Legal
Privacy & Cookie Policy
Last updated: 9 June 2026
1. Introduction
Squawk Foundation ("we", "us", "our") operates the website squawk.foundation (the "Site"). We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, why we collect it, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive.
2. Who is the data controller
The data controller responsible for your personal data is Squawk Foundation. For any privacy-related questions or to exercise your rights, contact us via our contact page.
3. What data we collect
We aim to collect as little personal data as possible. Specifically:
- Information you submit: when you use the contact form, you provide your name, email address, and the message you choose to send.
- Newsletter / subscription data: if you subscribe, we store your email address until you unsubscribe.
- Analytics data: with your consent, we collect anonymised usage data (pages visited, approximate region, device type, referrer) to understand how the Site is used.
- Technical data: server logs may temporarily record your IP address and user agent for security and abuse prevention.
We do not knowingly collect special categories of personal data (health, religion, etc.) and we do not sell personal data.
4. Legal basis for processing
- Consent (Art. 6(1)(a) GDPR) — for non-essential cookies, analytics, and newsletter subscriptions.
- Legitimate interests (Art. 6(1)(f) GDPR) — for keeping the Site secure, preventing abuse, and responding to messages you send us.
- Legal obligation (Art. 6(1)(c) GDPR) — where we are required to retain data by applicable law.
7. How long we keep your data
- Contact form messages: up to 24 months after the last exchange, then deleted.
- Newsletter subscriptions: until you unsubscribe.
- Anonymised analytics: up to 14 months.
- Server logs: typically up to 30 days.
8. Your rights under the GDPR
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure ("right to be forgotten").
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with your local data protection authority if you believe your rights have been infringed.
To exercise any of these rights, please use our contact page. We will respond within one month.
9. Security
We use reasonable technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), access controls, and minimisation of stored data. No system is perfectly secure; please contact us promptly if you suspect a problem.
10. Children
The Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be announced on the Site.
12. Contact
For any privacy questions or requests, please reach us through our contact page.

