Privacy Policy

1. Who is responsible for your data

2. What we process

Depending on how you interact with us, we may process:

• information you submit through contact, volunteer, donation, newsletter or other forms;
• your email address and communication history when you contact us;
• technical information needed to operate and secure the website;
• aggregate website-usage information collected through privacy-preserving analytics that does not use analytics cookies or persistent visitor identifiers;
• separately, optional analytics information where you choose to allow consent-based analytics;
• payment-related information handled by the payment provider you choose.

We do not sell personal data.

3. Why we process it

We process personal data only for specific purposes, such as responding to enquiries, reviewing volunteer applications, managing a requested subscription, receiving donations, maintaining security, understanding aggregate website use through privacy-preserving measurement, improving the website with consent-based optional analytics, and complying with legal obligations.

The legal basis depends on the purpose and may include your consent, steps taken at your request, our legitimate interests, or a legal obligation.

4. Forms and service providers

The volunteer application form is provided by monday.com WorkForms. Applications are stored in a private monday.com workspace used for volunteer coordination.

Donations and payments are processed by the provider you choose, such as Stripe for card payments and subscription management, Wise for bank transfers, or cryptocurrency service providers. Those providers process payment data under their own privacy terms.

If you subscribe to email updates, the email service used for that subscription processes your address for delivery and subscription management.

5. Analytics and cookies

We use Simple Analytics for limited aggregate site measurement. Our implementation does not use analytics cookies, localStorage identifiers, or Peaceful World custom-event forwarding. It measures page-level usage such as viewed paths, referral sources, campaign UTMs, broad country information, and general device/browser categories.

Optional analytics such as Google Analytics remains separate and consent-based. Non-essential analytics cookies or similar technologies are not intended to run until you allow them through our cookie controls. You can refuse or later withdraw that optional consent.

6. Retention

We keep personal data only as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution needs. Specific services may use shorter retention periods. Unmatched volunteer applications are normally kept for up to 12 months after submission or our last contact unless a volunteering relationship begins.

7. International transfers

Some service providers may process data outside the European Economic Area. Where GDPR requires safeguards for such transfers, we rely on the mechanisms provided by the relevant service provider, such as adequacy decisions or approved contractual safeguards.

8. Your rights

Where GDPR applies, you may have the right to access, correct or delete your personal data, restrict or object to processing, receive portable data, and withdraw consent at any time without affecting earlier lawful processing.

To exercise a right, contact hello@peaceful-world.org. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

9. Children

Our public website is not designed to knowingly collect personal data from children without an appropriate legal basis or, where required, valid parental or guardian involvement.

10. Changes

We update this policy when our processing or services materially change. The date below shows the current version.