ALLFED Institute is a nonprofit corporation and tax-exempt 501(c)(3) public charity in the USA (EIN# 83-1717756).

ALLFED is committed to protecting the personal data of individuals in accordance with the General Data Protection Regulation (GDPR). This privacy policy explains how we collect, use, and protect personal data in the course of our activities.

Our contact details
Please contact us via the “Contact Us” form on our website.

The type of personal information we collect

We collect personal data from individuals who interact with us, such as through our website, newsletters, and CRM system. The personal data that we collect may include names, addresses, email addresses, and other contact details for the purpose of developing a response network and undertaking funding raising activities. Additionally, we collect further personal information from our contractors and collaborators.

How we get the personal information and why we have it

We collect personal data through online forms, cookies, and other means. We obtain consent from individuals to collect their personal data and we only use it for the purposes specified in this privacy policy.

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To provide updates on our research and preparedness work through our newsletter
• To enable collaboration or research
• To develop alliances of relevant organizations to facilitate preparedness work
• To facilitate and process charitable donations 
• To thank our donors and supporters
• To ensure the well-being of our team.

We also receive personal information indirectly, from the following sources in the following scenarios:

• X Handle
• LinkedIn URL/LinkedIn ID 
• Website
• Job Title
• Company
• Country of Residence 

We use the information that you have given us in order to: 

• Provide updates on our research and preparedness work through our newsletter
• Enable collaboration or research
• Develop alliances of relevant organizations to facilitate preparedness work
• Facilitate and process charitable donations 
• Thank our donors and supporters
• Ensure the well-being of our team.

We may share this information with regional ALLFED entities, presently consisting of:

• ALLFED UK (UK Charity Commission number: 1201536)
• ALLFED Australia (ABN: 77 665 711 151)

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are: 

• Legitimate Intent. 

• Your consent. You are able to remove your consent at any time. You can do this by contacting us at the details provided above.

How we store your personal information:

We retain personal data for no longer than is necessary for the purposes specified in this privacy policy. We protect the personal data that we collect through the use of encryption, firewalls, and other security technologies.

We keep identity and contact data, including name, address, email address, contact number, affiliated organization information (e.g., company y name, job title and function, business information), and digital asset interaction information (e.g., newsletters opened) for the purpose of achieving the organization mission. We will periodically request your consent to retain your data and will dispose of your personal information if requested by the specified organization policy.

ALLFED stores data in the USA, EU, and Australia.

Your data protection rights:

Under data protection law, you have rights including:

Your right of access: you have the right to ask us for copies of your personal information as a Subject Access Request (SAR). 

Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing: you have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability: you have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights.

If you make a request, we have one month to respond to you.

Please contact us at the contact details provided above if you wish to make a request.

Our efforts to ensure compliance:

In order to ensure that we comply with the GDPR, we have put in place the following measures:

1. We have implemented appropriate technical and organizational measures to protect the personal data that we collect, including the use of encryption and firewalls.
2. We have appointed a data coordinator who is responsible for the management of ALLFED’s data, including overseeing our compliance with the GDPR and answering any questions or concerns that individuals may have about our handling of personal data.
3. We have trained our team on the requirements of the GDPR and on their responsibilities in relation to the handling of personal data.
4. We regularly train our team on maintaining appropriate standards of data access and security and have implemented data classification across the organization to identify sensitive data.
5. We have incorporated GDPR and data protection clauses in our contracts.
6. We have put in place procedures to regularly review and assess our compliance with the GDPR, including conducting periodic audits and monitoring our handling of personal data.
7. We have put in place procedures to handle any complaints or requests from individuals in relation to their personal data, including providing a dedicated contact for individuals to raise any concerns or questions.
8. We will cooperate with the relevant supervisory authorities to ensure that we comply with the GDPR and to resolve any issues that may arise in relation to our handling of personal data.

We are committed to protecting the personal data of individuals and to complying with the GDPR. If you have any questions or concerns about this privacy policy or how we handle personal data, please contact us using the details provided above.

How to complain:

If you have any questions or concerns about this privacy policy or how we handle personal data, please contact us through the contact us form. We will do our best to address your concerns and assist you in exercising your rights under the GDPR.

If you are unhappy with how we have used your data, you can complain to the relevant authorities: for ALLFED USA, this is the Federal Trade Commission, and for ALLFED UK, this is the ICO.

Updates:

We may update this privacy policy from time to time in order to reflect changes in our practices or to comply with legal requirements. We will post any updates on our website and we encourage individuals to check back regularly to stay informed about how we collect, use, and protect personal data.

This privacy policy was last updated on Aug 1, 2023.