Privacy policy

The controller of personal data collected via awakendestiny.org is the Awaken Destiny Foundation, a private foundation under Belgian law (BCE No. 1016.499.721), with registered office at 14, rue de Picardie, 6010 Charleroi, Belgium.

For any data-protection question, write to [email protected]. No Data Protection Officer (DPO) is appointed at this time; requests are handled by the foundation.

Depending on how you interact with us, we may process the following categories of data:

• Identity and contact data: name, email address, and optionally phone, postal address, company name or VAT/company ID when you provide them (contact form, gift, Circle of 5, sponsorship, CSR Partner).
• Transaction data: amount, currency, frequency, chosen project or programme, payment status, Stripe identifiers (we do not store card numbers).
• Circle of 5 member data: profile, display preferences, referral / invitation data when you consent.
• Newsletter data: email address and site language at signup.
• Technical data: server logs (IP address, browser type, pages viewed, timestamps) for security and site operation.
• Audience measurement data: Google Analytics 4 identifiers and cookies only if you accept via the banner; if you refuse, anonymised cookieless pings may be sent via Google Consent Mode.

We do not intentionally collect special-category (sensitive) data via the site. We do not request precise location data.

We process your data only for specified purposes, on the following legal bases:

• Performance of a contract / pre-contractual steps, or legitimate interest in administration: processing and following up gifts, Circle of 5 and sponsorship; related accounting and legal duties (legitimate interest and, where applicable, legal obligation).
• Consent: sending the newsletter; placing Analytics cookies (Google Analytics 4); public display of a profile or circle (opt-in).
• Legitimate interest: responding to contact-form messages; securing the site (logs, Turnstile anti-abuse); improving the service within what is strictly necessary.
• Legal obligation: retaining certain transaction data for accounting and applicable checks.

Where processing is based on consent, you may withdraw it at any time (newsletter unsubscribe, cookie banner “Manage cookies”, or written request).

Cookies are small files stored on your device. They may include an anonymous identifier.

Strictly necessary cookies: required for the site to work (for example language preference). They do not require consent.

Audience-measurement cookies: Google Analytics 4 with Google Consent Mode. Analytics cookies / storage are enabled only after your explicit acceptance via the banner. If you refuse or make no choice, the script may send anonymised cookieless pings (no Analytics identifiers); this does not set audience-measurement cookies.

Third-party services that may set their own cookies as part of their use: Cloudflare Turnstile (anti-spam on the newsletter) and Stripe (off-site payment page).

You can change your choice at any time via the “Manage cookies” link in the footer, or through your browser settings.

Online gifts and contributions (including Circle of 5 and sponsorship) are processed by Stripe, a PCI-DSS certified payment provider. Stripe handles encryption and security controls (including 3D Secure where applicable).

Awaken Destiny does not store your card numbers. We may receive transaction-related information from Stripe (amount, currency, status, email, donor identifiers) for follow-up, accounting and related communication.

For more on how Stripe processes data, see Stripe’s privacy policy on its official website.

Newsletter: if you sign up voluntarily, we store your email address and site language so we can send communications in the appropriate language. You may unsubscribe at any time via the link in each email.

Contact form: the data you enter is used to handle and respond to your request.

To protect certain forms against automated abuse, we use Cloudflare Turnstile (invisible mode). Cloudflare may process technical browser-related data. See Cloudflare’s Turnstile Privacy Addendum.

Your data is not sold. It may be shared, only as needed, with:

• Foundation staff (access limited to authorised persons).
• Stripe (payments).
• Transactional / newsletter email providers (message delivery).
• Hosting and technical infrastructure: SamionX (server operation) on Hostinger infrastructure; possible CDN / protection via Cloudflare.
• Google (Analytics 4 / Consent Mode): Analytics cookies and identifiers only if you accepted; anonymised cookieless pings possible if you refused.
• Competent authorities when required by law.

Some providers (including Stripe, Google, Cloudflare or Hostinger depending on configuration) may process data outside the European Economic Area.

In that case, we rely on GDPR safeguards (standard contractual clauses, adequacy decisions or equivalent mechanisms implemented by those providers). You may contact us for more information.

We keep data only as long as needed for the purposes pursued, then delete or anonymise it, subject to longer legal requirements:

• Contact messages: up to 2 years after the last exchange, unless a longer period is needed for an ongoing matter.
• Newsletter: until unsubscribe or deletion on request.
• Gift / Circle / sponsorship data: for the duration of the relationship, then applicable Belgian accounting and legal retention (often up to 7–10 years).
• Technical logs: limited period, typically weeks to a few months, except in case of a security incident.
• Analytics data: according to Google Analytics, Consent Mode, and your consent; you may withdraw consent via “Manage cookies”, and use Google’s deletion tools where applicable.

Under the GDPR, you have the following rights, subject to legal conditions:

• Right of access to your data.
• Right to rectification.
• Right to erasure (“right to be forgotten”), where applicable.
• Right to restriction of processing.
• Right to object (including to processing based on legitimate interest).
• Right to data portability, where applicable.
• Right to withdraw consent at any time (without affecting the lawfulness of prior processing).

To exercise your rights, contact [email protected], stating your request and, if needed, providing information to verify your identity.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD): autoriteprotectiondonnees.be.

We implement appropriate technical and organisational measures to protect your data (HTTPS, restricted access, certified payment providers). No transmission or storage method is 100% secure.

Our site may contain links to third-party sites. We have no control over their practices and are not responsible for their privacy policies. Please review them before providing personal data.

We may update this policy to reflect changes to the site, providers or the law. The last-updated date appears at the top of the page. For material changes, we may also inform data subjects by appropriate means.

For questions about this privacy policy or to exercise your rights: