Privacy Statement
Last updated: 05/06/2026
Thank you for visiting [website] (the “Site”). The Site is operated by [SAFE Foundation] ("Foundation", "we", "us", or "our).
This privacy statement (“Privacy Statement”) sets out the basis on which any Personal Information we collect from you (“you”, “your”, or “user”), or that you provide to us, will be processed by us. By “Personal Information”, we mean any information which, either alone or in combination with other data, enables you to be directly or indirectly identified, for example your name, email address, username, contact details or any unique identifier such as an IP address, device ID or other online identifier.
Capitalized terms that are not defined in this Privacy Statement shall have the meaning ascribed in our [Terms of Service] (the “Terms”).
Please read the following carefully to understand what Personal Information we collect, how it is used and the ways it can be shared by us.
The data controller of your Personal Information is [Insert Name of not for profit].
1. Our Processing of Your Personal Information
| Purpose | Personal Information (From You) | Personal Information (From Others and Your Devices) | Legal Basis |
|---|---|---|---|
| 1 . Administer the website, system administration and detecting usage patterns (including broad demographic information for aggregated use), including developing and enhancing the Site. | N/A | IP address, browser type, access times, URL requested and referral URL | We think we can (legitimate interest) |
| Detection for troubleshooting purposes | N/A | Technical information, including the Internet protocol (IP) address used to connect your computer or other device to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform Information about your visit, including the dates and times you use the Site, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call the contact phone number provided on our Site | We think we can (legitimate interest) |
| Review your Interest Form to assess alignment with the Foundation’s mission and objectives and to conduct preliminary compliance checks, as appropriate, on a case-by-case basis | Name, Email address, organization, role, country, stakeholder category (and any other personal data you disclose in the Interest Form) | N/A | You agreed to it (consent) |
| Follow‑up communications in connection with your Interest Form, where appropriate, on a case‑by‑case basis | Name, Email address, organization, role, country, stakeholder category (and any other personal data you disclose in the Interest Form) | N/A | You agreed to it (consent) |
Purpose
- 1 . Administer the website, system administration and detecting usage patterns (including broad demographic information for aggregated use), including developing and enhancing the Site.
- Detection for troubleshooting purposes
- Review your Interest Form to assess alignment with the Foundation’s mission and objectives and to conduct preliminary compliance checks, as appropriate, on a case-by-case basis
- Follow‑up communications in connection with your Interest Form, where appropriate, on a case‑by‑case basis
Personal Information (From You)
- N/A
- N/A
- Name, Email address, organization, role, country, stakeholder category (and any other personal data you disclose in the Interest Form)
- Name, Email address, organization, role, country, stakeholder category (and any other personal data you disclose in the Interest Form)
Personal Information (From Others and Your Devices)
- IP address, browser type, access times, URL requested and referral URL
- Technical information, including the Internet protocol (IP) address used to connect your computer or other device to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform Information about your visit, including the dates and times you use the Site, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call the contact phone number provided on our Site
- N/A
- N/A
Legal Basis
- We think we can (legitimate interest)
- We think we can (legitimate interest)
- You agreed to it (consent)
- You agreed to it (consent)
2. Security and Confidentiality
The Foundation is committed to protecting your privacy. Internally, only people with a need to know Personal Information, or whose duties reasonably require access to it, are granted access to data subjects’ Personal Information. Such individuals will only process your Personal Information on our instructions and are subject to a duty of confidentiality. We audit our personal compliance regularly.
The Site’s systems and data are reviewed periodically to ensure that you are getting quality service and that leading security features are in place. We have put in place procedures to deal with any actual or suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
The Foundation takes all reasonable endeavors to protect and safeguard Personal Information. Unfortunately, the transmission of information via the Internet is not completely secure. While we do our utmost to protect your Personal Information, we cannot guarantee the security of your data transmitted to us over email or through the Site; any transmission is at your own risk. Once we have received your Personal Information, we will use strict procedures and security features to try to prevent unauthorized access, but there are protective measures you should take, as well. Do not share your Personal Information with others unless you clearly understand the purpose of their request for it and you know with whom you are dealing. Do not keep sensitive Personal Information in your e-mail inbox or on Webmail. If you are asked to assign passwords to connect you to your Personal Information, you should use a secure password and always use two-factor authentication (2FA), where available. You should change your password regularly.
3. What and with whom we share your Personal Information
3.1. With any member of our group, which means our direct or indirect affiliated entities, our governing body, and any related organizations, including their respective directors, officers, employees, contractors, agents, partners, insurers, and legal representatives.
3.2. With service providers engaged by the Foundation, to the extent necessary to operate the Website and process form submissions. Such providers process data on our behalf and in accordance with our instructions.
3.3. With selected third parties, including analytics and search engine providers that assist us in the improvement and optimization of the Website.
3.4. With third-party tools or platforms integrated with the Website.
3.5. With authorities and law enforcement agencies worldwide, either when ordered to do so or on a voluntary basis if this appears reasonable and necessary to us.
We may also disclose your personal data to third parties:
3.6. If the Foundation or substantially all of its activities are transferred to or assumed by a third party, in which case personal data held by the Foundation will be one of the transferred elements.
3.7. If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions and other agreements; or to protect the rights, property, or safety of the Foundation, its stakeholders, or others, including to defend ourselves from legal claims.
3.8. Where a submission may lead to potential engagement with the Foundation, personal data may be reviewed internally, including for compliance purposes (e.g. KYC/AML checks).
We do not currently share form submissions with third parties such as partners or Founding Members, unless this becomes necessary in the context of a specific engagement and is governed by a separate agreement.
4. Transfers
Your Personal Information will be stored in Switzerland or the European Economic Area and may be transferred worldwide.
Personal Information and other data may therefore be exported outside of the jurisdiction in which you reside. Your Personal Information may be processed and stored in a foreign country or countries. Under those circumstances, the governments, courts, law enforcement, or regulatory agencies of that country or those countries may be able to obtain access to your Personal Information through foreign laws. You need to be aware that the privacy standards of those countries may be lower than those of the jurisdiction in which you reside.
EEA data subjects. We will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Statement. All data you provide to us is stored on our secure servers. Where we transfer our data outside of the EEA, we ensure that adequate safeguards are in place. That includes, where necessary, taking steps to evaluate the risks raised by the transfers in countries that do not offer an adequate level of protection. Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Information out of the EEA.
5. Data Retention
We have data retention and deletion policies designed to retain Personal Information for no longer than necessary for the purposes set out herein or as otherwise required to meet legal or business needs. Because of those retention requirements, we might not be able to honor erasure requests.
6. Your Rights
All data subjects. You may access, verify, request the deletion of your Personal Information held by the Foundation and, where consent is the legal basis for processing of your Personal Information and subject to any legal or contractual restrictions, withdraw your consent, in each case, by a written request to the Foundation at [npo@privacy.ai] We will do our best to honor your request promptly.
EEA/Switzerland data subjects. You have several rights in relation to how we process your Personal Information. You may exercise these rights by contacting us (see details below). These include the right to:
6.1. access the Personal Information that we may hold about you;
6.2. rectify any inaccurate Personal Information that we may hold about you;
6.3. have your Personal Information erased in certain circumstances, for example, where it is no longer necessary for us to process your Personal Information to fulfill our processing purposes; or where you have exercised your right to object to the processing;
6.4. restrict the processing of your Personal Information where, for example, the information is inaccurate or it is no longer necessary for us to process such information or where you have exercised your right to object to our processing;
6.5. object to the processing of your Personal Information which may be exercised in certain circumstances, for example, where your own legitimate interests outweigh ours;
6.6. have your Personal Information ported to a new service provider if you no longer wish to use the Services. You may exercise these rights by contacting us (see details below);
6.7. when we rely on your consent to process Personal Information (form submissions), you have the right to withdraw your consent at any time.
No fee usually required
You will not have to pay a fee to access your Personal Information or to exercise any of your other rights. We may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
7. Changes to This Privacy Statement
Any changes we make to our Privacy Statement in the future will be posted on this page and, where material, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Statement.
8. Contact
Questions, comments and requests regarding this Privacy Statement should be addressed by email to […].
EEA data subjects. Should you have any concerns about how we handle your Personal Information, please contact us in the first instance by opening sending an email to […]. Alternatively, you can contact our EU/UK representative, by email […]. We will do our best to resolve your concern. You can also submit a complaint to the national supervisory authority within your jurisdiction, details of which can be found online.
Appendix
List of Third-Party Service Providers with whom Personal Information may be shared […]