Governance

Privacy Policy

JoanneFlinn.com · Last updated: April 2026

Who this site belongs to

JoanneFlinn.com is the website for Joanne Flinn. The business activities referenced on this site, including the ESG Institute, ClearSight™, speaking, and advisory work, are operated through ESG Institute Pte Ltd, a certified B Corporation registered in Singapore. The art practice is operated through Project Wings Pte Ltd, trading as Booth Aster.

When we say "we" or "our" on this page, we mean Joanne Flinn and the entities above. When we say "you," we mean anyone visiting this website.

What we collect and why

We collect personal data only when you provide it to us or when it is necessary to deliver the experience you expect from a professional website.

When you visit our website, we use Google Analytics and other tools to understand how visitors use the site. This collects anonymised data such as pages visited, time on site, and general location. This does not identify you personally. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

The hosting provider may also collect standard server logs including your IP address, browser type, pages visited, and timestamps. This is standard web infrastructure and is not used for marketing or profiling.

Search engine indexing. This site is indexed by search engines (Google, Bing, and similar) so that people can find it. This is standard practice for any professional website and does not involve the collection of your personal data.

Third-party services

This site uses or links to platforms that have their own privacy policies:

  • Google Analyticsfor website analytics
  • LinkedInfor professional contact
  • Substackfor the newsletter at JoanneFlinn.substack.com
  • the-ESG-Institute.comfor the business practice
  • BoothAster.comfor the art practice
  • Vimeofor embedded video content

We do not sell, rent, or trade your personal data to any third party. We share your data with third-party services only as described above and only to the extent necessary.

Embedded content

Pages on this site may include embedded content such as video from Vimeo. Embedded content behaves as if you had visited the hosting site directly. These services may collect data about you and use cookies.

How we protect your data

We use secure hosting and encrypted connections (HTTPS). Access to any server-level data is limited to the site administrators.

How long we keep your data

Contact information is retained for the purpose of responding to your enquiry and any follow-up conversation. If you would like your details removed, please let us know the medium you used to connect with us.

Google Analytics data is retained according to Google's standard retention settings. Server logs are retained by the hosting provider according to their standard practices.

Your rights

Under the Personal Data Protection Act 2012 (PDPA) of Singapore, and under GDPR where applicable, you have the right to request access to, correction of, or deletion of any personal data held about you. If you would like your details removed, please let us know via the medium you contact us with or via LinkedIn.

Contact

If you have questions about this policy, please reach out via LinkedIn.

Changes

This policy may be updated from time to time. The date at the top reflects the most recent revision.