Earth Impact AllianceAn initiative of SmartLife Foundation

Legal

Privacy Policy

We keep this simple: we collect only what we need to reply to you, run our programmes and send you updates you have asked for. This page explains what that means in practice.

Last updated 14 October 2026

Who we are

Earth Impact Alliance, an initiative of SmartLife Foundation, Office 204, Farooqi Gym Building, Al Quoz, Dubai, United Arab Emirates, is responsible for the personal data collected through this website (earthimpactalliance.org). We are the "data controller" for that data.

If you have any question about this policy or about your data, email us at admin@earthimpactalliance.org.

What data we collect

We only collect personal data that you give us directly, through your account and these forms:

  • Member account: your name and email address, and a password you choose (or, if you sign in with Google, the name and email address Google shares with us). Accounts are managed by our sign-in service, Keycloak, which we run ourselves.
  • Impact Check results: the answers you give, the survey version you answered, your score and the date, saved to your account so you can see your progress over time.
  • Payments: when you pay us for a programme or event, our team records the amount, date, payment method, a reference and a description so we can issue you an invoice.
  • Contact form: your name, email address, the reason for your message and the message itself.
  • Volunteer sign-up: your name, email address, phone number (optional), the areas you are interested in, your availability and anything you add in the message box.
  • Sustainable Families interest form: your name, email address, phone number (optional), your community and your role (family, community leader or business).
  • SDG Awards nomination: your name and email address, plus the nominee's name, the type of nominee, the sustainability pillar and your reason for nominating them.
  • Newsletter sign-up: your email address and where on the site you signed up.

With every submission we also record the date and time you gave consent, the type of browser you used, and a one-way hash of your internet address. The hash uses a secret and a value that changes daily, so it cannot be turned back into your address. We use it only to limit spam and abuse.

We do not ask for, and do not want, sensitive data such as health, religious or financial information. Please do not include it in free-text fields.

How we use your data

  • To run your account: to let you sign in, save your Impact Check results and show you your scores, trend and invoices.
  • To reply to your message or application and, where you ask us to, to follow up with you.
  • To run our programmes: for example, to let you know when Sustainable Families reaches your community, to organise volunteers, or to process an awards nomination.
  • To send you our newsletter, only if you ticked the box asking for it. You can stop at any time (see below).
  • To keep the website secure and free of spam, using rate limits and a bot check.
  • To understand how the Impact Check is used, both per member (so our team can support you and see how the programme is working) and in aggregate, so we can improve the questions.
  • To keep records of payments we receive, which we must do for accounting.

We rely on your consent for the newsletter and the optional forms, on our agreement with you (the account you create) for your account, results and invoices, on our legal obligations for payment records, and on our legitimate interest in running a safe website for the security measures. You can withdraw your consent at any time by emailing us or asking us to delete your account.

We never sell personal data, and we do not use it for advertising.

Impact Check

You need an account to take the Impact Check. When you finish, your answers are sent to us and scored; we store the answers, the version of the questions you were shown, your score and the date against your account. This is what lets you see your history and how your score changes over time.

Our administrators can see the results of every member, including the answers, in order to run the programme, support members and report on it. They can export results as spreadsheets for that purpose; exports are handled with the same care as the rest of your data.

If you choose to share your result, the link you share contains only your overall score and result band, not your answers.

Separately, and only when this feature is switched on, the site may also send us an anonymous summary of each completed check: the overall score, the result band and the score for each category, with no identifier. We use these summaries to see which habits people find hardest and to improve the questions.

If you tick the box on the results page to receive tips by email, your email address is handled as a newsletter sign-up as described in this policy.

Newsletter and emails

When you subscribe we send you a welcome email, and afterwards occasional updates, ideas and ways to take action, usually no more than once a month.

You can unsubscribe at any time by using the link in any newsletter or by emailing admin@earthimpactalliance.org. We will remove your address from the list promptly.

When you submit a form we also send you a confirmation email, and we send a copy of your submission to our team inbox so that we can respond.

Who we share data with

We share personal data only with service providers that help us run the website, and only as far as needed for that purpose:

  • Our hosting provider, which stores the website, its database and our sign-in service (Keycloak).
  • Google, only if you choose to sign in with your Google account. Google tells us your name and email address; we never receive your Google password, and Google's own privacy policy applies to what Google records about the sign-in.
  • Our email delivery provider, which sends account verification, confirmation and newsletter emails on our behalf.
  • Cloudflare, whose Turnstile bot check runs on our forms. It processes technical signals from your browser to tell people from automated scripts.

Where a programme is run together with a partner organisation, for example a community that takes part in Sustainable Families, we only share your details with that partner if you have asked to take part in that programme, and we tell you at the point you sign up.

We may also disclose data where the law requires it.

Cookies and analytics

This website does not set any cookies of its own and does not use advertising or cross-site tracking.

We do not currently run website analytics. If we introduce a privacy-friendly analytics tool in future, we will update this page before it goes live and explain what it collects.

Embedded content from other services, such as the map on our contact page, may set its own cookies under that service's privacy policy.

How long we keep your data

  • Your account, Impact Check results and invoices: for as long as you keep your account. Ask us to delete your account and we remove your results with it; invoices are kept for as long as accounting rules require, no longer linked to a live account.
  • Contact messages: until we have dealt with your request, and for up to 12 months afterwards in case you come back to us.
  • Volunteer, interest and nomination submissions: for as long as the programme or awards cycle they relate to is active, and for up to 24 months after our last contact with you.
  • Newsletter addresses: until you unsubscribe.
  • Anonymous Impact Check summaries: indefinitely, because they contain no personal data.

You can ask us to delete your data sooner at any time.

How we protect your data

The website is served over an encrypted connection. Passwords are held only by our sign-in service, in hashed form, and we never see them. Member data is stored in a database that only our team can access, and the admin area is restricted to staff accounts with the administrator role. We store a hashed internet address instead of the real one for form submissions, and we limit how many requests a single visitor can make.

No website can be completely secure. If we ever become aware of a breach affecting your data we will tell you and the relevant authority as the law requires.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other laws that may apply to you, you have the right to:

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct data that is wrong or incomplete.
  • Ask us to delete your data, or to stop using it, including deleting your account and your Impact Check history.
  • Withdraw your consent at any time, without affecting anything done before you withdrew it.
  • Complain to the relevant data protection authority if you think we have handled your data unlawfully.

To exercise any of these rights, email admin@earthimpactalliance.org. We may need to check your identity first. We aim to respond within 30 days.

Children

Our programmes involve families, but this website's forms are intended for adults. If you are under 18, please ask a parent or guardian to get in touch for you. We do not knowingly collect personal data from children through this website; if we learn that we have, we will delete it.

Changes to this policy

We will update this page when our practices change, and change the date at the top. If a change is significant, for example starting to use analytics, we will say so clearly on this page.

Contact

Questions, requests or concerns about your data: email admin@earthimpactalliance.org, or write to Earth Impact Alliance, an initiative of SmartLife Foundation, Office 204, Farooqi Gym Building, Al Quoz, Dubai, United Arab Emirates.

Change is stronger together.

Whether you have an hour or a weekend, there's a place for you in the alliance.