Privacy policy
Your privacy matters to us. We are committed to handling your personal data with care, ensuring transparency, security, and compliance with applicable regulations. This policy outlines how we collect, use, and protect your information.
Your data is safe with us
The Inner Foundation (“we”, “our”, “us”) is the data controller responsible for processing your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
How we collect and use your data
We collect personal information when you interact with us — for example, by submitting a form on our website, engaging with us via email, participating in our initiatives, or connecting with us through professional channels.
We may process the following categories of personal data:
- Name and contact information
- Organizational affiliation and professional role
- Information you provide in forms, applications, or emails
- Website interaction data (via analytics tools)
- LinkedIn Page–level analytics (aggregated and non-identifiable)
Why we process your data
We process personal data based on legitimate interest, consent, or contractual necessity, including to:
- Manage relationships with partners, grantees, applicants, and stakeholders
- Respond to inquiries
- Share updates or information you requested
- Improve our digital communications and reporting
- Analyse engagement with our LinkedIn Company Page using aggregated, non-identifiable data retrieved via LinkedIn’s Pages Data Portability API
How we store and protect your data
Your personal information is handled securely and accessed only by The Inner Foundation and trusted service providers who act as data processors on our behalf, including:
- Affinity (CRM system) – Affinity’s Privacy Policy
- Typeform (for form submissions) – Typeform’s Privacy Policy
- WordPress (our website platform) – WordPress’ Privacy Policy
- Klingit (our technical partner)
- LinkedIn – for aggregated, non-personal analytics from our LinkedIn Company Page
All processors operate under GDPR-compliant terms and implement appropriate technical and organizational security measures.
We retain personal data only for as long as necessary to fulfil the purpose it was collected for, unless a longer retention period is required by law. Unless otherwise stated:
- Website and inquiry-related data may be stored for up to six (6) months
- Contact and relationship data stored in Affinity may be retained for up to two (2) years after last interaction
- Applicant and grantee data may be retained according to legal or operational requirements
We regularly review and delete personal data that is no longer needed.
Your rights under GDPR
You have the right to:
- Access – Request a copy of your personal data
- Rectification – Correct inaccurate or incomplete information
- Erasure – Request deletion of your data
- Restriction – Limit how we process your data
- Portability – Receive your data in a structured, commonly used format
- Objection – Object to processing based on legitimate interest
To exercise any of these rights, please contact us at admin@theinnerfoundation.org. We will respond as promptly as possible in accordance with applicable regulations.
Policy updates
We may update this policy from time to time to reflect legal or operational changes. Please check this page regularly for the latest version.