Privacy Policy
Our Commitment to Privacy
G-light Ambassadors is committed to protecting your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). This Privacy Policy details how we collect, store, route, and protect personal data captured through www.glightambassadors.org.
Personal Data We Collect
We apply a strict principle of Data minimization. We collect only the essential personal details required to onboard you into our programs:
-
Identification Data: First name, last name.
-
Contact Information: Primary email address, university email (for student verification), or corporate email (for mentor verification).
-
Self-Selected Role Designation: Classification as a Student / Mentee or Corporate Professional / Mentor.
-
Technical Log Data: Non-identifying technical metadata collected automatically via first-party logs (e.g., browser type, general geographical region, device viewport category).
Lawful Basis for Processing
We process your personal data under the following lawful bases set out in Article 6 of the UK GDPR:
-
Consent: When you voluntarily submit your details through our 3-field webinar registration form or campus pop-up link.
-
Legitimate Interests: To coordinate mentorship pairings, send virtual webinar access links (e.g., Zoom calendar invites), and monitor community event engagement.
-
Legal Obligation: To comply with standard Scottish Charity Regulator (OSCR) reporting and administrative audit mandates.
First-Party Data Routing & Third-Party Cookies
-
No Third-Party Cross-Site Tracking: We do not deploy invasive third-party tracking pixels or monetize user browsing behavior.
-
First-Party Attribution: Traffic origins (e.g., campus QR codes, Instagram/LinkedIn links) are processed natively via clean first-party URL parameters (UTMs) to evaluate our organic acquisition funnels securely.
-
Data Sharing: We do not sell, rent, or trade personal data. Data is shared exclusively with necessary operational data processors strictly bound by data processing agreements.
Data Retention Schedules
-
Webinar & Event Registrants: Retained for the duration of the active academic/program year plus 12 months, after which records are deleted or anonymized unless the user opts into continuous community membership.
-
Mentor/Mentee Application Files: Retained for the duration of the mentorship engagement cycle.
Your Data Rights
Under UK data protection legislation, you retain the right to:
-
Access: Request a copy of the personal data we hold about you.
-
Rectification: Request correction of inaccurate or incomplete information.
-
Erasure ("Right to be Forgotten"): Request the complete deletion of your personal records from our database.
-
Withdraw Consent: Opt out of event reminders or email communications at any time via the "Unsubscribe" link in any automated message.
To exercise any of these rights, contact our Data Protection Administrator at: glight.ambassadors@gmail.com