Privacy Policy and Cookies

This Privacy and Cookies Policy, governs the information collected and processed only by Greenpeace Southeast Asia and will describe only Greenpeace Southeast Asia’s use of cookies and similar technologies when you visit our website. Different specific web properties (e.g. campaign sites) may use the same or have site-specific privacy and cookies policies.

Data Collection

Greenpeace Malaysia collects personal information about you in a number of ways:

as a visitor to the Greenpeace Southeast Asia website,
provided by you by making use of our website and the options on our website
subscribing to the receipt of updates by email,
contacting us for information or help,
providing your name and email on a list of signatures,
becoming a donor via other ways than the internet,
participating in Greenpeace campaigns or providing information through third party websites or apps.

We therefore ask you to read this privacy statement carefully.

The information that we collect about you

We may collect and process the following information about you:

Information that you give us, which can include, for example, your name, address, email address, telephone number, birthdate, financial information such as bank details.
Information that our website collects about you through third parties systems (eg. Google Analytics, Mixpanel). This information may include data such as your device type, browser and version used, and number of interactions you had with our website. This information can be used for statistical purposes and will help us improve our website.
Information that third parties such as Facebook, Google, Mixpanel and X collect about you on our website by performing actions, which may include the use of the social network sharing buttons and widgets available on our website.
Information that other third parties collect about you on our website by browsing it: This is information about you recorded / tracked by third parties just by making use of the website itself, such as navigating from one page to another (this event will be tracked) or by viewing an embedded Facebook video (if you are logged into Facebook) .
If you exchange emails, telephone conversations or other electronic communications (including comments on this website) with Greenpeace employees and other staff members or, as the case may be, electronic communication means on third party websites or apps – such as chatbots linked to Greenpeace – information technology systems may record details of those conversations, sometimes including their content.

The use of your information we collect

We may use your information for the following purposes:

To make your actions known on our website and to third parties. For example, your name may appear together with your comments on our website;
To identify users returning to visit our website, across devices and across Greenpeace Southeast Asia owned domains;
To promote Greenpeace campaigns and inspire others to take action. For example, we may show your name and a summary of what you have just done on our website, for instance, if you sign a petition or make a donation. If you petition someone using our website – for example a government official or company CEO – then we may send your name and email address with your message to them;
To send you updates and alerts by email, mail, instant messaging, push notifications or telephone;
To provide the service, products or information you have requested;
To administer your donation;
To analyze your giving history;
To combine your personal data with publicly available information so that we can tailor communications to match your profile;
To learn how we can improve our website, services, products or information;

We will only process your personal information in accordance with the purposes described above.

All our use of your personal data will be in accordance with the law. The law requires us to process data only if we have a valid legal basis for doing so. While the GDPR provides six lawful bases for data processing, we rely solely on the following four lawful bases for our data processing activities :

Agreement: we collect, process and store your information to perform agreements, such as the provision of a requested service
Consent: when you have given consent to us for the collection, processing and storage of your personal information
Legitimate interest: when it is necessary for us and does not invade your privacy
Legal Obligation: when we need to comply with legal or regulatory obligations

Please note that although the GDPR recognizes “Vital Interest” and “Public task” as additional lawful bases for data processing, we do not invoke these grounds for our data processing activities.

Vital interest: processing is necessary to protect someone’s life
Public Task: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority

We will inform you, to the extent applicable, when we request information about yourself, whether providing the requested information is necessary to comply with a legal obligation, or, on the other hand, if it is purely voluntary and there will be no implications if you decline to provide the information.

Information sharing and disclosure practices

Your name may appear together with your comments on our website. To inspire others to take action, we may also show your name and a summary of what you have just done on our website for example, if you sign a petition or make a donation. If you petition someone using our website, then we may send your name and email address with your message to them.

This privacy policy will not apply to the national/regional Greenpeace websites which are managed by the national/regional Greenpeace offices themselves. You can find the privacy policy of each Greenpeace website by clicking on “Privacy Statement” or “Privacy Policy” in the local language in the footer of their homepage.

Greenpeace is active in over 55 countries, and your local office is probably best suited to keep you updated. Therefore if you subscribe to our mailing list on this website and there is a Greenpeace office in your country, we may share your contact details with them to provide you with the most suitable newsletter and urgent alerts.

We may also disclose and provide access to the information you provided to our vendors and contractors who are performing services on our behalf. However, such vendors and contractors are not permitted to use your information for any purpose other than providing services to us. Finally, where we pass your information on to vendors or contractors located in countries outside the European Economic Area, we will make sure that they apply the same level of protection to your information as we do.

We do not sell or share your information for third-party marketing purposes.

Data Retention

Greenpeace Southeast Asia welcomes receiving updates from your personal information to make sure it is accurate and up-to-date. We will delete the information that we hold about you when we no longer need it.

We will retain your information for as long as it is necessary, within the legal time limits for the relevant activity, after which it will be deleted or anonymised, unless we have a legal obligation to retain it for a longer period.

Your Data Protection Rights

According to the General Data Protection Regulation (GDPR), you may have the following rights regarding the information we hold about you:

Right to access your information: You have the right to request details about the information we have collected about you from us.
Right to amend: If your personal data is incorrect or incomplete, you have the right to have your personal data amended or supplemented.
Right to restriction of processing: You can have us restrict the processing of your personal data, for example, during the period we monitor your request to change your personal data.
Right to erasure of personal information: You have the right to have your personal information deleted by us, unless we have permissible reasons under the GDPR to keep your personal information.
Right of Objection: You also have the right to object to the processing of your personal information by us. In doing so, we may ask you what specific situation the objection relates to.
Right to resist: You also have the right to resist to our use of your personal information for direct marketing purposes at any time
Right to withdraw consent: You can ask us to remove previously given consent
Right to file a complaint: If you are left with unresolved questions, you have the right to file a complaint with the body regulating data protection in your country.

If you wish to exercise any of these rights, please contact us as set out below. We are obliged to request proof of identity before access to your personal information is given.

If you would like us to remove your information from our mailing list, you can click the “Unsubscribe” link at the bottom of any email we sent to you or contact us as set out below

Security Measures

We have implemented appropriate technical and organisational measures to secure personal data against loss or against any form of unlawful processing. Our donation pages are secured using Secure Sockets Layer (SSL), a security protocol that provides communications privacy over the Internet in a way that is designed to prevent eavesdropping, tampering, or message forgery.

Only employees who need to access information about supporters and website visitors to perform their work are granted access to this personal identifiable information.

Changes to This Policy

Our Privacy Policy may change from time to time. The amended version will be published on our website and any significant changes will be communicated to supporters either on the website or directly.

This will replace any previous privacy policy wording and all conditions and terms of use will be in force from the date of publication.

Last updated: Jan 2026

Cookies Policy

We want to ensure that you enjoy browsing our website. In order to enhance your experience and collect information about your use of our site, we place “cookies” onto your computer.

Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie:

cookies allow our systems to recognise the user’s device and make any presettings immediately available
as soon as a user accesses the platform, a cookie is sent to the hard disk of the respective user’s computer

Cookies are useful because they:

allow a website to recognise a user’s device and to target the content displayed to the user’s interests
help us to improve our website
offer you a better service more tailored to your requirements
enable us to recognise your device when you return to our website
store information about your favourite activities on the website, thereby allowing us to tailor our website to your individual interests. This may, for example, include advertising according to your personal interests and accelerate the rate at which we can deal with your queries

By using our website you agree that, we can place the types of cookies set out below on your device, unless you have set your computer’s browser to reject them, and use that data in accordance with this policy.

Types of Cookies

There are four broad types of cookies:

Necessary cookies: Cookies for functional purposes make logging in and navigating the website possible. Cookies are also used when you share a page via social media. Necessary cookies help make a website more usable, by enabling basic functions such as page navigation, access to secure areas of the website, and saving your preferences that affect behavior and design of the website. Without these cookies, the website cannot function properly.
Analytics and performance cookies: Our website also uses analytics cookies to measure and analyse the performance of this website. If you accept the placement of cookies, we will collect, among other things, information about your device and browser, geo-location (based on the IP address), the number of visitors to our web pages and how you arrived at our website (for example, because you clicked on one of our advertisements or on a link in an email). This also allows us to track, for example, how many visitors a particular page has. Greenpeace Southeast Asia uses Google Analytics, Mixpanel and Hotjar for analytics and performance purposes. Greenpeace Southeast Asia may place first-party cookies on the basis of legitimate interest for which no consent is required, because Greenpeace Southeast Asia has set up additional privacy-friendly safeguards for this purpose. Other third-party cookies may be placed on consent basis to this category of cookies. To this end, Greenpeace Southeast Asia has signed a processing agreement with these parties, masking the collection of the internet protocol (IP) address used to connect your device to the internet.
Advertising and marketing cookies: Marketing cookies make it possible to show you relevant pages based on your surfing behavior. Your surfing behavior on this website can also be used to show you relevant information about our products and services on third party websites. In addition, we use cookies to test different pages next to each other in order to optimize our website. The cookie is placed on your browser when you visit our website and is given a unique number. By recognizing that number, Greenpeace Southeast Asia can display appropriate information on the website where you are at that moment (can be anywhere on the Internet). The goal is to display ads that are tailored and relevant to the individual user. These ads thus become more valuable to publishers and third-party advertisers. For more information about cookies, please refer to the overviews below.

We also draw your attention to the following categories of cookies – first party cookies, third party cookies and persistent cookies:

First party cookies are cookies set by the website domain you are visiting (e.g. greenpeace.org). Only that domain can read them.
Third party cookies are cookies served by a service provider on behalf of the website operator, and can be used by the service provider to recognise your computer when you visit other websites. Third party cookies are most commonly used for website analytics or advertising purposes.
Persistent cookies are cookies that are stored on your computer and are not automatically deleted when you close your browser, unlike a session cookie which is deleted when you close your browser.

Hotjar

We use Hotjar to better understand our users’ needs and to optimise this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices (in particular device’s IP address (captured and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy. You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site, and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

Mixpanel

Greenpeace Southeast Asia uses Mixpanel to collect anonymous data from users’ interactions with our website. This information helps us to understand our user’s interests, improve our products and services and enhance the overall user experience on our website. Mixpanel generates statistical and other information about website use by means of cookies, which are stored on users’ computers.

Mixpanel cookies collect data about how you use our website. By defaulf, Mixpanel cookies are set under Greenpeace.org domain, when the “Necessary” cookies are enabled. In case of consent retrieval, Mixpanel cookies will be removed. If you prefer not to receive these cookies, please adjust your cookies settings above (‘change your cookies preferences’).

As mentioned earlier, Mixpanel cookies on this website gather information anonymously This information includes the number of visitors to the site, where visitors come to the site from and the pages they visited. Here’s more information on Mixpanel privacy:

Mixpanel privacy policy

Mixpanel security overview

Use of Google Analytics

Greenpeace Southeast Asia uses Google Analytics to gather visitors’ use of our website and analyse the data to help us maintain and improve the design of our website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers.

Google Analytics cookies will only be applied when the “Analytics and performance” cookies consent is given. In case of no-consent, Google Analytics will still run and collect aggregated and anonymised data, it will not be able to track any user identification. Should you not be willing to get these cookies, please change your cookies settings above (‘change your cookies preferences’).

As mentioned before, Google Analytics cookies used in this website collect information in an anonymous form, including the number of visitors to the site, browser ClientID (to identify returning users, for example), where visitors come to the site from and the pages they visited. Here’s more information on Google Analytics privacy:

As of May 2018, Google Analytics introduced the Data Retention controls, giving organisations the ability to set the amount of time before user-level and event-level data stored by Google Analytics is automatically deleted from Analytics’ servers.

Such retention period applies to user-level and event-level data associated with cookies, user-identifiers (e.g. User-ID) and advertising identifiers (not applicable in Greenpeace websites anyway). For Greenpeace Southeast Asia, the Data Retention control for Google Analytics is set to 26 months. Once again, Analytics will not collect the internet protocol (IP) address used to connect your device to the internet. You can request Google to provide an extraction of your data related to Greenpeace Southeast Asia website.

Besides, it is important to mention that Google stores websites traffic information which have Google Analytics tracking code. Check Google’s privacy policy and how to opt-out of Google Analytics cookies.

You can install the Google Analytics Opt-out Browser Add-on to prevent information about your visits to our website being sent to Google Analytics.

Third party cookies and our social media and web advertising

You may also see our advertising online and on some social media sites if you have supported us before, or if your use of these channels suggests that you would find our campaigns relevant.

We use cookies to ensure that any investments we make in online advertising are as cost-effective as possible, by tracking how well individual adverts perform. These cookies are issued by third party service providers that we have assessed as secure.

If you do not wish to see these adverts, you can do so by managing the privacy settings on your social media accounts including Facebook, Instagram and Twitter

Depending on your settings or the privacy policies for social media and messaging services, you may have given these services permission to share your details with us. For example, if choosing to register for an activity using a ‘Sign up with Facebook’ link, Facebook may share information such as your name and email address with us.

Our Social Media Pages such as Facebook, Instagram and Twitter may also use ‘chat’ services to allow Greenpeace Southeast Asia representatives to offer you assistance or the opportunity to engage with Greenpeace in a manner relevant to you.

These services may involve the use of cookies and the transfer of information about your site navigation, such as your IP address, to secure networks for the purposes of storage and analysis. This information will only be used for the purposes of administering these live chats.

Change your cookies preferences

You can set your browser to notify you when a cookie is placed or to prevent the collection of cookies. You can also periodically delete the cookies stored on your computer. However, you will then not be able to use all the features of the site. In addition, you always have the option of deleting cookies from your hard drive.

A full list of cookies which may be placed in your browser is available above (see Types of Cookies) and some detail on how and why we process the information of these 3rd parties is available below.

By disabling (un-checking) all types of cookies above, we will set a unique cookie in your browser (“no_track”) to store your preferences – this will allow you a tracking-free experience on this website until you change your mind or clear your browser’s cookies.

If you want a comprehensive overview of all third-party accesses to your Internet browser, we recommend installing specially developed plug-ins such as Ghostery. Additionally, most web browsers allow some control over cookies through browser settings (e.g. notifications of new cookies, disabling cookies and deleting cookies). Click your browser type below to go directly to the browser user guide to learn how to disable or erase cookies.

Blocking all cookies will, however, have a negative impact upon the usability of many websites.