Legal
Privacy
This site is deliberately data-minimal. There is no account system, no contact form, no analytics and no advertising or tracking technology.
Please note
ShaperAid is a volunteer cross-Hub initiative. The formal controller and hosting-provider details below are being confirmed and will be named here. Data protection questions are answered at the contact address on this page.
Controller
This website belongs to ShaperAid, a cross-Hub humanitarian campaign initiative created and run by Global Shapers across multiple Hubs within the Global Shapers Community. The legal controller for this website is being formalised and will be named below once confirmed.
- Legal controller / responsible legal person or entity
- Being formalised
- Geographic address of the controller
- Being formalised
Contact for data protection questions:
Network affiliation (context only)
- Network affiliation
- Global Shapers Community
- Network reference address
- c/o World Economic Forum
91–93 Route de la Capite
CH-1223 Cologny/Geneva
Switzerland
This is the published World Economic Forum / Global Shapers network reference address. It is shown for affiliation context only and is not presented as the GDPR controller or controller address for this website.
What this site processes
Technical hosting and server logs. Web hosting normally involves the processing of connection data such as IP address, date and time, the requested resource, referrer, browser/user-agent string and error or security information. The production hosting provider for this site is not yet confirmed, so the exact logging behaviour and retention are stated as pending below.
Checklist progress and the Campaign Workspace. The readiness checklist on Get started, the action-plan checklist in the Campaign Guide and everything you enter in the Campaign Workspace are stored only in your own browser, in localStorage keys used by this site. The workspace itself has no account and is not synchronised: your campaign record, drafts, tasks and reporting notes stay on the device and browser you used and are not readable by us. Anyone with access to that browser profile can read them, so keep sensitive personal details and financial credentials out of the workspace. You can delete everything at any time with the reset controls or by clearing your browser storage.
Support requests you choose to submit. The workspace has one deliberate exception to the rule above: if you use “Request ShaperAid support”, a limited, structured extract is sent to and stored on ShaperAid’s backend so the coordination team can respond. Before anything is sent you see exactly which fields are shared and which stay local, and you must confirm explicitly. The submitted extract covers campaign name and type, initiating Hub, what happened and who is affected, the campaign objective and local grounding, partner and fund-route information you have made public, dates, the campaign lead’s name and contact email, the support you are asking for, your current stage, and the facts and public sources you have approved. Saved draft texts, internal tasks and completion history, private notes and the rest of your workspace are not sent. The purpose is campaign support and coordination only; submitting is not an application and implies no review, endorsement or publication. Do not enter credentials, bank details, personal data of affected people or sensitive operational information.
Email contact. If you email ShaperAid, the content of your message and the contact details you include are processed in order to reply and coordinate your enquiry or campaign. There is no contact form on this site, so nothing is submitted to us through the pages themselves.
Fonts and assets. The Poppins typeface and all other design assets are served from this website. No fonts, scripts or embeds are loaded from third-party services.
Purposes and legal bases
Responding to and coordinating email enquiries: legitimate interest in handling contact you initiated (GDPR Art. 6(1)(f)); where the exchange concerns a possible collaboration, pre-contractual steps may also apply (Art. 6(1)(b)).
Secure and reliable operation of the website, including hosting and security logs where the host creates them: legitimate interest in operating and protecting the site (Art. 6(1)(f)).
Receiving and handling a support request you submit from the Campaign Workspace: legitimate interest in coordinating campaign support you asked for (GDPR Art. 6(1)(f)), together with the explicit confirmation you give before the extract is sent. Each submitted request is stored with a unique reference code shown to you on sending, so you can quote it when following up or asking for deletion.
No consent-based processing takes place for analytics or marketing, because there is no analytics, marketing or non-essential storage on this site.
Cookies and browser storage
This site sets no cookies for analytics, advertising or profiling. The only browser storage used is localStorage for your own checklist progress and Campaign Workspace content, which is strictly functional and stays on your device, plus a session token if a ShaperAid team member signs in to the internal support-request view. For that reason no consent banner is shown.
Retention
Email correspondence is kept for as long as needed to handle the enquiry and any follow-up, and longer only where retention is legally required or reasonably necessary in connection with legal claims.
Technical logs are retained according to the hosting and security settings of the production provider, which will be stated here once that provider is confirmed.
Checklist and Campaign Workspace data stay in your browser until you reset them or clear your browser storage.
- Retention period for submitted support requests
- Being formalised
Submitted support requests are kept while the request is being handled. A final retention and deletion period has not yet been decided and must be set before publication. You can ask for a submitted request to be deleted at any time.
Recipients and processors
- Production hosting provider (processor)
- Being formalised
- Backend and database provider for support requests (processor)
- Being formalised
- Email service provider used for correspondence (processor)
- Being formalised
No other recipients receive personal data from this site. Data is not sold or used for advertising.
External links
Pages on this site link to external services such as humanitarian partners, donation routes and shared campaign assets. Simply listing a link does not send your data to those services. Once you follow a link, that provider's own privacy notice applies.
Your rights
Subject to the applicable conditions, you have the right to access your personal data, to rectification, to erasure, to restriction of processing, to object to processing based on legitimate interests, and to data portability where relevant.
You may also lodge a complaint with the supervisory authority competent for the controller's jurisdiction once the legal controller for this website is confirmed. The specific authority will be named here at that point.
To exercise a right, contact us at .
Last updated: 14 August 2026