, or to protect our legal rights.

4. Data Security and Retention

We implement reasonable technical and organizational measures (e.g., encryption, access controls) to protect your data from unauthorized access, use, or disclosure. In the event of a data breach, we will take steps to assess and mitigate the harm and will notify you and the relevant authorities as required by law.

We retain your personal data for as long as your account is active, and as required to comply with our legal obligations. Following the 14-day termination notice period, your data will be securely deleted or anonymized in accordance with our internal data retention schedule.

5. Your Rights (PDPA & GDPR)

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccuracies in your data.
• Withdraw Consent at any time by terminating your account. You acknowledge that withdrawing consent does not affect the legality of data processing that occurred before your withdrawal and does not recall CVs or data already downloaded by other Users.
• Request Deletion of your data, subject to our legal obligations.

To exercise these rights, please contact our Data Protection Officer at info@globalfintechinstitute.org.