The GSLA Foundation (“we”, “us”, “our” or “GSLA”) is committed to protecting and respecting your privacy.

This Privacy Notice (“Notice”) sets out the basis on which we may collect, use, disclose or otherwise process personal data of our volunteers, beneficiaries, employees, donors, partners, job applicants, and community members in accordance with the Personal Data Protection Act (“PDPA”). This Notice applies to personal data in our possession or under our control, including personal data processed by third-party organisations engaged by us.

For the purpose of this Notice:

• “Volunteer” refers to individuals serving with GSLA Foundation in any capacity, including humanitarian mission teams, event helpers, social media volunteers, and project contributors.
   
• “Beneficiary” refers to individuals or families receiving aid, training, scholarships, mentoring, humanitarian support, or community assistance.
   
• “Employee” refers to any staff member under a contract of service with GSLA Foundation (full-time, part-time, intern, or trainee).
   
• “Job applicant” refers to individuals applying for a role with GSLA Foundation.
   
• “Personal data” refers to data (true or otherwise) that identifies an individual from that data alone, or when combined with other information we have or are likely to have access to.
   

All other terms follow definitions under the PDPA.

Depending on your relationship with GSLA Foundation, the personal data we collect may include:

• Name, address, email, phone number
   
• Demographic information such as nationality or age group
   
• Participation history (events, humanitarian missions, workshops, mentorship)
   
• Donation or sponsorship information
   
• Photographs, videos, or audio recordings taken during GSLA activities
   
• Communications or correspondence with us
   

• Personal particulars (name, gender, nationality, date of birth)
   
• Contact information
   
• Résumé, employment history, education background, references
   
• Certifications, portfolio, and relevant documents
   

• Identification details (NRIC/FIN/passport)
   
• Contact information
   
• Payroll and bank account details
   
• Leave records, performance assessments, training history
   
• Emergency contacts and next-of-kin information
   
• Photographs or audio-visual content
   

We may collect data such as:

• IP address, browser type, operating system
   
• Website usage patterns and traffic data
   
• Cookies storing preferences and improving the user experience
   

Cookies help us:

• Estimate audience size
   
• Customise user experience
   
• Recognise returning visitors
   

Users may disable cookies via browser settings, though this may limit functionality.

We collect personal data when:

• You provide it voluntarily
   
• It is submitted for volunteering, program participation, donations, or employment
   
• It is required under applicable law
   
• A third party has been authorised to share it with us
   

We may use your personal data for purposes including:

• Managing humanitarian, educational, and leadership programs
   
• Coordinating volunteer deployments and training
   
• Processing donations, acknowledgements, or sponsorship reports
   
• Communicating updates, invitations, alerts, or impact reports
   
• Verifying identity and managing relationships
   
• Improving our services, website, and operations
   
• Responding to queries, feedback, or requests
   
• Complying with laws, regulations, and reporting obligations
   

• Assessing suitability for employment
   
• Conducting background, reference, or qualification checks
   

• HR administration, payroll, and benefits
   
• Internal access management and compliance
   
• Performance tracking and training
   
• Business continuity and organisational needs
   

We may disclose data to:

• Service providers supporting our operations
   
• Authorities when required by law
   
• Humanitarian or academic partners involved in GSLA programs
   
• Auditors, advisors, and consultants
   
• Technology vendors providing secure systems and storage
   

Transfers outside Singapore will only occur with your consent and with PDPA-compliant safeguards.

We may process personal data without consent when necessary for:

• Fraud detection and prevention
   
• Ensuring the security of GSLA systems, programs, volunteers, and beneficiaries
   
• Preventing misuse of GSLA services or resources
   

A legitimate interest assessment will be conducted to ensure fairness and proportionality.

You may:

• Request access to your data
   
• Request correction of inaccurate data
   
• Withdraw consent at any time
   
• Ask us not to process your data for specific purposes
   

All requests must be submitted to our DPO.

Withdrawal of consent may affect our ability to provide certain programs, volunteering opportunities, or assistance.

We use administrative, technical, and physical safeguards such as:

• Access controls and authentication
   
• Encryption and secure storage
   
• Data anonymisation where relevant
   
• Antivirus protection and routine patching
   
• Secure disposal processes
   
• Multi-factor authentication (MFA)
   
• Regular security audits
   

While no system is fully immune, we continuously strengthen our data protection measures.

We rely on the accuracy of data provided to us.
Please inform us if your information changes.

We retain data only for as long as necessary for legal, operational, or business purposes. When no longer required, we will securely delete or anonymise it.

For any queries, feedback, or requests regarding personal data:

Data Protection Officer (DPO)
Email: info@gslafoundation.com

Please include:

• Your full name
   
• Contact details
   
• A brief description of your query
   

We will respond promptly and treat all matters confidentially.

This Notice may be updated periodically without prior notice.
The latest version will be indicated by the updated date on our website. Continued involvement with GSLA Foundation constitutes acknowledgement and acceptance of the revised Notice.