Privacy policy

1. Who processes your data

The data controller is Gradient Center NGO, registration code (EDRPOU) 46389902, Ukraine. For any question about processing: hello@gradientcenter.org.

2. What we collect

Only what you type into the application form yourself:

• your name;
• a contact — email or Telegram;
• the role you selected: veteran or defender, student, mentor, partner or donor;
• the message you wrote.

We do not collect health data, service records, criminal history or any other special category. We ask for no documents and run no background checks. If you include such details in free text, we will delete them at your request.

3. Why

One purpose only — to get in touch about participation: reply to your application, discuss a role on a team, mentoring or partnership terms. We do not use this data for newsletters and do not pass it to third parties for their own purposes.

4. Legal basis

Processing is based on the consent you give by submitting the form (Article 11 of the Ukrainian Law on Personal Data Protection) and, for partners and donors, on pre-contractual steps. Consent can be withdrawn at any time.

5. Who receives the data

Only the providers without which the site and the forms would not work:

• Web3Forms — receives the form submission and delivers it to our mailbox; the data passes through their servers. Web3Forms privacy policy.
• Cloudflare — site hosting and traffic analytics.
• Google Forms — only if you take our anonymous survey linked from the “Open call” section. The survey asks for no name or contact details, we cannot see who answered and cannot link answers to a specific person. Following the link opens a Google service, which operates under its own policy.

Data is disclosed to public authorities only upon a written request made in accordance with the law.

6. Cookies and browser storage

Local browser storage holds two entries:

• gradient_lang — the language you chose, so you do not have to switch it every visit. It stays on your device, is never sent to us and cannot identify you. Clearing site data in your browser removes it completely.
• gc-a11y — whether high-accessibility mode is on, so you do not have to switch it on again on every page. It also stays on your device and is never sent to us.

Cloudflare Web Analytics runs without cookies and without cross-site identifiers: it counts page views and does not build a visitor profile.

The site also runs Google Analytics 4 in Consent Mode with all storage denied: without your consent the service sets no cookies and keeps no identifiers in your browser — it only sends Google anonymised technical pings (page, approximate region derived from IP on Google's side, device type). We use this to count visits and conversions under the Google Ad Grants programme for non-profits.

7. Retention

Application correspondence is kept for up to 24 months from the last contact, then deleted. If cooperation begins, data is kept for its duration and for the periods required by applicable law.

8. Your rights

• find out exactly what data we hold about you;
• have inaccurate data corrected;
• request deletion and withdraw consent;
• restrict or object to processing;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights.

Write to hello@gradientcenter.org — we reply within 30 calendar days.

9. Security

The site is served over HTTPS only. Access to applications is limited to authorised people within the organisation. We do not publish submitted data and do not use it in reporting without separate consent.

10. Children

The service is not intended for people under 16. We do not knowingly collect their data.

11. Changes

If this policy changes, we will update the revision date at the top of this page and publish the new version at the same address.