Privacy Policy

This Privacy Policy explains how Stichting Rainbow Anonymous, also referred to as Rainbow Anonymous, collects, uses, stores and protects personal information when you visit our website, contact us, request support, ask to join our community, participate in our activities, donate, or otherwise interact with us.

Rainbow Anonymous is based in Amsterdam, the Netherlands, and processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

1. Who we are

Stichting Rainbow Anonymous
Heidotistraat
1102 LD Amsterdam
Netherlands

Email: info@rainbowanonymous.org
Website: rainbowanonymous.org
KvK number: 89700015

For the purposes of the GDPR, Stichting Rainbow Anonymous is the data controller for the personal information described in this Privacy Policy unless stated otherwise.

2. Our approach to privacy

Rainbow Anonymous supports LGBTQ+ people of African, Caribbean and other diverse backgrounds.

We recognise that information shared with us may be particularly sensitive. Someone contacting or joining Rainbow Anonymous may disclose information about their sexual orientation, gender identity, ethnic or cultural background, migration experience, personal circumstances or other aspects of their life.

We therefore aim to:

• collect only information we genuinely need;
• explain why we need it;
• limit access to authorised people;
• use information only for the purposes for which it was collected;
• protect sensitive information appropriately;
• avoid unnecessary disclosure of member identities;
• allow people to use a chosen name where appropriate; and
• delete personal information when we no longer have a legitimate or legal reason to keep it.

You never have to give us your legal name.

3. Information we may collect

When you ask to join our community

Our Join Us form asks for a name you would like us to use, how you would like to be addressed, something about what brings you to Rainbow Anonymous, a telephone or WhatsApp number, an email address, and optionally your country or background and how you heard about us.

You do not need to provide more personal information than is reasonably necessary for us to understand your request.

When you contact us for support

If you contact us by email, WhatsApp or another channel, we may receive your name or chosen name, email address, telephone number, the content of your message, information about the type of support you are seeking, and anything else you choose to share.

Please avoid sending highly sensitive information unless it is necessary for us to help you.

When you share a story

Our Stories form asks for a title, a category, your story, and optionally a name to publish it under. Leaving the name blank publishes your story anonymously.

Every submission is read by the Rainbow Anonymous team before anything appears on the website. We publish your story and, if you gave one, the name you chose. We do not publish anything else you send us.

When you participate in our community

If you become a member or take part in activities, we may process information necessary to communicate with you, manage participation, maintain the safety of our community, administer our private community spaces, respond to questions or concerns, and provide relevant support or information.

When you donate

If you donate to Rainbow Anonymous, payment information is processed by your bank or the relevant payment provider. We may receive information associated with the donation, such as your name, payment reference and amount.

We do not require or intend to store full payment card details ourselves.

When you simply visit the website

We only use cookies that are strictly necessary for the website to work. We do not use advertising or tracking cookies, and we do not currently run website analytics.

Like almost all websites, our hosting provider keeps server logs which may include your IP address, browser and device information, pages visited, and the date and time of access. These are used to operate and secure the website.

4. Sensitive and special-category information

Because of the nature of Rainbow Anonymous and the people we support, information you provide may reveal sensitive aspects of your identity or circumstances. Simply asking to join can reveal something about who you are. We know that, and we treat everything you send us accordingly.

Under Article 9 of the GDPR, certain information receives additional legal protection. This includes information revealing:

• racial or ethnic origin;
• religious or philosophical beliefs;
• health information;
• a person’s sex life; or
• sexual orientation.

We treat this type of information with particular care. Where processing requires your explicit consent under the GDPR, we will ask for it before processing the information unless another lawful exception applies.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Why we use your information

We may process personal information to respond to enquiries; provide community support; consider requests to join; contact prospective members; manage membership and participation; administer our private WhatsApp or other community groups; organise events and activities; communicate important information to members; respond to safeguarding or community-safety concerns; process and administer donations; maintain and secure our website; comply with legal or regulatory requirements; and protect the rights and safety of Rainbow Anonymous, our members and others.

We will not use personal information for purposes incompatible with the reason it was originally collected, unless permitted or required by law.

6. Our legal bases for processing

Depending on the circumstances, we may rely on one or more of the following:

• Consent — where you have freely agreed to a specific use of your information, such as ticking the box on our Join Us form.
• Steps taken at your request — where processing is necessary to respond to something you have specifically asked us to do.
• Legal obligation : where we must process or retain information under Dutch or European law, such as financial records.
• Legitimate interests : where processing is reasonably necessary for the operation, administration or security of Rainbow Anonymous, provided those interests do not override your privacy rights. Given the sensitivity of our community, we take particular care before relying on this.
• Vital interests : in exceptional circumstances, where processing is necessary to protect someone’s life or physical safety.

Where special-category personal data is involved, we will also ensure an appropriate condition under Article 9 GDPR applies.

7. WhatsApp and community communication

Rainbow Anonymous operates a private WhatsApp community. If you choose to join, your use of WhatsApp is also subject to WhatsApp’s own privacy practices and terms.

Depending on your WhatsApp settings and the structure of the community, information such as your profile name, profile photograph, telephone number or messages may be visible to other participants. Before joining, please review your WhatsApp privacy settings and share only what you are comfortable sharing.

We take reasonable steps to protect community confidentiality, but we cannot control how individual participants handle information they see or receive.

Members must not copy, distribute, publish or disclose another member’s personal information, messages, photographs or identity without that person’s permission.

8. Who can access your information

Access is limited to people who need it for legitimate Rainbow Anonymous purposes. This may include authorised directors, staff, volunteers, community administrators and service providers acting on our behalf.

We do not sell personal information. We do not disclose member information to third parties for their own advertising or marketing purposes. Where service providers process information on our behalf, we use appropriate contractual, organisational and technical safeguards.

9. Service providers

We rely on external providers to operate parts of our services. These providers may process limited personal data where necessary.

• Website hosting: stores the website and its database, including form submissions.
• Google reCAPTCHA — used on our Stories form to block automated spam. Google receives technical information about your device and browsing when the check runs, and Google’s own privacy policy applies to that.
• Email: carries messages to and from info@rainbowanonymous.org.
• Cookie consent: CookieAdmin records your cookie preferences.
• Analytics: none currently in use.
• Donations and payments: TRIODOS Bank.
• WhatsApp (Meta) — carries our private community. Meta’s own privacy terms apply to that platform.

10. International transfers

Some providers, including communication, website, email and payment services, may process information outside the European Economic Area. Where personal information is transferred internationally, we seek to ensure an appropriate legal mechanism and safeguards are in place as required by the GDPR — such as an adequacy decision or approved Standard Contractual Clauses.

11. How long we keep information

We keep personal information only as long as reasonably necessary for the purpose it was collected, unless a longer period is required by law.

• Requests to join that do not go ahead: 3 months
• Active member information: kept while you are part of the community, then deleted within 5 working days
• Support enquiries:3 months
• General email enquiries: 3 months
• Story submissions that are not published: 5 days
• Published stories: kept on the website until you ask us to remove them
• Event registrations: Until event ends
• Donation and financial records: 5 years
• Website and security logs: one month

When information is no longer needed, we securely delete or anonymise it.

12. Cookies

We use only cookies that are strictly necessary for the website to function, maintain security or remember your privacy preferences. We do not use advertising or tracking cookies.

If other categories of cookie are ever introduced, they will only be activated where permitted by law and, where required, after you have given consent. You can manage your preferences through the cookie settings on our website, and refusing optional cookies will not prevent you from using the site.

13. Photographs, videos and stories

Rainbow Anonymous may publish photographs, videos, interviews or community stories as part of its communication and advocacy work.

Because appearing in our material may reveal sensitive information about a person, we take particular care when publishing identifiable community members. Where required, we obtain appropriate consent before publishing identifiable photographs, videos, testimonials or personal stories.

You may withdraw consent for future use by emailing info@rainbowanonymous.org. Withdrawal may not always make it possible to remove material already lawfully distributed, printed or independently republished.

14. Children’s privacy

Rainbow Anonymous does not intentionally collect personal information from children through its general website or joining process unless a specific programme clearly provides otherwise. If services involving children are introduced, additional privacy and safeguarding measures will apply.

[CONFIRM MINIMUM AGE AND WHAT HAPPENS IF SOMEONE YOUNGER CONTACTS US]

15. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration, inappropriate disclosure and destruction. Our website uses an encrypted connection, and access to sensitive information is limited to people who genuinely require it.

No website, messaging platform or storage system can be guaranteed completely secure, and we will not claim otherwise. Please share only what you are comfortable sharing.

16. Your privacy rights

Depending on the circumstances, you may have the right to:

• know how your personal information is being used;
• request access to it, and receive a copy;
• request correction of anything inaccurate or incomplete;
• request deletion;
• request restriction of processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• object to certain forms of automated decision-making.

These rights are not absolute and may depend on the circumstances and the legal basis for processing.

To exercise any of them, email info@rainbowanonymous.org. We may need to verify your identity before responding, so that we do not disclose information to the wrong person. We will respond within the time limits required by the GDPR.

If you want a published story removed, just ask. You do not need to give a reason.

17. Complaints

If you have concerns about how we handle your personal information, please contact us first at info@rainbowanonymous.org — we would rather put things right.

You also have the right to lodge a complaint with the Dutch data protection supervisory authority, the Autoriteit Persoonsgegevens, and to seek a judicial remedy where applicable.

18. External websites

Our website links to other organisations and services, including the specialist support organisations listed on our Get Support page. Rainbow Anonymous is not responsible for the privacy practices of websites we do not control. Please review their privacy information before submitting personal data to them.

19. Changes to this Privacy Policy

We may update this policy when our activities, website, providers or legal obligations change. The latest version is published here with the date it was last updated. Significant changes affecting how we use sensitive personal information will be communicated to members where required.

20. Contact us

Stichting Rainbow Anonymous
Heidotistraat
1102 LD Amsterdam
Netherlands

Email: info@rainbowanonymous.org
KvK number: 89700015

Your privacy, dignity and safety matter to us.