Policy

Privacy policy

What personal information The Purpose One collects, why we use it and what rights you have. This website sets no cookies and runs no analytics or tracking.

Last updated 6 October 2026. Applies to thepurposeone.org and to every CGAD and CLGD event.

On this page
  1. Who we are
  2. This website
  3. When you email or phone us
  4. When you apply or register for an event
  5. Who we share it with
  6. International transfers
  7. How long we keep it
  8. Your rights
  9. Young participants
  10. Security
  11. Changes to this policy
  12. Questions

1Who we are

This website is run by THE PURPOSE ONE, Inc. (“The Purpose One”), with its registered address at 212 N. 2nd St. STE 100, Richmond, KY 40475, United States. We own and operate the Council for Global Affairs & Development (CGAD) and the Council for Leadership & Global Diplomacy (CLGD). For the personal information described here, we are the data controller. You can reach us at programs@thepurposeone.org.

2This website

  • This website sets no cookies and uses no analytics, advertising or tracking tools. It has no forms.
  • Fonts and images are served from this website’s own server, not from Google or any other outside service.
  • Our hosting provider, Hostinger, automatically records basic technical details of each visit: your IP address, browser type, the page requested and the date and time. These logs are used only to keep the site secure and working, and are kept by Hostinger for a short period before being deleted.
  • This site links to thecgad.org and theclgd.org. Registration and application forms are on those sites, and they publish their own privacy notices.

3When you email or phone us

We use your name, contact details and what you tell us to answer you and to keep a record of the conversation. We do this because we have a legitimate interest in replying to you or, if your message is about a booking, to perform our contract with you.

4When you apply or register for an event

What we collect

  • your name, email address and phone number
  • your nationality and country of residence
  • your educational or professional background and the answers in your application
  • passport details, only if you ask for a visa invitation letter
  • payment and transaction details

How payments work

You can pay by card or with PayPal. Card payments are processed by Stripe: your card details go directly to Stripe, and we never see or store your full card number. PayPal payments are made on PayPal’s own pages, so we never see your PayPal login or the card or bank account linked to it. We receive the payment confirmation, the amount, and the name and email address on the payment.

Stripe and PayPal each handle personal data under their own policies: the Stripe Privacy Policy and the PayPal Privacy Statement.

Why we use it, and on what legal basis

  • to process your application and registration, take your payment and give you the place you booked (to perform our contract with you)
  • to prepare visa invitation letters, arrange accommodation and visits, and issue certificates (to perform our contract with you)
  • to keep accounting and tax records (because the law requires it)
  • to send you confirmations, updates and notices about your event (to perform our contract with you)
  • to prevent fraud and keep our systems secure (our legitimate interests)

5Who we share it with

  • Our payment providers, Stripe and PayPal, to process your payment.
  • CGAD or CLGD, the organisation running your event, to review your application, prepare your place and issue your certificate.
  • Hotels, venues and host institutions, only as needed, for example a rooming list or a visitor list for an institutional visit.
  • An embassy or consulate, only when you ask for this as part of the visa invitation letter service.
  • Companies that host our email and data for us, under contracts that require them to protect it.
  • Professional advisers and public authorities, when the law requires it.

We do not sell or rent personal information.

6International transfers

Our participants and some of our service providers are in many countries, so your information may be processed outside the country you live in. When it is, we use the safeguards that data protection law requires, such as standard contractual clauses.

7How long we keep it

  • Application and registration details: for the event and a reasonable period afterwards, so we can issue certificates, handle vouchers and answer questions.
  • Payment and accounting records: for as long as United States tax and accounting law requires.
  • Passport details: only for as long as needed to prepare your invitation letter.
  • Emails and messages: for as long as we need them to deal with what you asked.

8Your rights

You can ask us to:

  • give you a copy of the information we hold about you
  • correct information that is wrong
  • delete your information, or restrict how we use it
  • stop using it where we rely on our legitimate interests
  • send your information to you or to another organisation in a common format

Email programs@thepurposeone.org and we will reply within one month. You can also complain to the data protection authority in the country where you live.

9Young participants

Our programmes are open from age 15. Participants under 18 need the consent of a parent or guardian, and we may contact that person about the booking.

10Security

We protect personal information with technical and organisational measures, including encrypted connections (HTTPS) and limiting access to the people who need it to run your event.

11Changes to this policy

If we change this policy, we will update this page and the date at the top.

12Questions

Email programs@thepurposeone.org, call +44 7438 718947 or write to THE PURPOSE ONE, Inc., 212 N. 2nd St. STE 100, Richmond, KY 40475, United States.