PrivacyPolicy

At New World Alliances [Foundation], we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes what information we collect, how we use it, who we share it with, and the rights you have over your data, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Protection of Personal Information Act (POPIA) of South Africa, the Lei Geral de Proteção de Dados (LGPD) of Brazil, and other applicable privacy laws.

Information We Collect

We collect information you provide directly to us, such as when you create an account, make a payment, contact us, or otherwise communicate with us. This may include your name, email address, phone number, postal address, country, date of birth, identification documents, photographs, and payment information (processed by Stripe; we do not store full card numbers). We also collect information automatically when you use our website, including IP address, browser type, pages visited, and usage data, subject to your cookie consent.

How We Use Your Information

We use the information we collect to: (a) register and verify Peace Ambassadors; (b) process membership payments and issue receipts; (c) provide, maintain, and improve our services; (d) send transactional notices (payment confirmations, security alerts, policy updates); (e) send promotional communications where you have not opted out; (f) prevent fraud, abuse, and security incidents; (g) comply with legal obligations including tax record-keeping; and (h) cross-verify ambassador status across affiliated Foundation services (the Portal and Trade Platform).

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information under the following legal bases: (a) Contract — processing necessary to fulfill our obligations under the membership agreement; (b) Consent — for receiving promotional communications or processing certain special-category data; (c) Legal Obligation — for compliance with tax, anti-money-laundering, and other applicable laws; (d) Legitimate Interests — for fraud prevention, network security, and service improvement. You may object to processing based on legitimate interests by contacting privacy@newworldalliances.foundation.

International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other jurisdictions where our service providers are located. When we transfer personal data from the EEA, UK, or Switzerland to countries that have not been deemed to provide an 'adequate' level of protection, we do so using Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement, or other appropriate safeguards. By using our services, you acknowledge and consent to these international transfers.

Data Retention

We retain personal information for as long as your account is active or as necessary to provide our services. After account closure, we retain: (a) financial transaction records — 7 years (tax law); (b) identification documents — duration of active membership plus 3 years, or longer if required by law; (c) ambassador profile data — until you request deletion, except where retention is legally required; (d) ambassador photos — duration of active membership; (e) forum and community content — until you delete it; (f) website access logs — 12 months; (g) security and audit logs — 24 months. When retention periods expire, data is either deleted or anonymized so it can no longer be associated with you.

Third-Party Sharing and Sub-Processors

We share personal information with the following categories of third parties: (a) Payment Processors — Stripe (payment processing, fraud detection); (b) Cloud Infrastructure — providers hosting our application and member data; (c) Email Service Providers — for transactional and promotional delivery; (d) Analytics Providers — only after cookie consent, for aggregated statistics; (e) Affiliated Foundation Services — the New World Alliances [Foundation] Portal and New World Alliances [Foundation] Trade Platform, for ambassador verification and treaty management; (f) Legal and Regulatory Authorities — where required by law, court order, or to protect the Foundation's rights and safety. We do not sell your personal information. A current list of sub-processors is available on request.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies: (a) Strictly Necessary — required for authentication, security, and core website function; cannot be disabled; (b) Functional — remember preferences like language selection; (c) Analytics — set only after consent via our cookie banner, for aggregate usage statistics; (d) Marketing — set only after explicit consent, to measure campaign effectiveness. Our cookie banner lets you accept, reject, or selectively manage categories at any time. Most browsers allow you to refuse cookies; however, strictly necessary cookies are required for the site to function.

Automated Decision-Making and Profiling

We use limited automated processing for fraud detection, payment risk scoring (via Stripe), and email bounce handling. We do not use automated decision-making that produces legal or similarly significant effects on you without your explicit consent or other lawful basis. You have the right to request human review of any automated decision that significantly affects you.

Your Rights

You have the right to access, correct, or delete your personal information. You may also opt out of receiving promotional communications from us. You can export your data or request erasure through your account settings or by contacting privacy@newworldalliances.foundation. We respond to verified requests within 30 days. Jurisdiction-specific rights (GDPR, CCPA, POPIA, LGPD) are detailed in the sections below.

Your Rights Under the GDPR (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the right to: (a) Access — request a copy of your personal data; (b) Rectification — request correction of inaccurate or incomplete data; (c) Erasure ('Right to be Forgotten') — request deletion, subject to legal retention requirements; (d) Restriction of Processing — request we limit processing in certain circumstances; (e) Data Portability — receive your data in a structured, machine-readable format; (f) Object — to processing based on legitimate interests or for direct marketing; (g) No Automated Decisions — not to be subject to decisions based solely on automated processing producing legal or similarly significant effects. To exercise these rights, contact privacy@newworldalliances.foundation. We respond within 30 days. You may also lodge a complaint with your local data protection authority.

Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, the CCPA and CPRA grant you the right to: (a) Know — request disclosure of the categories and specific pieces of personal information we collect, the sources, purposes, and third parties with whom we share it; (b) Delete — request deletion of your personal information, subject to legal exceptions; (c) Opt-Out of Sale or Sharing — we do not sell personal information; you may opt out of any sharing for cross-context behavioral advertising via our cookie banner; (d) Limit Use of Sensitive Personal Information — we limit use of sensitive data to what is necessary; (e) Non-Discrimination — we will not discriminate against you for exercising these rights. To exercise CCPA rights, contact privacy@newworldalliances.foundation. We verify requests within 45 days.

Your Rights Under POPIA (South Africa)

If you are located in South Africa, the Protection of Personal Information Act (POPIA) grants you the right to: (a) be notified when your personal information is collected; (b) access, correct, or delete your personal information; (c) object to processing for direct marketing by third parties; (d) withdraw consent at any time where processing is based on consent; (e) lodge a complaint with the Information Regulator (inforegulator.org.za). To exercise these rights, contact our Information Officer at privacy@newworldalliances.foundation.

Your Rights Under LGPD (Brazil)

If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) grants you rights regarding: confirmation of processing, access, correction, anonymization, blocking, deletion, portability, and withdrawal of consent. You may also request information about the possibility of refusing consent and the consequences of doing so. To exercise LGPD rights, contact privacy@newworldalliances.foundation. You may also lodge a complaint with the Brazilian Data Protection Authority (ANPD).

Children's Privacy

Our services are not directed at children under 16, and we do not knowingly collect personal information from children under 16. Peace Ambassador registrations for family members under 18 must be completed by a parent or legal guardian. If you believe we have collected personal information from a child under 16 without verifiable parental consent, contact privacy@newworldalliances.foundation to request deletion. We will delete such information promptly to comply with COPPA, GDPR Article 8, and similar laws.

Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify affected individuals and the relevant supervisory authority without undue delay, and in any case within 72 hours of becoming aware of the breach, as required by the GDPR. For breaches affecting California, South African, or Brazilian residents, we will notify affected individuals as required by applicable law.

Data Protection Officer and Privacy Contact

For privacy-related questions, requests, or complaints, contact our Data Protection Officer / Privacy Team at privacy@newworldalliances.foundation or by mail to the New World Alliances [Foundation], Attn: Privacy Team. We aim to respond to all inquiries within 30 days. If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority.

Contact Us

If you have any questions about this Privacy Policy, please contact us through our website or email us at privacy@newworldalliances.foundation