Privacy Notice

Last Updated: 26 October 2025

1 . Introduction
Global Family Enterprise Advisors Pte Ltd (collectively, "Family and Business Learning", "we", "us", or "our") operates the websites https://www.familyandbusinesslearning.com, https://www.fab-learning.com, https://familybusinessonthemoon.com, www.thefamilyandbusinessstore.com and related services (the "Site" and "Services"). This Privacy Notice describes how we collect, use, disclose, and process your Personal Data when you use our Services.

2. What Personal Data Do We Collect?
"Personal Data" means data about a living individual who can be identified from that data. We collect:

• Identity and Contact Data: Name, email address, phone number, billing and shipping address.
• Profile and Business Data: Job title, role in family business, company name, age, gender, generation, country and year the business was founded, and your answers to assessment questions.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform.
• Usage Data: Information about how you use our Site and Services.
• Financial and Transaction Data: Details of payments you have made.

3. How We Use Your Personal Data (Purposes and Legal Basis)
We will only use your Personal Data for the following purposes and under the corresponding legal bases as required by the GDPR:

• Performance of a Contract: To register you as a Member and provide our Services.
• Legitimate Interests: To administer and protect our business, deliver relevant content, and use data analytics to improve our Services.
• Consent: To send you marketing communications in accordance with your preferences.

4. Our Use of Artificial Intelligence (AI)

To generate insights from your assessments, we use artificial intelligence. Before any data is sent for analysis, we automatically remove all personally identifiable information (such as names, email addresses, and any other identifying details). This anonymized data is then processed by Mistral AI to produce the insights in your reports. Because the data is anonymous, it cannot be linked back to you.

5. How We Share Your Personal Data
We may share your Personal Data with the following categories of Service Providers:

• Cloud Hosting & Infrastructure: Linode
• Analytics & Marketing: Google Analytics, Brevo, Hubspot
• Payment Processing: Stripe, PayPal, Shopify
• Shipping: Easyship
• AI-Powered Services: For AI processing, we only share anonymized, non-identifiable data with third-party AI services.

6. International Transfers
Your Personal Data may be transferred to and processed in countries outside of Singapore and the European Economic Area (EEA). Where we transfer your data, we will implement appropriate safeguards.

7. Data Security

We have implemented industry-standard security measures to protect your data. This includes encrypting all data in transit (using TLS) and at rest (using AES-256 encryption) on our secure server infrastructure, which is hosted in Singapore.

8. Data Retention

We will retain your Personal Data only for as long as is necessary to fulfil the purposes for which we collected it.

To comply with our legal and regulatory obligations and for our legitimate business operations, we apply the following retention periods:

• Financial and Transaction Records are retained for 7 years from the end of the financial year in which the transaction occurred, as required by Singapore law.
• User Account Data, Assessment Data, and Communications are retained for up to 7 years from the date your account is closed or services are terminated. This retention period allows us to:
  • Respond to any inquiries or disputes that may arise after your account is closed.
  • Maintain the continuity of your records and assessments should you choose to re-join our service.
  • Fulfill other legitimate business needs, such as internal audit, compliance with our legal obligations, or the establishment, exercise, or defense of legal claims.

In specific circumstances, shorter or longer retention periods may apply where required by other laws or upon the valid request of a competent authority.

Once the applicable retention period expires, we will securely delete or anonymize your Personal Data so it can no longer be associated with you.

9. Your Legal Rights
Under applicable laws like the GDPR and Singapore's PDPA, you have the right to access, correct, erase, object to processing, and request data portability.

10. Cookies and Similar Technologies
We use cookies and similar tracking technologies to distinguish you from other users, improve your experience, and for analytics and marketing purposes. For detailed information on the cookies we use, their specific purposes, and how you can control your preferences, please see our dedicated Cookie Policy.

11. Contact Us & Data Protection Officer
If you have any questions, please contact our Data Protection Officer:
Email: george@fab-learning.com

Post: Data Protection Officer, Global Family Enterprise Advisors Pte Ltd, 14 Wilmonar Avenue, Singapore 588044

12. Changes to This Privacy Notice
We may update this Notice. The updated version will be indicated by the "Last Updated" date.