I AM STUBBORN

Privacy notice

Last updated 13 October 2026

1. Who we are

This campaign is run by GFTN Services Pte. Ltd. (“GFTN”, “we” or “us”). This notice explains how we handle personal data in the I AM STUBBORN campaign.

It sits alongside GFTN’s Privacy Policy. Where this notice is more specific about the campaign, this notice applies to the campaign, and it does not change GFTN’s Privacy Policy. For any privacy question, or to use your rights, email dpo@gftn.com.

2. What we collect

• The photo you upload. It shows your face.
• The reason you type.
• A transparent copy of your finished character (a “cut-out”), kept with your image so that square profile-picture versions (for WhatsApp or LinkedIn) can be made when you ask for them, and a print-ready file if you ask for a T-shirt print at the event.
• If you choose one, a “look” (female or male character) to steer your image. “Go by my photo” sends and keeps nothing.
• If you choose one, an outfit style (Blazer, Overshirt or Cardigan). “Surprise me” sends and keeps nothing.
• Your consent choices, with the date and time and the version of our wording you agreed to.
• A one-way scrambled version (a “hash”) of your IP address, and one essential cookie (see section 9). We use these only to stop abuse and to show you your own image.

We do not ask for or store your name, email address or phone number, and we do not create an account for you. We re-save your photo when you upload it, which removes hidden data such as the location a photo was taken.

3. Why we use it, and our legal basis

• To make your image (your photo and reason), check it follows our content rules, let you download it, and make square profile-picture versions of it for WhatsApp or LinkedIn. Our legal basis is your consent, given by ticking the first box.
• To suggest a tidier version of your line, only if you press “Tidy my line”: your line is sent to our AI provider, which sends a suggestion straight back. We keep nothing from it. Our legal basis is your consent, given by pressing that button.
• To steer your image, only if you choose “Female character” or “Male character” (the AI sometimes draws the wrong look from a photo alone) or an outfit style. Our legal basis is your consent, given by making that choice.
• To show your image in the public gallery and keep it in a private archive, if you tick the gallery box. Our legal basis is your consent.
• To share your image on GFTN’s social media and other channels to promote I AM STUBBORN, if you tick the social media box. Our legal basis is your consent.
• To print your character on a T-shirt at the event, only if you ask for it with the booth button. We then give you a QR code to show the booth’s printing service, which can download a print-ready A4 file with a transparent background (your character, the lockup and your reason) through it. You do not download that file yourself. Our legal basis is your consent, given by pressing that button.
• To keep the campaign secure and within budget (the scrambled IP address, the essential cookie and the bot check). Our legal basis is our legitimate interest in preventing abuse.
• To keep a record that you consented. Our legal basis is our legitimate interest in being able to show that consent was given.

You can withdraw any consent at any time. Withdrawing does not affect what we did before you withdrew. We do not rely on legitimate interests to keep or reuse your image: that always needs your consent. We do not use your photo to identify you or to build a profile of you, and we do not use it to train any AI model.

4. Who handles your data for us

We use these service providers to run the campaign. They act on our instructions.

Our providers keep data under their own terms, which we do not control. In summary: Magnific’s privacy policy says photos you upload are deleted straight after your image is created, that its AI model partners may keep data for up to 30 days, and that it keeps finished images while our contract runs (we will ask it to erase ours after the campaign ends). Anthropic’s published terms say data sent through its API is deleted from its systems within 30 days, and longer in some cases, for example where a usage policy is breached. Please read their notices for the full position: Magnific and Anthropic.

Some of these providers are outside Singapore. Before your data is transferred to another country we rely on safeguards, such as contractual commitments from our providers, to protect it.

5. How long we keep it

• Your original photo: deleted from our systems as soon as your image is made, or if something goes wrong. As a safety net, an automatic clean-up removes anything left within about a day.
• Your image and reason, if you did not tick the gallery or social media box: removed from our systems 24 hours after they are made.
• If you ticked the gallery or social media box: kept privately in our records for up to 12 months after your image is made, then deleted. If you ticked the gallery box, it is also shown in the public gallery while the gallery is open. You can ask us to remove it sooner.
• A line sent to “Tidy my line”: not kept by us. It is used for the suggestion and then forgotten.
• Your “look” choice (female or male character) and your outfit choice, if you made them: kept only with your uploaded photo and deleted together with it, as soon as your image is made.
• The transparent cut-out of your character (used to make profile-picture versions and, if you ask for a print, the print-ready file for the printing service): kept and deleted together with your image, whenever that is, including when you use “Delete my image”.
• Scrambled IP address: removed after 30 days.
• Consent record and anonymous session ID (kept without your photo, reason or any name): 12 months, then deleted.
• The T-shirt booth: if you ask for a print, we record that a place was held (a random ID, the date, and when the printing service started and finished printing), kept 12 months. Your QR code works for 30 minutes: if the printing service does not start in that time, your place is released and you can ask again. Once it has started, the link stays open for up to 480 minutes so the job can be finished, then stops working (it also stops once the job is marked printed, or your image is deleted). The printing service can download your file only through that link. We ask the service to delete the file after printing. The T-shirt itself is yours.
• Posts and copies outside our systems: our periods above cover only our own records. A post GFTN makes stays online until GFTN removes it, and we cannot recall copies that other people have saved, downloaded or shared. Your own downloaded copies are yours to keep; we cannot recall them. The printing service is asked to delete the print file after printing, but we cannot recall a copy it keeps.

This campaign does not create an event registration, so the longer retention periods in GFTN’s Privacy Policy for registration and contract data do not apply to it.

6. The public gallery and archive (only if you ticked the gallery box)

GFTN may display your image, with the reason printed on it, in the public gallery. We will not show your name. A member of GFTN staff chooses which images go on display, so ticking the gallery box does not mean your image will appear. An image you ticked the box for that is not chosen stays in our private archive (section 5) and is not shown to the public. GFTN staff can remove any image at any time. We may close the public gallery at any time; your image then stays in our private archive (section 5) until it is deleted.

7. Social media and other channels (only if you ticked the social media box)

GFTN may share your image, with the reason printed on it, on its social media and other channels to promote I AM STUBBORN. We will not use your name. Posts stay online until GFTN removes them, and platforms and other people may keep or share copies we cannot recall. If you ask us to remove a post, we will remove GFTN’s own post within 5 to 7 business days. We keep a record of where we post so that we can do this.

8. The prize draw (only if you enter it)

If you enter the Share to win prize draw, we collect the link to your public post, your handle on that platform, the time of your entry, a random browser ID and a scrambled version of your IP address (to spot misuse). We do not collect your name or email address. We use them to run the draw: to check your entry, to pick winners at random, and to name each winner by their handle on GFTN’s channels and on this website. You give your consent by entering, and we also have a legitimate interest in running a fair draw.

Your entry is separate from the gallery and social media boxes: what you chose there does not change your chance of winning. The post you link is public on its platform, which handles it under its own terms, and our team will look at it to check your entry. We keep entries and winner records until 60 days after the last draw, then delete them. Winners’ handles shown on this website or in GFTN’s posts stay there until we remove them, and we cannot recall copies others have made. The full rules are in the terms of the draw.

9. AI, your photo and our content rules

Your image is created by AI and is a stylised cartoon likeness of you. Our automated checks look at the picture, for example that it shows one adult face and that the character matches your photo. They do not identify who you are and they do not compare your face with any database.

A photo can show things such as religious dress or headwear. We use your photo only to create your character, and the character keeps those items. By ticking the first box you agree to your photo being processed in this way.

We may decline to create, or remove, any image or reason that is offensive, harmful or breaks our rules. Please upload only a photo of yourself, and nothing you do not have the right to share. GFTN’s Privacy Policy describes how GFTN uses AI for forum reports; that is separate from this campaign.

10. Cookies and browser storage

We use one essential cookie, called sc_sid. It holds a random ID, lasts 30 days, and lets us show you your own image and limit repeated use. We also keep the ID of your current image in your browser’s session storage until you close the tab, so the page can pick up where it left off. We do not use analytics or advertising cookies. Cloudflare Turnstile, our bot check, may use its own technical cookies or browser storage to run the check. Because all of this is needed for the campaign to work, there is no cookie banner or choice to make here. GFTN’s Privacy Policy describes cookies on other GFTN websites.

11. Your rights and how to use them

You can ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, or give you a copy in a portable format. You can also withdraw any consent. We do not make decisions about you with legal or similarly significant effects based solely on automated processing: the automated checks only decide whether an image can be made.

• Use “Delete my image” on the page where you made it to delete your image and reason immediately.
• Or email dpo@gftn.com. Because we do not know who you are, tell us roughly when you made it and what the reason said, or send a screenshot, so we can find it and confirm it is yours.
• We aim to respond within 5 to 7 business days of confirming it is your image.
• To ask us to remove a social media post GFTN made, email the same address. We cannot remove posts made by other people or recall copies they saved or shared.

12. Age

This campaign is for people aged 18 or over, which you confirm by ticking the first box. We do not check your age, but an automated check declines photos of people who appear to be under 18. If we learn that someone under 18 has used the campaign, we will delete their image.

13. Changes and complaints

We may update this notice. The date at the top shows when it last changed, and the wording you agreed to is recorded with each submission. If you are in the UK or EU you may complain to your data protection authority. In Singapore you can contact the Personal Data Protection Commission. Questions: dpo@gftn.com.