Privacy notice

Last updated: [PLACEHOLDER: date]. Draft for review; not legal advice.

Who we are

Youth for Energy Security SG is a youth-led volunteer group in Singapore, supervised by parents. Our Data Protection Officer is [PLACEHOLDER: adult Data Protection Officer name], reachable at .

What we collect

Through our volunteer form: your name, email, age group, school or area (optional), how you’d like to help, and when you’re free. If you’re under 18, also your parent or guardian’s name, email and consent. We don’t collect NRIC numbers, addresses, phone numbers or photos through this site.

Why we collect it

Only to contact you (and your parent or guardian, if applicable) about Youth for Energy Security SG’s volunteer activities and events, and to plan those activities. We won’t use your data for anything else without asking you first.

Volunteers under 18

We ask for a parent or guardian’s consent for every volunteer under 18. This is stricter than the PDPC’s guidance, which allows many 13–17 year olds to consent for themselves and requires a parent or guardian’s consent for children under 13.^[1] We will email the parent or guardian to confirm before involving a young volunteer in any activity.

Sharing

We never sell your personal data. We don’t share it with anyone outside Youth for Energy Security SG, except service providers that store it for us: Cloudflare, Inc. (a US company), which hosts this website and stores volunteer sign-ups in its D1 database service, and our email provider ([PLACEHOLDER: email provider]). We ask Cloudflare to place the sign-up database in the Asia-Pacific region. Cloudflare treats this as a preference, not a guarantee, and it may process data in other countries where it operates, including the United States, to run and protect the service. Because your data may be stored or processed outside Singapore, we rely on Cloudflare’s contractual and security commitments to protect it to a standard comparable to the PDPA.

How long we keep it

Until you ask us to delete it, or 12 months after we last contacted you, whichever is sooner. If you withdraw consent, we delete your data within 30 days. [PLACEHOLDER: Confirm retention period]

Your rights

• Withdraw consent at any time. We’ll stop contacting you and delete your data.
• Access the personal data we hold about you, and how it’s been used.
• Correct anything that’s wrong.

Email with your request. We’ll reply within 30 days.

Security

Only [PLACEHOLDER: number] named organisers can access volunteer data, using accounts protected by strong passwords and two-factor authentication.

This website

This site uses no advertising or tracking cookies and no analytics. Like any web host, Cloudflare processes basic technical data (such as IP addresses) to deliver the site securely. [PLACEHOLDER: Update if analytics are added]

Questions or complaints

Contact our Data Protection Officer at . You can also contact the Personal Data Protection Commission.