Privacy Policy

Privacy Policy – Design Reparations

Last updated: 4 November 2026

1. Our approach to privacy

At Design Reparations, we believe privacy is part of justice, autonomy, and collective care.

Our work is grounded in decolonization, equity, solidarity, and respect for the people and communities we work with. These values also guide how we handle personal information.

We believe personal data should not be treated as a resource to be extracted or exploited. We aim to collect only what we need, use it responsibly, and respect people's choices about how their information and contributions are used.

We do not sell personal data or use it for commercial advertising. We do not use Google Analytics or advertising-based visitor profiling.

This policy explains what information we collect, how we use it, and what rights you have when visiting our website or participating in our activities.

We handle personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection legislation.

2. Who we are

The organisation responsible for your personal information is:

Design Reparations NGO Stichting
Lizzy Ansinghstraat 103
1072 RE Amsterdam
The Netherlands

Email: info@designreparations.com
Website: https://designreparations.com

You can contact us at any time with questions or requests concerning your personal information.

3. What information we collect and why

We collect information when you interact with us, subscribe to our newsletter, contact us, or participate in our activities.

Depending on the interaction, this may include:

Contact information: Your name, email address, and other details you provide when contacting us or subscribing to our newsletter.
Project and participation information: Information shared through workshops, events, research, collaborations, and other activities. This may include registration details, feedback, interviews, personal stories, photographs, and creative contributions, depending on the project.
Technical information: When you visit our website, our hosting infrastructure may process technical information such as your IP address, browser information, and server logs. This is necessary for website functionality, security, and troubleshooting.

We only collect information that is relevant to the purpose for which it is needed.

We use personal information to:

Respond to enquiries and communicate with you.
Send newsletters and organisational updates.
Organise workshops, events, research, and collaborations.
Document and communicate our activities, where appropriate permission has been obtained.
Maintain the security and functionality of our website.
Meet applicable legal obligations.

We rely on your consent, the performance of agreements, our legitimate organisational interests, or legal obligations, depending on the purpose of the processing.

Where we handle sensitive personal information, we do so only where an applicable legal condition under the GDPR allows it.

4. Newsletter

We use **Brevo** to manage our newsletter and communicate with people who have subscribed to receive updates from us.

When you subscribe, we collect your name and email address.

We use newsletter tracking features to measure email opens and link clicks. This helps us understand how our communications are received and improve our newsletters.

You can unsubscribe at any time using the link included in each email.

Brevo processes newsletter information on our behalf. Its database infrastructure is located within the European Union, although other processing or access arrangements may involve additional locations.

More information: https://www.brevo.com/legal/privacypolicy/

5. Our digital service providers

We use a small number of external services to operate our website and support our organisational activities.

Website hosting – Infomaniak

Our website is hosted by Infomaniak, a Swiss hosting and cloud services provider. It may process technical information such as IP addresses and server logs to maintain website functionality and security.

More information: https://www.infomaniak.com/en/legal/general-data-protection-regulation

Website – WordPress and Divi

Our website is built using WordPress and Divi. These tools allow us to manage and publish website content. We also use security, spam-prevention, and performance tools to keep the website functioning properly.

Internal information management – Notion

We use Notion to organise internal documentation, contact details, collaborator information, and project coordination. Access to our workspace is restricted to the Design Reparations core team.

Notion is a third-party service provider that may store or process information outside the European Economic Area (EEA). Where required, appropriate safeguards for international data transfers apply.

More information: https://www.notion.com/help/gdpr-at-notion

We seek to work with service providers that offer appropriate data protection safeguards. We do not authorise these providers to use personal information entrusted to us for unrelated advertising purposes.

6. Cookies

Our website may use cookies and similar technologies to support essential website functionality, security, and performance.

We do not use Google Analytics, advertising cookies, or cross-site advertising trackers.

Where optional cookies or similar technologies require consent under applicable law, we will ask for your permission before using them. You can also manage cookies through your browser settings.

7. Community knowledge, consent and authorship

Our work is based on relationships of trust, reciprocity, and respect for the people and communities we work alongside.

We recognise that the knowledge, experiences, stories, images, and creative contributions shared with us do not automatically become the property of Design Reparations.

We seek appropriate consent before photographing, recording, documenting, or publishing people's contributions. We aim to explain how materials will be used and respect people's choices about their participation and representation.

We respect copyright, authorship, attribution, and the rights of contributors over their creative work.

Participating in a workshop or project does not automatically mean agreeing to have your photograph, story, or contribution published.

We believe communities should retain agency over their knowledge and contributions. We do not treat community knowledge or personal experiences as resources to be extracted, commercialised, or redistributed without appropriate permission.

8. How long we keep information

We keep personal information only for as long as necessary for the purpose for which it was collected, or as required by law.

We regularly review the information we hold and aim to delete or anonymise information when it is no longer needed.

Project documentation, photographs, interviews, and creative contributions may be retained for longer where this is consistent with the permissions and agreements established with contributors.

Financial and administrative records are retained for the periods required by applicable legislation.

You can contact us if you would like to request the deletion of your personal information.

9. How we protect your information

We take reasonable measures to protect personal information against unauthorised access, loss, misuse, or disclosure.

Access to personal information is limited to people who need it for their work. We also use appropriate website security measures and seek to work with service providers that take data protection seriously.

No digital system can guarantee absolute security, but we take our responsibility to protect the information entrusted to us seriously.

10. Your rights

Under the GDPR, you have the right to:

- Access the personal information we hold about you.
- Ask us to correct inaccurate information.
- Request deletion of your information where legally applicable.
- Ask us to restrict or stop certain processing.
- Receive your information in a portable format where applicable.
- Withdraw consent at any time where processing is based on consent.
- Object to processing based on legitimate interests.

To exercise these rights, contact us at **info@designreparations.com**.

We aim to respond within one month, as required by the GDPR. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

https://autoriteitpersoonsgegevens.nl/

11. External websites

Our website may contain links to other websites and external resources. We are not responsible for the privacy practices of those websites and encourage you to consult their respective privacy policies.

12. Changes and contact

We may update this Privacy Policy when our practices or legal obligations change. The latest version will always be available on our website.

If you have questions, concerns, or requests about how we handle your information, please contact us: