The Resource Alliance Global Community Privacy Policy 

This privacy policy sets out how the Resource Alliance uses and protects any information that you provide to us. 

The Resource Alliance is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this then you can be assured that it will only be used in accordance with this privacy statement. 

The Resource Alliance may change this policy from time to time by updating this page. You should check this page periodically to ensure that you are happy with any changes. This policy is effective from 25 May 2018. 

​ This Privacy Policy is edited by Resource Alliance Limited, The Resource Alliance Limited (registered in England and Wales).  

Registered office: The Brew, Eagle House, 163 City Road, Hoxton, London, EC1V 1NR, United Kingdom 

Company number: 04007393 

Charity Number: 1099889 

E-mail: [email protected] 

(hereafter referred to as “we”, “us”, “our” and “Data Controller”). 

The Data Controller offers the RA Global Community (via Hivebrite) platform (hereafter, the “platform”) to its users which have subscribed on the platform and as such have a user account (hereafter referred to as “Users”, “you”, “your”). The Platform is available at the following url address: community.resource-alliance.org 

The Data Controller uses a solution called “Hivebrite”, which enables the import and export of user lists and data, the management of content and events, the organization of emailing campaigns and opportunity research and sharing as well as the management of funds and contributions of any kind, via the following platforms: Mailchimp, Cvent and Salesforce. 

In this regard, the Data Controller collects and processes User’s personal data in accordance with the Cookie policy. 

1. How do we collect personal information? 

We may hold information relating to you from several sources and we will collect personal data about you: 

• When you provide your data directly: For example, personal information that you submit when you sign up to the platform, one of our events, or any personal data that you share with us when you communicate with us by email, phone, or post 

• When we receive your data indirectly: Your personal information may be shared with us by third parties, including our events partners and sub-contractors. 

• When you visit the platform 

As is true of most websites, we gather certain information automatically through your use of this Platform. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring or exit pages, the files viewed on the site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and clickstream data to analyse trends in the aggregate and administer the site, this data is saved into server logs according to our web host’s privacy policy. 

Our Platform uses cookies to improve your experience, read more about the type of cookies and how we use them on the cookies page. 

When subscribing to the Platform 

When subscribing to the Platform, the User is informed that its following personal data is collected for the purpose of creating a user account: 

Mandatory data: First name, Last name, and Email address, Location. 

The User is informed that it is not possible to access the Platform without providing the mandatory data strictly necessary to create an account and authenticate the User. 

Optional data: Information regarding professional experience 

When using the Platform 

The User may validly publish, at its own initiative, certain content, live feed posts and group posts, on the Platform which shall be kept by the Company. Content may only be published by Users per the Platform’s Terms of Use. 

2. What do we collect? 

We may collect the following information: 

• Full name 

• Job title 

• Contact information including telephone number and email address 

• Demographic information such as postcode, preferences and interests 

• Social media identity 

• Information about your computer and your visits to and use of the Platform, including IP addresses, browser type, and ISP 

• Your gender, when freely given by you during the course of our interactions with you 

• Special categories of data 

The retained EU law version of the EU General Data Protection Regulation ((EU) 2016/679) and the Data Protection Act 2018 (“UK GDPR”) recognises certain categories of personal information as sensitive, and therefore requiring more protection. These categories of data include information about your health, ethnicity, and political opinions.  In certain situations, we may collect and/or use special categories of data (for example in order to make adjustments for any disabilities or dietary requirements you may have when attending our events). We will only process these special categories of data if there is a valid reason for doing so and where the UK GDPR allows us to do so. For instance, by seeking your explicit consent to use such data. 

3. What we do with the information we gather 

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons: 

• To provide you with services, products or information that you have requested 

• To provide updates about our work, services, activities, and events 

• Internal record keeping 

• We may use the information to improve our products and services 

• We may periodically send promotional emails regarding updates, special offers, or other information which we think you may find interesting using the email address which you have provided 

• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, SMS, fax, or mail. We may use the information to customise the Platform according to your interests 

Our legal basis for processing the personal data described in this policy is based on our legitimate interests to make available, maintain, monitor and improve the Platform (as described above).  

Please note that Kit United, and its subsidiaries – in charge of providing the Platform and managing its technical aspects - also collect your personal data as data controller, in order to generate statistics on the use of the Platform. This processing is based on the data controller’s legitimate interests to improve the Platform. The personal data are retained for the duration of the contractual relationship between Kit United and the Data Controller, plus 90 days. 

Kit United  

5 Rue des Italiens 

75009 Paris 

France 

See Kit’s privacy policy here.  

Direct marketing and Notifications 

During the registration process on our Platform when your personal data is collected, you will be asked to indicate your preferences for receiving direct marketing communications and notifications from us. 

We may also analyse your information and personal data to form a view of which products, services and offers may be of interest to you so that we can then send you relevant marketing communications and notifications. 

Third-party marketing 

We will get your express consent before we share your personal data with any third party for their own direct marketing purposes. 

Opting out of marketing 

You can ask to stop sending you marketing communications at any time [by logging into the Platform and checking or unchecking relevant boxes to adjust your marketing preferences OR by following the opt-out links within any marketing communication sent to you or by contacting us at [email protected]. 

If you opt out of receiving marketing communications and notifications, you will still receive service-related communications that are essential for administrative or customer service purposes for example relating to updates to our Terms of Use and checking that your contact details are correct. 

4. Data Retention 

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. 

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. 

5. Security 

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. 

6. How we use cookies 

Our Platform uses cookies to improve your experience, read more about the type of cookies and how we use them on the cookies policy here. 

7. Links to other websites 

Our Platform may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question. 

8. Do we share your information? 

The Resource Alliance will not sell, rent, or lease your personal information to others. However, we may disclose your personal information to selected third party processors (such as partners, sub-grantees, or sub-contractors) for the purposes outlined in section 4. The third party in question will be obligated to use any personal data they receive in accordance with our instructions. In particular, we reserve the right to disclose your personal information to third parties in the event that we buy or sell any business or assets, in which case we will disclose your personal information to the prospective buyer or seller or such business or assets: 

• If substantially all of our assets are acquired by a third party, personal information held by us may be one of the transferred assets; 

• If we are under any legal or regulatory obligation to do so; and 

• In connection with any legal proceedings or prospective legal proceedings, in order to establish, exercise, or defend our legal rights. For example, this may include the right to disclose your identity to anyone who is claiming that any User Content posted or uploaded by you to the Platform violates their intellectual property rights or their right to privacy. 

9. International data transfer 

As we sometimes use third parties to process personal information, it is possible that personal information we collect from you will be transferred to and stored in a location outside the UK. 

Please note that certain countries outside of the UK have a lower standard of protection for personal information, including lower security protections. Where your personal information is transferred, stored, and/or otherwise processed outside the UK in a country which does not offer an equivalent standard of protection to the UK, we will take all reasonable steps necessary (including entering into standard contractual clauses to protect your personal information or relying on the Privacy Shield for transfers to organisations in the US) to ensure that the recipient implements appropriate safeguards designed to protect your personal information. If you have any questions about the transfer of your personal information, please contact us using the details in clause 11. 

10. Your rights 

The UK GDPR outlines the following rights for the individual: 

• The right to be informed 

• The right to access a copy of your personal data 

• The right of rectification 

• The right of erasure 

• The right to restrict processing 

• The right to data portability 

• The right to object 

• Rights in relation to automated decision making and profiling 

This privacy notice acts as our method for keeping you informed, along with updates delivered via email when required. You will also find information on how you can access, change or delete your information. At this time, we do not use any automated decision making or profiling so you will find no information on this. 

No fee usually required 

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances. 

What we may need from you 

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. 

Time limit to respond 

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated. 

11. How to contact us about your data 

You may choose to restrict the collection or use of your personal information in the following ways: 

• If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at [email protected] 

You may request details of personal information which we hold about you.  If you would like a copy of the information held on you, please write to The Resource Alliance, The Brew Eagle House, 163 City Road, Hoxton, London, EC1V 1NR. 

If you believe that any information, we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect. 

12. Complaints  

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.