Privacy Policy

1. Who is responsible for your data

2. What we process

Depending on how you interact with us, we may process:

• information you submit through contact, volunteer, donation, newsletter or other forms;
• your email address and communication history when you contact us;
• technical information needed to operate and secure the website;
• website analytics only where you have given the required consent;
• payment-related information handled by the payment provider you choose.

We do not sell personal data.

3. Why we process it

We process personal data only for specific purposes, such as responding to enquiries, reviewing volunteer applications, managing a requested subscription, receiving donations, maintaining security, improving the website with consent-based analytics, and complying with legal obligations.

The legal basis depends on the purpose and may include your consent, steps taken at your request, our legitimate interests, or a legal obligation.

4. Forms and service providers

Website forms may be processed through Tilda and routed to services we use for the relevant workflow. For example, volunteer applications are stored in a private Monday.com workspace for coordination.

Donations and payments may be processed by external providers such as Donorbox, Wise, or cryptocurrency service providers. Those providers process payment data under their own privacy terms.

If you subscribe to email updates, the email service used for that subscription processes your address for delivery and subscription management.

5. Analytics and cookies

Non-essential analytics cookies or similar technologies are not intended to run until you consent through our cookie controls. You can refuse non-essential cookies and change your choice later.

6. Retention

We keep personal data only as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution needs. Specific services may use shorter retention periods. Unmatched volunteer applications are normally kept for up to 12 months after submission or our last contact unless a volunteering relationship begins.

7. International transfers

Some service providers may process data outside the European Economic Area. Where GDPR requires safeguards for such transfers, we rely on the mechanisms provided by the relevant service provider, such as adequacy decisions or approved contractual safeguards.

8. Your rights

Where GDPR applies, you may have the right to access, correct or delete your personal data, restrict or object to processing, receive portable data, and withdraw consent at any time without affecting earlier lawful processing.

To exercise a right, contact hello@peaceful-world.org. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

9. Children

Our public website is not designed to knowingly collect personal data from children without an appropriate legal basis or, where required, valid parental or guardian involvement.

10. Changes

We update this policy when our processing or services materially change. The date below shows the current version.