Privacy Policy

Privacy Policy Effective Date: September 29, 2025

Reef Advocates ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information and user-uploaded content when you access or use our website and mobile application (the "Platform").

We process personal data in compliance with the General Data Protection Regulation ("GDPR") and applicable international privacy laws, including the use of the European Commission's Standard Contractual Clauses ("SCCs") for cross-border data transfers.

1. Scope of this Policy

This Privacy Policy applies to:

  • Personal information collected when you use the Platform

  • Content ("User Content") you submit or upload

  • How we use, process, store, and share both personal data and User Content

 

2. Information We Collect

A. Account and Identity Information:

  • Name

  • Email address

  • Organization or affiliation (if applicable)

B. Technical and Usage Data:

  • IP address

  • Browser type and settings

  • Device information and operating system

  • Usage data related to your interaction with the Platform

 

3. Purpose and Legal Basis for Processing

We use your data for the following purposes, under the following legal bases:

  • To operate, maintain, and improve the Platform (Legitimate Interests, Contract)

  • To comply with legal obligations (Legal Obligation)

You may withdraw consent at any time by contacting us at: privacy@reefadvocates.org

 

4. Data Sharing and International Transfers

We may share your personal data and User Content with:

  • Cloud service providers and technical vendors

  • Legal or regulatory authorities, where required

If data is transferred from the European Economic Area (EEA) to outside the EEA, such transfers are protected using:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission (June 2021)

  • Transfers to countries with an adequacy decision by the EU

Annex 1: Standard Contractual Clauses are incorporated into this Privacy Policy and governs applicable data transfers. A full copy is available upon request.

 

5. Data Retention

  • Personal data is retained as long as necessary to fulfill the purposes outlined in this policy or comply with legal obligations.

  • Uploaded User Content is retained indefinitely to support archival goals.

 

6. Your GDPR Rights

For individuals who fall under EEA jurisdiction only, under GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Erase your data, excluding uploaded content that has transferred ownership

  • Restrict or object to processing

  • Receive a copy of your data in portable format

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at: privacy@reefadvocates.org

 

7. Data Security

We employ appropriate technical and organizational measures to safeguard your data, including access controls and secure storage practices. While we strive to protect your data, no system can be 100% secure.

 

8. Children’s Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

 

9. Changes to This Policy

We may revise this Privacy Policy periodically. Continued use of the Platform after changes indicates acceptance of the revised policy.

 

10. Contact Us

For questions about this Privacy Policy, to exercise your data rights, or to request a copy of our Standard Contractual Clauses:

Reef Advocates
61795 Ward Rd, Bend OR 97702
privacy@reefadvocates.org
(806) 239-8843

 

By using the Platform, you confirm that you have read and agreed to this Privacy Policy, including the incorporation of the Standard Contractual Clauses for applicable international data transfers.