Effective Date: 1st August 2026
Last updated: 30th July 2026
This Privacy Notice explains how Alameda collects, uses, stores, shares and protects personal data when you visit our website at https://alameda.institute, subscribe to our communications, register for or attend an online event, contact us, interact with us through social media or otherwise interact with us through our digital channels. It also explains the rights available to you in relation to your personal data.
This Privacy Notice (hereafter: the Notice) outlines the personal data collection and processing practices related to the Alameda Institute’s website, communications and community building objectives.
This Privacy Notice replaces the previous privacy policy issued while Alameda was hosted by Save the Children UK. It reflects the transfer of responsibility for the relevant personal data processing from Save the Children UK to Instituto Alameda (aka Alameda), and the data protection laws that apply to Alameda’s current operations.
The Notice does not cover all of the personal data processing operations by Alameda Institute, for example data processed in connection to staff and human resourcing, which is covered by internal policies and procedures.
The data controller responsible for the personal data described in this Notice is Instituto Alameda, registered in Brazil under CNPJ number 67.930.881/0001-10, with its registered address at Rua Coração de Maria, 47, apto. 202, Méier, Rio de Janeiro – RJ, CEP 20775-050, Brasil (referred to in this Notice as “Alameda”, “we”, “us” or “our”).
Alameda is established in Brazil and is principally subject to Brazil’s Lei Geral de Proteção de Dados Pessoais (LGPD). Other data-protection laws may also apply to particular processing depending on the location of the individuals concerned and the nature of Alameda’s activities. We aim to make the core protections and rights described in this Notice available consistently to everyone. Where applicable law provides additional or stronger protections, we will respect those requirements.
If you have any questions about this Notice, how we process your personal data, or wish to exercise a data protection right, please email comms@alameda.institute with ‘Privacy’ in the subject line. Messages relating to personal data will be handled confidentially and access will be limited to staff who need the information to respond.
Alameda is committed to respecting rights to privacy and data protection and to processing personal data lawfully, fairly, transparently and securely.
Alameda Institute is also committed to disseminating the information it produces as widely as possible and wants to build a community of change that supports its work and broader struggles for social justice in which it is involved.
We collect only the personal data reasonably necessary to pursue the purposes described in this Notice. We do not sell personal data.
We use service providers where necessary to operate our website, deliver communications and events, and understand the reach of our work. We take reasonable steps to select appropriate providers and put contractual, organisational and technical safeguards in place where required.
Website use and security. When you visit our website, we may collect your IP address, browser and device information, pages requested, timestamps, server and security logs, and cookie preferences. We use this information to provide, secure and maintain the website, prevent misuse, diagnose technical issues and remember your choices. We generally rely on our legitimate interests in operating and protecting our digital services and, where relevant, on the need to provide a service you have requested.
Website analytics. Where you have given the required permission, we may collect information about how you use the website, including pages viewed, links followed, traffic sources, approximate location, device information and online identifiers. We use this information to understand the reach and effectiveness of our work and improve our website and communications. We generally rely on consent for non-essential analytics technologies. More information is provided in section 6 below.
Enquiries and correspondence. If you contact us, we may collect your name, email address, organisation or role, the contents of your message and our correspondence with you. We use this information to respond to your enquiry, maintain appropriate records and manage our relationship with you. We generally rely on our legitimate interests in responding to correspondence, or on taking steps at your request before entering into a contract where relevant.
Newsletters and communications. If you subscribe to our communications, we may collect your name, email address, organisation, language preference, subscription and consent records and, where enabled, information about email opens or links followed. We use this information to manage your subscription, send requested communications and assess their effectiveness. We generally rely on your consent, which you may withdraw at any time by unsubscribing or contacting us at comms@alameda.institute.
Webinars and online events. If you register for or attend an online event, we may collect your name, email address,, attendance information, questions, comments, survey responses and other information needed to administer the event. We use this information to manage and deliver the event, communicate with participants and evaluate the activity. Depending on the circumstances, we rely on legitimate interests, steps taken at your request or consent. We will tell you in advance if an event is recorded and explain how the recording will be used.
Social media. If you interact with Alameda through social media, we may receive your profile details, messages, comments, reactions, publicly available information and aggregated engagement information supplied by the platform. We use this information to communicate with the public, respond to enquiries, share our work and understand engagement. We generally rely on our legitimate interests in public communication and engagement. Social-media platforms also process information for their own purposes under their own privacy notices.
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, we consider whether those interests are proportionate and appropriately balanced against your rights and interests.
Alameda takes all reasonable steps to ensure that personal data is processed securely and to protect personal data against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction. These measures may include access controls, multi-factor authentication, secure cloud storage, encryption, software and device updates, staff and contractor guidance, backup arrangements, incident-response procedures and contractual safeguards for service providers.
No method of transmitting information over the internet or storing data electronically can be guaranteed to be completely secure. If Alameda becomes aware of a personal-data breach, it will assess, contain and respond to the incident in accordance with applicable law.
Alameda works with trusted third-party service providers to deliver its digital services, including web hosting, email and cloud infrastructure. Where these providers process personal data on Alameda’s behalf, we take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards are in place.
Alameda aims to limit the information collected from website visitors and the ability of third parties to track their browsing.
Our website uses essential cookies (see Cookies Policy) and similar technologies to operate securely and remember your preferences. We may also use optional analytics and embedded-content technologies, including services provided by Google Analytics, Metricool and YouTube, to understand website use and display content. Optional technologies will not be activated unless you consent through our cookie controls, except where applicable law permits otherwise. You can accept or reject optional technologies and change your choices at any time through Cookie settings. These technologies may collect device, browser, online identifier, approximate location and website-usage information, and are retained only for as long as needed for their stated purpose. As an additional control, users may install the Google Analytics opt-out browser add-on (external link) to prevent their website activity from being shared with Google Analytics.
In order to operate our digital services, Alameda works with a carefully chosen group of service providers to perform tasks on its behalf.
This includes the following service providers, who perform the following tasks.
Hostinger
Website hosting, database storage, backups and security
IP addresses, server logs, website data and information submitted through website forms
Google Analytics
Website analytics to understand how visitors use our website (page views, traffic sources, general usage patterns)
Online identifiers, device information, approximate location and website usage data
Metricool
Social media management and, where enabled, analytics
Social-media engagement data and any website usage data
Mailchimp
Managing newsletter subscriptions and distribution
Name, email address, organisation, language preference.
Youtube
Hosting and displaying video content
Device, identifier and usage data if you interact with embedded videos
Zoom
Hosting and facilitating webinars
Name, email address, and any information you provide when registering for, or attending a webinar
Social media and external platforms. Alameda uses platforms including YouTube, LinkedIn, Zoom, Bluesky, Facebook and X to communicate with the public, share research and promote events and publications. If you interact with Alameda through these services, the relevant platform will process your personal data under its own privacy notice, and may provide Alameda with information you make available through the interaction or with aggregated engagement data. Alameda’s accounts are managed by authorised staff. Links to the platforms’ privacy notices are provided below:
We may also share personal data with professional advisers, auditors or insurers; with event, research or communications partners where necessary and appropriately disclosed; where required by law, regulation or a competent authority; to establish, exercise or defend legal rights; to protect the safety, rights or property of individuals or Alameda; or as part of an organisational restructuring or transfer, subject to appropriate safeguards.
Service providers that process data solely on our behalf are expected to act under our instructions and appropriate contractual terms. Some platforms also process information for their own purposes, as explained in their own privacy notices.
Alameda operates internationally, and personal data may be stored or processed in Brazil, the United Kingdom, Germany and other countries where our staff, contractors or service providers operate. This includes website data hosted on Hostinger servers in the United Kingdom, with backups in Germany. Where required by applicable law, we use recognised safeguards for international transfers, such as adequacy arrangements, approved contractual clauses or another lawful transfer mechanism. You may contact us for further information about the safeguards relevant to your data.
Alameda retains personal data only for as long as necessary in accordance with the above purposes and applicable laws. In deciding how long to retain information, we consider the nature and sensitivity of the data, the purposes of the processing, whether those purposes can be achieved in another way, and any applicable legal, contractual, security or accountability requirements.
When personal data is no longer necessary for these purposes it is securely deleted, anonymised or restricted, subject to any legal obligations or technical limitations affecting secure backups.
For consent-based services, such as email updates, we retain your personal data while you remain subscribed or until the service ends. You may withdraw your consent or unsubscribe at any time. We may retain a limited suppression record where necessary to ensure that your preference continues to be respected.
Depending on applicable law and the circumstances of the processing, you may have rights to:
We aim to make these core rights available consistently to everyone wherever reasonably possible, although they may be subject to legal conditions and exceptions.
To exercise a right or raise a concern, email comms@alameda.institute with “Privacy” in the subject line; requests may be made in English or Portuguese and we may need to verify your identity before responding. We encourage you to contact us first so that we can try to resolve any concern. You may also complain to Brazil’s Autoridade Nacional de Proteção de Dados (ANPD), the UK Information Commissioner’s Office (ICO), or the relevant data-protection authority in the EU/EEA country where you live or work or where the alleged infringement occurred.
We may update this Notice where our activities, service providers or legal obligations change.
The current version and effective date will be published on this page.
Where a change materially affects how we process personal data, we will take reasonable steps to bring it to the attention of affected individuals.
Updated July 2026 to reflect the transfer of responsibility for the personal data processing described in this Notice from Save the Children UK to Instituto Alameda, and to include Alameda’s use of Zoom for webinars and Mailchimp for mailing lists.
Instituto Alameda
CNPJ: 67.930.881/0001-10
Rua Coração de Maria, 47, apto. 202
Méier, Rio de Janeiro – RJ
CEP 20775-050
Brasil
Email: comms@alameda.institute
Subject line: Privacy