Privacy.

greentechfestival.com is run by GTFN (Greentech Festival and The Network) ("GTFN", "we"). We are responsible for the personal data described here. For anything about your data, write to info@greentechfestival.com; a person on the team reads it.

This notice covers the website, your account, The Network, the member directory, connections and messages, event registration, the application and contact forms, and the newsletter. Contracts we sign with sponsors, partners and venues have their own terms and privacy clauses, which apply alongside this notice.

We collect only what the service you are using needs. Nothing is collected in the background for advertising.

Your account

Your email address. We use it to sign you in with a one-time link and to write to you about your account. There is no password to store.

Applications and messages to the team

What you type into a form (founding membership, partnership, institutional programmes, speaking, press accreditation or a message to the team): typically your name, organisation, role, market and what you tell us. We use it to answer you and to decide on your application.

Your directory profile

If you create one: your display name, role, organisation, sectors, markets, a short bio and links. You choose who sees each part, from everyone who can see your profile down to your connections only, and you can hide the profile entirely. A hidden profile never appears in the directory.

Organisations

An organisation's name, its web domain and how it was verified (a matching email domain or a DNS record). "Verified" here only means control of the domain. We do not verify, rate or certify anyone's environmental claims.

Connections and messages

Who you have connected with, and the messages you exchange with accepted connections. The team reads a message only when it is reported under the community rules.

Events

Your registrations and tickets, and whether you have chosen to appear in an edition's attendee list. You appear there only if you opt in.

Newsletter

Your email address and whether you have confirmed it. We send nothing until you click the confirmation link, and every issue has a one-click unsubscribe.

Membership and payments

When online payment is live, it runs on Stripe. Your card details go to Stripe and never reach us. We keep your membership status, the renewal date and Stripe's reference numbers for your customer record and subscription.

Security records

A log of significant actions (for example a sign-in request, an application or an account deletion) so we can investigate abuse and show what happened. When you delete your account, the log keeps an internal reference number only, not your details.

• To provide what you asked for: signing you in, running your membership, registering you for an event, handling your application.
• Your consent: the newsletter, and appearing in an attendee list. You can withdraw either at any time.
• Legitimate interests: keeping the service secure, moderating messages that are reported, and understanding how the service is used in aggregate.
• Legal obligations: tax and accounting records for payments.

Where Singapore's Personal Data Protection Act, the EU and UK GDPR, Thailand's PDPA or another data protection law applies to you, we handle your data as that law requires.

We set one cookie, gtf_session, when you sign in. It keeps you signed in for up to 30 days. It is marked secure and cannot be read by scripts. Signing out removes it.

We use no analytics, advertising or tracking cookies, and no third-party trackers. That is why there is no cookie banner.

We do not sell personal data, and we do not share it for anyone else's marketing.

A small number of providers process data for us, under contract and only to run the service:

• Cloudflare: hosting, the database, email delivery, and a bot check on the sign-in form.
• Stripe: payments, once online payment is live.
• Google Fonts: the site's typefaces load from Google's servers, which see your IP address when a page loads.

Other members see your directory profile and messages as your visibility settings allow. Event partners see attendee details only where you have opted into that edition's list or the event page says so before you register.

ESGOS (esgos.org) is a separate organisation. We send it no personal data, and membership of GTFN changes nothing in its public record.

We disclose data to authorities only where the law requires it.

GTFN works across Singapore, Southeast Asia, China, the Gulf, Pakistan and Europe, and our providers run global networks. Your data may therefore be processed outside your country. Where the law requires it, we rely on safeguards such as standard contractual clauses so your data keeps its protection.

• Sign-in links work once and expire after 20 minutes. Sessions end after 30 days or when you sign out.
• Your account, profile, connections and messages stay until you delete your account.
• Applications and messages to the team are kept while we handle them and for as long as they stay relevant to the relationship, unless you ask us to delete them.
• Newsletter: until you unsubscribe.
• Payment and invoice records are kept as long as tax law requires.

You can see, download, correct and delete your data, and in most places you can also restrict or object to how we use it.

• Download everything as one JSON file: Your data in your account.
• Correct your profile at any time: Your profile.
• Delete your account. Also on Your data. It is permanent and immediate: your profile, applications, connections, messages, registrations and newsletter subscription go with it.
• Anything else, including withdrawing consent or asking what we hold: write to info@greentechfestival.com. We answer within 30 days.

If you are not satisfied with our answer, you can complain to your data protection authority, for example Singapore's Personal Data Protection Commission or the authority in your EU country.

Every page is served over HTTPS. There are no passwords to leak, because you sign in with single-use links. Sign-in and session tokens are stored only as one-way hashes. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

GTFN is a professional network for people working in green technology. It is not meant for anyone under 18, and we do not knowingly collect their data.

When we change how we handle personal data, we update this page and the date at the top. If a change is significant, we tell account holders by email before it takes effect.