This Privacy Policy explains how Global Peace 2030 (“Global Peace 2030”, “we”, “us” or “our”) collects, uses, shares, stores and protects personal information relating to visitors, donors, supporters, applicants, partners and other users worldwide.

It applies to www.gp2030.org, related websites, online services, programmes and communications operated by Global Peace 2030 (collectively, the “Services”).

1. Organisation responsible for your information

The organisation responsible for processing your personal information is:

Global Peace 2030
Email: info@gp2030.org
Website: www.gp2030.org

2. Information we collect

Depending on your interaction with us, we may collect:

Information you provide

  • Name and contact details;
  • Postal address, telephone number and email address;
  • Country, organisation, occupation and professional affiliation;
  • Information submitted through contact, registration or application forms;
  • Newsletter and communication preferences;
  • Donation amounts, payment references and receipt information;
  • Event-registration and participation information;
  • Correspondence and enquiries;
  • Employment or volunteer applications and résumés;
  • Photographs, videos, audio recordings or testimonials; and
  • Any other information you voluntarily provide.

Information collected automatically

When you use our Services, we may collect:

  • IP address;
  • Browser, operating system and device information;
  • Cookie and device identifiers;
  • Date and time of access;
  • Pages viewed and links selected;
  • Referring and destination websites;
  • Approximate location derived from an IP address; and
  • Security, error and diagnostic information.

IP addresses, cookie identifiers and similar online information may be considered personal information under applicable laws.

Payment information

Donations and other payments may be processed by independent payment providers such as PayPal, banks or other authorised providers.

These providers may collect payment-card, bank-account and identity information directly. Global Peace 2030 does not normally receive or store complete payment-card details.

3. How we use personal information

We may use personal information to:

  • Respond to enquiries and correspondence;
  • Process donations and issue receipts;
  • Administer programmes, events, meetings and registrations;
  • Send newsletters and updates where permitted;
  • Manage relationships with donors, supporters and partners;
  • Process employment and volunteer applications;
  • Operate, maintain and secure our Services;
  • Understand how visitors use our Services;
  • Prevent fraud, misuse and security incidents;
  • Maintain financial, organisational and legal records;
  • Comply with applicable laws and lawful requests;
  • Establish, exercise or defend legal claims; and
  • Carry out other purposes explained when information is collected.

We will not use personal information for a materially different purpose without providing appropriate notice and obtaining consent where required.

4. Legal grounds for processing

Depending on your location and applicable law, we may process personal information based on:

  • Your consent;
  • Performance of a contract or steps requested before entering a contract;
  • Compliance with a legal obligation;
  • Our legitimate organisational interests, provided those interests do not override your rights;
  • Protection of a person’s vital interests;
  • Performance of a task in the public interest, where applicable; or
  • Another legal ground recognised in the relevant jurisdiction.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

5. Newsletters and communications

We may send newsletters, programme updates, invitations and fundraising communications where you have consented or where applicable law otherwise permits.

You may unsubscribe at any time by:

  • Selecting the unsubscribe link in an email; or
  • Contacting info@gp2030.org.

We may continue sending essential administrative messages concerning your donation, registration, request or existing relationship.

6. Donor privacy

We may use donor information to:

  • Process and record donations;
  • Confirm transactions;
  • Issue receipts or certificates where legally applicable;
  • Meet accounting, tax and anti-fraud obligations;
  • Respond to donor enquiries; and
  • Report on how support contributes to our programmes.

We do not sell or rent donor information.

We will only state that a donation is tax-deductible where that treatment is legally available. Tax treatment may differ according to the donor’s country, and donors should obtain independent advice where necessary.

7. How we share information

We may share personal information with:

  • Authorised employees, representatives and volunteers;
  • Website-hosting and information-technology providers;
  • Email and communication-service providers;
  • Payment processors, banks and financial institutions;
  • Accountants, auditors, insurers and professional advisers;
  • Event, programme and project partners;
  • Government authorities, courts or law-enforcement agencies where legally required; and
  • A successor organisation following a lawful restructuring, merger or transfer of activities.

Service providers working on our behalf are required to protect personal information and use it only for authorised purposes.

We do not sell personal information. We do not share personal information for targeted or cross-context behavioural advertising unless this is clearly disclosed and any consent or opt-out required by applicable law is provided.

8. International transfers

Global Peace 2030 operates internationally. Personal information may therefore be processed in countries other than the country in which it was collected.

Where required, we use recognised safeguards for international transfers, which may include:

  • Adequacy decisions;
  • Standard contractual clauses;
  • Contractual and organisational safeguards;
  • Consent where legally permitted; or
  • Another transfer mechanism recognised by applicable law.

Data-protection standards may vary between countries. You may contact us for information about safeguards applicable to a particular transfer.

9. Information retention

We retain personal information only for as long as reasonably necessary for the relevant purpose and to meet legal, financial and reporting obligations.

Generally:

  • Enquiries are retained while they are being handled and for a reasonable follow-up period;
  • Newsletter information is retained until you unsubscribe or object;
  • Donation and financial records are retained for legally required accounting and tax periods;
  • Event information is retained for the event and necessary follow-up;
  • Employment applications are retained for a reasonable recruitment period unless longer retention is authorised;
  • Security logs are retained for a limited operational and investigation period; and
  • Information relevant to legal claims may be retained until applicable limitation periods expire.

Information will then be deleted, anonymised or restricted, as appropriate.

10. Your privacy rights

Your rights depend on where you live and which laws apply. They may include the right to:

  • Request access to your personal information;
  • Correct inaccurate or incomplete information;
  • Request deletion of your information;
  • Restrict how your information is processed;
  • Object to certain processing;
  • Withdraw consent;
  • Receive certain information in a portable format;
  • Opt out of direct marketing;
  • Opt out of the sale or sharing of personal information, where applicable;
  • Request information about categories of information collected and disclosed;
  • Appeal a decision concerning a privacy request, where applicable; and
  • Not be discriminated against for exercising a privacy right.

To exercise a right, contact info@gp2030.org. Please specify your country or region and the right you wish to exercise.

We may request limited information to verify your identity. We will respond within the period required by applicable law.

11. Additional information for EEA, UK and Swiss users

Users in the European Economic Area, United Kingdom and Switzerland may have rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent.

They may also complain to the data-protection authority in the country where they live or work, or where an alleged infringement occurred.

Where required, details of Global Peace 2030’s EU or UK representative or data-protection officer will be provided here:

Representative or DPO: [insert details if legally required]

12. Additional information for United States residents

Residents of certain US states may have additional rights under state privacy laws, subject to applicable thresholds and exceptions.

These rights may include access, correction, deletion, portability and opting out of:

  • The sale of personal information;
  • Sharing for cross-context behavioural advertising;
  • Targeted advertising; or
  • Certain profiling activities.

Global Peace 2030 does not sell personal information for monetary payment. If our practices change or if another legally defined form of “sale” or “sharing” applies, we will provide any legally required notice and opt-out mechanism.

13. Children’s privacy

Our general Services are not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children below the applicable minimum age without legally valid permission from a parent or guardian.

Where programmes involve children, we may use separate privacy notices, safeguarding procedures and parental or guardian authorisation.

If you believe that a child has submitted personal information without appropriate authorisation, contact info@gp2030.org.

14. Security

We use reasonable and appropriate technical and organisational safeguards designed to protect personal information from unauthorised access, alteration, disclosure, loss, misuse or destruction.

However, no internet transmission or electronic-storage system can be guaranteed to be completely secure. Please do not send passwords, complete payment-card details or other highly sensitive information through ordinary email.

15. Cookies and tracking technologies

We use cookies and similar technologies to operate the Website, remember preferences, understand Website use and, where permitted, support communications or advertising.

Non-essential cookies will be used only after consent where applicable. You may manage your choices through the Website’s Cookie Settings control.

Please consult our Cookies Policy for further information.

16. External websites

Our Services may link to external websites, payment processors, social-media platforms and partner organisations.

We do not control independent third parties and are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

17. Automated decision-making

We do not ordinarily use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

If this changes, we will provide the information and protections required by applicable law.

18. Changes to this Privacy Policy

We may update this Privacy Policy to reflect legal, technical or operational changes. The revised version will be published with an updated revision date.

Where required, we will provide additional notice or obtain consent before materially changing how personal information is used.

19. Contact and complaints

For questions, complaints or requests concerning personal information, contact:

Global Peace 2030
Email: info@gp2030.org
Website: www.gp2030.org

You may also submit a complaint to the privacy or data-protection authority responsible for your country or region.