familyfedie-website/src/content/pages/privacy.html

<div id="post-privacy" class="page type-page status-publish hentry">
  <h1 class="entry-title">Privacy and Cookie Notice</h1>

  <div class="entry-content privacy-notice">
    <p class="notice-updated">Last updated: 27 July 2026</p>

    <div class="notice-summary">
      <p>
        This notice explains how Family Federation For World Peace and Unification uses personal data when you
        visit familyfed.ie, contact us, or interact with content supplied by another service.
      </p>
    </div>

    <h2>Who we are</h2>
    <p>
      Family Federation For World Peace and Unification is the controller of personal data described in this
      notice. We are an Irish registered charity, RCN 20010195 and CHY 6071.
    </p>
    <p>
      Our address is 19 North Great Georges Street, Dublin 1, Ireland. For privacy questions or to exercise your
      data protection rights, email <a href="mailto:info@familyfed.ie">info@familyfed.ie</a>.
    </p>

    <h2>Information we collect and why</h2>

    <h3>Contact enquiries</h3>
    <p>
      If you use our contact form or email us, we receive the name, email address, topic, message and other
      information you choose to provide. We use this information to read, route, respond to and keep an
      appropriate record of your enquiry.
    </p>
    <p>
      Our lawful basis is normally our legitimate interest in answering enquiries and administering the
      organisation. Where your request concerns a service or arrangement you may enter into with us, processing
      may also be necessary to take steps at your request before entering into that arrangement.
    </p>

    <h3>Sensitive information</h3>
    <p>
      We do not ask you to state your religious beliefs or provide other special-category information in the
      contact form. Please do not include sensitive information unless it is necessary for us to respond. Where
      an enquiry does contain special-category information, we limit its use to the enquiry and apply an
      appropriate condition under Article 9 of the GDPR, including explicit consent or the legitimate activities
      of a not-for-profit body with a religious aim, where applicable.
    </p>

    <h3>Website delivery, security and logs</h3>
    <p>
      When you visit the site, our hosting and network provider Cloudflare processes technical request
      information needed to deliver and protect the site. This may include an IP address, date and time, requested
      page, browser or device information, referring page and security information. We use this processing for
      our legitimate interests in providing a secure, reliable website and preventing abuse.
    </p>

    <h3>Website performance information</h3>
    <p>
      We use Cloudflare Web Analytics to understand page use and technical performance. Cloudflare states that
      this service does not use cookies, local storage or cross-site tracking to collect its usage metrics.
      Reports available to us are aggregated.
    </p>

    <h3>Embedded YouTube videos</h3>
    <p>
      The Videos and Founders pages contain players provided by YouTube, a Google service. When a page containing
      a player loads, your browser connects to YouTube. Google may receive technical information such as your IP
      address, device and browser details, the page containing the player and identifiers associated with your
      browser or Google account. Google may use cookies or similar technologies for functionality, security,
      analytics, personalisation and advertising according to your Google settings.
    </p>
    <p>
      You can find further information in
      <a href="https://policies.google.com/privacy" rel="noopener noreferrer">Google's Privacy Policy</a>.
    </p>

    <h2>Service providers and international transfers</h2>
    <p>We use the following providers in operating the website:</p>
    <ul>
      <li>
        <strong>Formspree, Inc.</strong> receives and stores contact-form submissions and sends notifications to
        our authorised email recipients. Formspree hosts its service on Amazon Web Services in the United States
        and states that it relies on the European Commission's Standard Contractual Clauses for transfers as a
        processor.
      </li>
      <li>
        <strong>Cloudflare, Inc.</strong> provides content delivery, security, network reporting and website
        performance analytics. Information may be processed outside the European Economic Area subject to
        applicable transfer safeguards.
      </li>
      <li>
        <strong>Google/YouTube.</strong> provides embedded video players and may process information outside the
        European Economic Area under Google's applicable transfer arrangements.
      </li>
    </ul>
    <p>
      We also use email and technical service providers where necessary to operate the organisation. We require
      processors acting for us to protect personal data and process it only under appropriate instructions and
      contractual terms.
    </p>

    <h2>How long we keep information</h2>
    <p>
      Contact-form submissions and related correspondence are normally kept for no longer than 24 months after
      the last meaningful contact. We may delete routine enquiries sooner. We may keep information longer where
      necessary to meet a legal obligation, resolve a dispute, protect legal rights or retain an appropriate
      organisational record. Security and technical logs are kept only for the period reasonably required for
      security, troubleshooting and service administration.
    </p>

    <h2 id="cookies">Cookie Notice</h2>
    <p>
      Cookies are small pieces of information stored on or read from your device. Similar technologies include
      local storage, pixels and identifiers used by embedded services.
    </p>

    <table>
      <thead>
        <tr>
          <th scope="col">Provider or technology</th>
          <th scope="col">Purpose</th>
          <th scope="col">When it is used</th>
        </tr>
      </thead>
      <tbody>
        <tr>
          <td data-label="Provider or technology">Familyfed.ie</td>
          <td data-label="Purpose">
            The public site does not currently set first-party advertising or marketing cookies.
          </td>
          <td data-label="When it is used">No first-party advertising or marketing cookie is set by us.</td>
        </tr>
        <tr>
          <td data-label="Provider or technology">Cloudflare security technologies</td>
          <td data-label="Purpose">
            Protecting the site, managing traffic, detecting malicious activity and maintaining network
            reliability. Cloudflare may set strictly necessary cookies when a security feature requires them.
          </td>
          <td data-label="When it is used">Only when required by the applicable security or network feature.</td>
        </tr>
        <tr>
          <td data-label="Provider or technology">Cloudflare Web Analytics</td>
          <td data-label="Purpose">Aggregated page-use and website performance measurement.</td>
          <td data-label="When it is used">
            On site visits. Cloudflare states that this service does not use cookies or local storage for its
            usage metrics.
          </td>
        </tr>
        <tr>
          <td data-label="Provider or technology">YouTube</td>
          <td data-label="Purpose">
            Displaying videos; service functionality, security, analytics, personalisation and advertising may
            be provided by Google.
          </td>
          <td data-label="When it is used">
            When pages containing an embedded YouTube player load and when you interact with a player. Cookie
            names and lifetimes are controlled by Google and may depend on your Google settings.
          </td>
        </tr>
      </tbody>
    </table>

    <p>
      You can delete or block cookies through your browser settings. Blocking third-party content may prevent
      embedded videos from working. If we introduce another optional analytics, advertising or marketing
      technology, we will update this notice and request consent before using it where required.
    </p>

    <h2>Your data protection rights</h2>
    <p>Subject to the GDPR and applicable limitations, you may ask us to:</p>
    <ul>
      <li>give you access to your personal data;</li>
      <li>correct inaccurate or incomplete information;</li>
      <li>delete your information;</li>
      <li>restrict how we use it;</li>
      <li>provide portable information where the right applies; or</li>
      <li>stop processing based on legitimate interests.</li>
    </ul>
    <p>
      Where processing is based on consent, you may withdraw that consent at any time without affecting earlier
      lawful processing. Contact <a href="mailto:info@familyfed.ie">info@familyfed.ie</a> to make a request. We
      may need to verify your identity before responding.
    </p>
    <p>
      You may also complain to the
      <a href="https://www.dataprotection.ie/" rel="noopener noreferrer">Data Protection Commission</a>, Ireland's
      supervisory authority.
    </p>

    <h2>Changes to this notice</h2>
    <p>
      We will update this page when our processing or service providers change. The date at the top shows when
      the notice was last revised.
    </p>
  </div>
</div>