Privacy Policy
Last updated: 11 June 2026
REEFolution Foundation respects your privacy and handles personal data with care. This Privacy Policy explains which personal data we collect through our website, why we collect it, how long we keep it, and what rights you have.
Who we are
This website is operated by REEFolution Foundation.
- Website: https://reefolution.org
- Organisation: REEFolution Foundation
- Address: Sanderijnstraat 33H, 1055BP Amsterdam, The Netherlands
- Chamber of Commerce: 64978168
- ANBI / RSIN: 855931383
- Email: info@reefolution.org
What personal data we collect and why
We only collect personal data when this is necessary for our work, for example to respond to messages, process donations, send updates, protect the website, or improve our communication.
Contact forms and email
When you contact us through the website or by email, we may collect your name, email address, message, and any other information you choose to provide. We use this information to respond to your question, request, idea, funding proposal, volunteering enquiry, or other message.
We may also process technical information linked to your submission, such as your IP address, browser information, timestamp, and spam-check results. This helps us protect the website against spam, abuse, and security risks.
Newsletter and updates
If you subscribe to our newsletter or updates, we process your email address and, where provided, your name or preferences. We use this information to send you updates about REEFolution’s work, projects, coral reef restoration, education, science, fundraising, and related activities.
You can unsubscribe from these emails at any time by using the unsubscribe link in the email or by contacting us at info@reefolution.org.
Donations and payments
If you make a donation through our website, we may process information such as your name, email address, donation amount, payment status, payment reference, and any details required for administration, accounting, fraud prevention, and legal obligations.
Payments may be processed by external payment service providers. REEFolution Foundation does not store full payment card details on its own website. Payment details are handled by the relevant payment provider according to its own security and privacy standards.
Cookies and similar technologies
Our website uses cookies and similar technologies. Some cookies are necessary for the website to function properly, for example for security, forms, donations, language or display preferences, and basic website functionality. These necessary cookies do not require consent.
We only use non-essential cookies, such as analytics or marketing cookies, after you have given consent through our cookie banner. You can change or withdraw your consent at any time by using the cookie settings on the website.
For more detailed information about the cookies used on this website, please see our Cookie Policy.
Analytics
We may use analytics tools to understand how visitors use our website, which pages are visited, and how we can improve the website. Where analytics involve non-essential cookies or similar tracking technologies, we only activate them after consent.
Embedded content and external platforms
Pages on this website may include embedded content or links from other websites, such as videos, maps, social media platforms, partner websites, donation platforms, or scientific and educational resources. Embedded content from other websites behaves in the same way as if you visited those websites directly.
These external websites may collect data about you, use cookies, apply tracking technologies, and monitor your interaction with their content, especially if you have an account with that external platform and are logged in. We recommend reading the privacy policies of these external services.
Social media
Our website may link to REEFolution profiles on platforms such as Instagram, Facebook, LinkedIn, and YouTube. If you click these links, the relevant platform may process your personal data according to its own privacy policy. REEFolution Foundation is not responsible for how these platforms process your data.
Comments and user accounts
Our website is not primarily designed as a public commenting platform. If comments or user accounts are enabled on part of the website, we may process the information submitted through those features, such as your name, email address, comment content, IP address, browser information, and account details. This information is used to manage the website, prevent abuse, and display or moderate submitted content where applicable.
Media uploads
If you upload images or files to the website, you should avoid uploading files that contain embedded location data or other metadata, such as EXIF GPS data. Visitors may be able to download and extract metadata from files that are publicly available on the website.
Legal bases for processing personal data
We process personal data only when we have a valid legal basis. Depending on the situation, this may include:
- Consent: for example when you subscribe to a newsletter or accept non-essential cookies.
- Contractual necessity: for example when we process a donation or respond to a request connected to a service or collaboration.
- Legal obligation: for example for financial administration, tax obligations, or compliance with applicable laws.
- Legitimate interest: for example to secure the website, prevent spam or fraud, respond to messages, and improve our communication, provided your privacy interests are not overridden.
Who we share your data with
We do not sell your personal data. We only share personal data where necessary for the purposes described in this Privacy Policy.
We may share personal data with service providers that help us operate the website and organisation, such as website hosting providers, email services, newsletter tools, spam protection services, payment providers, donation tools, analytics providers, IT support, accountants, or professional advisers.
Where required, we make agreements with service providers to protect your personal data. We may also share personal data if this is required by law, regulation, legal proceedings, or a competent public authority.
International transfers
Some external service providers or platforms may process data outside the European Economic Area. Where this happens, we aim to ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms under applicable data protection law.
How long we retain your data
We do not keep personal data longer than necessary for the purpose for which it was collected, unless we are legally required to keep it for a longer period.
- Contact form and email messages: kept as long as needed to handle the request and maintain relevant correspondence.
- Newsletter data: kept until you unsubscribe or request deletion, unless we need to retain limited records for compliance purposes.
- Donation and payment records: kept as long as necessary for administration, accountability, fraud prevention, and legal or tax obligations.
- Cookie consent records: kept for the period necessary to demonstrate and manage your consent preferences.
- Technical and security logs: kept for a limited period unless longer retention is necessary to investigate abuse, security incidents, or legal issues.
Your rights
Depending on the situation and applicable law, you may have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing activities;
- withdraw your consent at any time, where processing is based on consent;
- request transfer of your personal data, where applicable;
- lodge a complaint with the Dutch Data Protection Authority or another competent supervisory authority.
To exercise your rights, you can contact us at info@reefolution.org. We may ask you to provide information needed to verify your identity before handling your request.
Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. However, no website or online transmission is completely secure. If you believe that your personal data has not been handled securely, please contact us.
Children
REEFolution’s work includes education and awareness activities, but this website is not intended to knowingly collect personal data from children without appropriate consent from a parent, guardian, school, or responsible organisation where required. If you believe that a child has provided us with personal data without appropriate consent, please contact us so we can take appropriate action.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example when our website, services, tools, or legal obligations change. The latest version will always be available on this page.
Contact
If you have questions about this Privacy Policy or how we handle personal data, please contact us:
REEFolution Foundation
Sanderijnstraat 33H
1055BP Amsterdam
The Netherlands
Email: info@reefolution.org