NRGI strives to comply with all applicable privacy laws in the jurisdictions in which it operates. This includes the U.K. General Data Protection Regulation and the Data Protection Act.
NRGI may collect information about you
NRGI collects information from you in three ways: directly from you during your ongoing relationship with NRGI, from publicly available sources, and/or from third parties providing NRGI with services or acting on its behalf. The amount of data NRGI collect depends on the frequency and nature of your interactions with NRGI. NRGI collects this information to better interact with you and to further its mission to improve natural resource governance.
NRGI may collect and store the following on paper or electronically:
- your name
- present and past professional and educational affiliations and roles
- mail addresses, electronic addresses, and/or telephone numbers
- topics about which you wish to interact with NRGI
- the type, form, location, and date of your interactions with NRGI
- in a public forum or with your consent, your photograph
- any correspondence you have with NRGI
- publicly available, public interest information about you
- your publicly available social media postings such as tweets or Facebook posts or those made via direct message to NRGI personnel
- other material and/or speeches authored or published by you
In order to understand how you interact with the organization NRGI may collect and store the following when you contact NRGI electronically:
- your email address and subscription preferences when you agree to receive emails from NRGI
- how you use NRGI’s emails—for example whether you open them and which links you click on
- your IP address and which version of a web browser you used
- information on how you use NRGI’s sites, using cookies and similar technologies such as pixels, tags, web beacons, and other identifiers
Legitimate interest. NRGI holds professional contact data for individuals it deems to have a legitimate interest in NRGI’s work and outputs, including individuals who may not have consented to be contacted.
Who can use your information
Your data can be viewed by authorized people in NRGI to:
- improve the site by monitoring how you use it
- gather feedback to improve NRGI’s services, for example email alerts
- respond to any feedback you send NRGI upon request
- provide you with the services, event invitations, newsletters, and information about NRGI which you request by subscribing to NRGI’s updates
- audit the downloading of data from NRGI’s sites
Where and how your data are stored
NRGI stores your data on secure cloud-based servers operated by third-party contractors who are contractually obligated to keep the information secure and not to share it with others. By submitting your personal data and asking us to keep you informed in a way which requires us to maintain your information, you agree to this.
One of the contractors NRGI uses is MailChimp for email updates. MailChimp has staff based outside the European Economic Area (EEA), and stores your data in the U.S. As a data processor on behalf of NRGI, MailChimp will use your information to send you email updates if you request them. NRGI, through MailChimp and using its own databases, maintains a record of when you requested to be contacted and for what purposes.
Sending information over the internet is generally not completely secure, and NRGI cannot guarantee the security of your data while it’s in transit. Any data you send over the internet is at your own risk.
NRGI has procedures and security features in place to keep your data secure once NRGI receives it.
Disclosing your information
NRGI treats your information with respect. NRGI won’t share your information with any other organizations for marketing, market research, or commercial purposes, and NRGI doesn’t pass on your details to other websites except as part of its own internal processing. NRGI may pass on your personal information if it is legally compelled to do so.
How long NRGI keeps your data
NRGI stores, processes, and retains your data only as long as it is deemed relevant to fulfilling your requests or, in the case of public interest or research, relevant to NRGI’s mission. You may instruct NRGI to delete your information that is not publicly available/public interest at any time as detailed elsewhere in this policy. NRGI may also keep a record of your request for deletion, but not the information itself, in order to ensure NRGI does not re-collect or otherwise process such information in the future.
You can find out what information NRGI holds about you, and ask NRGI not to use any of the information it collects.
If you’ve signed up for email updates, you can unsubscribe at any time. There is an unsubscribe option at the bottom of every email update. You can also ask NRGI to amend or delete the information NRGI holds about you. Contact details are at the end of this policy.
Changes to this policy
This policy may be revised in order to comply with regulatory or legal requirements, to make it clearer, or to improve NRGI’s practices. The current policy will be kept up to date here and can always be obtained by contacting NRGI directly.
Last updated 23 May 2018