Policies
Privacy Policy
What personal data the coalition collects through this site, why it collects it, how long it keeps it, and the rights every visitor holds over it.
The coalition collects as little personal data as its work allows, uses it only for the purpose it was given, and never sells it. This policy explains — in plain language, because privacy notices written to be skipped protect nobody — what is collected through this website, on what legal basis, for how long, and how to exercise the rights that attach to it.
What we collect, and why
The site collects personal data in exactly three situations: when a visitor submits an allocation inquiry, when a candidate applies for a position, and when a visitor writes to a published contact address.
An allocation inquiry captures the contact details, institutional affiliation, and mandate description the submitter provides. An employment application captures the professional history the candidate chooses to share. Correspondence captures whatever the writer includes. In every case the visitor decides what to submit; no form on this site requires more than the minimum needed to respond.
Browsing the site anonymously requires no account and submits no personal data. Server logs record IP addresses and request metadata for security and capacity management, and are rotated on a fixed schedule.
What we do not do
The coalition does not sell personal data, does not trade it with third parties for marketing, does not profile visitors for advertising, and does not run third-party advertising trackers on this site.
- No sale or rental of personal data — to anyone, for any consideration.
- No advertising trackers, no cross-site profiling, no data brokers.
- No automated decisions with legal effect are made about any visitor.
- No collection from children: the site’s services are directed at professionals and institutions.
Legal basis and retention
Data submitted through forms is processed on the basis of the submitter’s consent and the coalition’s legitimate interest in answering what it is asked. Security logging is processed on the basis of legitimate interest in protecting the platform.
Allocation inquiries are retained for the life of the resulting engagement, or twenty-four months where no engagement results. Employment applications are retained for twelve months after the close of the relevant process unless the candidate asks for earlier deletion or consents to a longer talent-pool retention. Server logs are retained for ninety days.
Sharing and processors
Personal data is shared only with the service providers that operate this site’s infrastructure — hosting, email delivery, and application processing — under contracts that bind them to confidentiality and restrict use to the coalition’s instructions.
Data may cross borders in the course of that processing; where it does, the coalition relies on recognised transfer safeguards. Data is disclosed to public authorities only where a valid legal obligation compels it, and the coalition discloses the existence of such requests in its transparency reporting to the extent the law permits.
Your rights
Every person whose data the coalition holds may request access to it, correction of it, deletion of it, restriction of its processing, or a portable copy of it, and may withdraw consent at any time without affecting prior lawful processing.
Requests go to the privacy office through the contact page and are answered within thirty days. If the answer does not satisfy, the complaint escalates first to the coalition’s data protection lead and then to the supervisory authority competent for the requester’s jurisdiction. The coalition does not retaliate against anyone for exercising a privacy right — ever.
Security
Personal data is protected in transit by TLS and at rest by encryption and access controls limited to the offices that need it. The security desk reviews access quarterly.
No system is impregnable, and the coalition does not pretend otherwise. In the event of a breach that risks the rights of the people affected, the coalition notifies them and the relevant authorities without undue delay, and publishes what happened once containment allows.
This policy is reviewed annually and whenever the site gains a new capability that touches personal data. The current version dates from January 2026.
Engagement