Privacy Policy

Last updated: July 2026 · CCF Academy (CAN Create Future Academy), Kigali, Rwanda

Draft note: this is a working template written for the academy's actual setup (Netlify hosting, Netlify Forms, YouTube embeds, no analytics). Before public launch it should be reviewed by a legal adviser familiar with Rwanda's Law No. 058/2021 on the Protection of Personal Data and Privacy, and updated if any new tools are added to the site.

The short version

We collect as little as possible. No advertising trackers, no analytics, no cookies set by us, no selling of data — ever. The only personal data we receive is what you type into our forms, and it goes to one person: our patron.

1. Who we are

This website is operated for CCF Academy (CAN Create Future Academy), a youth arts initiative in Kigali, Rwanda, operating under Climate Actions Now (CAN) Rwanda. The data contact is our patron, Robert Stephenson: robert@climateactionsnow.org.

2. What we collect, and why

Contact and pledge forms: name, email address, country (optional), and your message. We use these solely to respond to your enquiry, sponsorship offer or donation pledge. Legal basis: your consent, given by submitting the form.
Hosting logs: our host (Netlify, Inc.) processes standard technical logs (IP address, browser type) to serve and secure the site. See Netlify's privacy policy.
Nothing else. We run no analytics, no advertising pixels, and set no cookies of our own.

3. Where your data goes

Form submissions are stored by Netlify Forms and forwarded to our patron, who responds personally. They are not shared with, or sold to, anyone else. Donation pledges are recorded by the patron for transparency and accounting.

4. Embedded content

Some pages embed videos from YouTube (in privacy-enhanced "nocookie" mode) and, from time to time, Google Drive or Instagram posts. When you play or interact with embedded content, the provider (Google or Meta) may process your data under its own privacy policy. Embeds do not load personal data before you interact with them where the provider supports it.

5. Children's privacy

Most of the academy's members are minors, and this policy is strictest where it concerns them:

We never publish a minor's full name, school, home area or contact details.
Images of minors are published only with documented parent/guardian consent, and are removed within 48 hours of any withdrawal request.
This website provides no way for visitors to contact any child. All communication passes through our adult patron.
This site is not directed at children and does not knowingly collect data from anyone under 16. If you believe a child has submitted a form, tell us and we will delete it.

6. Your rights

Under Rwanda's Law No. 058/2021 (and, for visitors in the EU/UK, the GDPR), you may request access to, correction of, or deletion of your personal data, and withdraw consent at any time. Email robert@climateactionsnow.org — we respond within 30 days, usually much faster.

7. Retention

Form submissions are kept only as long as needed to handle your enquiry or to keep honest records of donations, and are then deleted.

8. Changes

If we add any new tool that touches personal data (for example an online payment provider), we will update this policy first and change the "last updated" date above.