Privacy policy
Last updated [date]
Who we are
XtraMiles is run by Isengaard, [legal form, registration number], [registered address]. Isengaard is responsible for the personal data described here. For any privacy question, write to info@xtramiles.org.
What we collect
- When you ask for help: your first name, email, phone number if you give it, country, region and city, and what you tell us about your situation. This can include information about your health, family or finances.
- When you contact us: your name, email and message.
- When you use the member or board portal: your account details and the cases, updates and reports you post there.
This website does not use advertising, tracking cookies or analytics. Fonts and images are served from our own site.
Why we use it
We use your information only to review your request, decide whether and how we can help, organise volunteers, and reply to you. Where you tell us about your health or other sensitive matters, we use it only with your explicit consent, which you give when you send the form. You can withdraw that consent at any time by writing to us.
Who can see it
Help requests are visible only to the Global Board and the continental coordinators for your continent. If your case is accepted, the volunteers who join it can see what they need to help you. Nothing about you is published on this website unless you agreed to it on the form, and even then we show only your first name and city, never your address, email or phone number.
We store data with our technology providers, Supabase (database) and Cloudflare (website hosting), who process it on our behalf. [Hosting region, and safeguards for any transfer outside the EU/EEA.]
How long we keep it
[Retention periods, for example: help requests that don't become cases are deleted after X months; case information is kept for X years after a case is completed; contact messages are deleted after X months.]
Your rights
You can ask to see, correct or delete your information, ask us to limit how we use it, or object to its use. Write to info@xtramiles.org. If you're not happy with our answer, you can complain to your data protection authority, [for example Datatilsynet in Denmark].