Foundation Governance & Transparency

Privacy Policy

Last updated: 01/02/2026

Scriptony Foundation Ltd (“we”, “us”, or “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our websites, platforms, and services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Scriptony Foundation Ltd
United Kingdom – Company Limited by Guarantee
Non-profit, open-source organisation

We are the data controller for personal data collected through our services.

2. What Data We Collect

We only collect data that is necessary to operate our services.

a) Information you provide

• Name or username

• Email address

• Account details (when you register)

• Content you submit on community platforms (e.g. Decidim posts, comments)

• Messages sent via contact forms or email

b) Technical and usage data

• IP address

• Browser type and version

• Operating system

• Pages visited and usage statistics

This data is collected using standard server logs and privacy-respecting analytics (where applicable).

3. How We Use Your Data

We use personal data to:

• Provide and operate our services

• Manage user accounts and authentication

• Enable participation in community platforms

• Respond to enquiries and support requests

• Improve security, stability, and performance

• Meet legal and regulatory obligations

We do not sell personal data and do not use it for advertising or profiling.

4. Legal Basis for Processing

Under UK GDPR, we process personal data based on:

• Consent – when you voluntarily provide data

• Contract – to provide requested services

• Legitimate interests – operating and securing our platforms

• Legal obligation – where required by law

5. Donations and Payments

If you make a donation:

• Payment processing is handled by third-party providers (e.g. Stripe, PayPal)

• We do not store full payment card details

• We only receive limited information necessary to record the donation

Third-party payment providers have their own privacy policies.

6. Cookies and Similar Technologies

We use:

• Essential cookies required for site functionality

• Security and session cookies

We do not use tracking cookies for advertising.

Where required, cookie consent is requested.
For details, see our Cookie Policy (if published separately).

7. Data Sharing

We may share limited data only with:

• Infrastructure providers (hosting, email, security)

• Payment processors (for donations)

• Legal or regulatory authorities if required by law

All third parties are required to protect personal data and use it only for agreed purposes.

8. International Data Transfers

Where data is processed outside the UK:

• We ensure appropriate safeguards are in place

• Transfers comply with UK GDPR requirements

9. Data Retention

We keep personal data:

• Only as long as necessary for its purpose

• To meet legal, accounting, or reporting requirements

You may request deletion of your data where legally permitted.

10. Your Rights

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact us via our website.

11. Security

We take appropriate technical and organisational measures to protect personal data, including:

• Secure servers and encryption where applicable

• Access controls and least-privilege policies

• Regular updates and monitoring

However, no system is 100% secure.

12. Children’s Privacy

Our services are not intended for children under 16 without parental consent.
We do not knowingly collect data from children without appropriate consent.

13. Changes to This Policy

We may update this Privacy Policy from time to time.
Changes will be published on this page with an updated date.

14. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):

https://www.ico.org.uk

15. Contact Us

For privacy-related questions or requests, please contact us via our official website.