Sign Up

Username*

First Name*

Last Name*

Country*

E-mail Address*

Password*

Confirm Password*

Privacy Policy

Last updated: 1 April 2026

1. Who We Are

RESONANCE FOUNDATION is a UK-based regenerative non-profit ecosystem dedicated to fostering inner development, co-creative collaboration, and systemic impact. Our website is resonancefoundation.org. Our CRM (CiviCRM) is self-hosted on our own servers in Germany (Hetzner Cloud), within the European Economic Area.

Data Controller: RESONANCE FOUNDATION — backoffice@resonancefoundation.org

This Privacy Policy applies to all users of our website and services worldwide, including residents of the EU/UK (GDPR / UK GDPR), California, USA (CCPA/CPRA), and Brazil (LGPD).

2. What Personal Data We Collect

2.1 Data You Provide Directly

Identity data: full name, date of birth / age
Contact data: email address, postal address, telephone number
Professional data: organisation name, role, professional background
Financial data: donation amounts, membership tier, sponsorship level — payment card data is processed exclusively by Stripe or PayPal and never stored on our servers
Participation data: activity bookings, event registrations, session requests, meeting attendance
Volunteer & partner data: motivations, skills, availability, areas of interest, organisational affiliations
Communication data: newsletter preferences, contact form messages, comments

2.2 Data Collected Automatically

Usage data via Google Analytics: pages visited, time spent, device type, browser, approximate location (anonymised IP)
Technical data: IP address (anonymised), browser type, operating system
CiviCRM session data: interactions with membership, donation, and event registration forms
Cookies and similar technologies (see our Cookie Policy)

3. How We Use Your Data

3.1 Membership, Donations & Sponsorships

We process identity, contact, professional, and financial data to manage membership registrations (Seed, Root, Bloom tiers), process donations and sponsorship contributions, issue receipts and acknowledgements, and maintain records as required by applicable accounting and legal obligations.

3.2 Volunteer & Partner Applications

We process identity, contact, professional, and participation data to evaluate and manage applications from volunteers and partners, coordinate onboarding and engagement, and maintain collaboration records.

3.3 Activity Bookings & Event Registrations

We process identity, contact, and participation data to manage bookings for mentorship sessions, healing sessions, circles, workshops, and other programme activities; send confirmations and reminders; and maintain attendance records.

3.4 Communications & Newsletter

We process contact and communication data to send our newsletter, programme updates, and event announcements to subscribers who have given explicit consent, and to respond to enquiries submitted via contact forms.

3.5 Financial Management

We process financial and identity data through Xero (our accounting software) to maintain accurate financial records, issue invoices and receipts, and comply with UK accounting and tax obligations.

3.6 Website Analytics

We process anonymised usage data via Google Analytics to understand how visitors interact with our website and to improve its content and performance.

4. Legal Basis for Processing

4.1 EU / UK (GDPR / UK GDPR)

Consent — newsletter subscriptions, analytics cookies, and marketing communications
Contract performance — membership registrations, donations, sponsorships, volunteer agreements, event bookings
Legitimate interests — website security, fraud prevention, service improvement
Legal obligation — financial record-keeping and compliance with applicable law

4.2 California, USA (CCPA/CPRA)

We collect and use personal information as described in this policy. We do not sell personal information. Certain analytics activities may constitute “sharing” for cross-context behavioural advertising under California law; you may opt out via our cookie settings panel or by activating a Global Privacy Control (GPC) signal in your browser.

4.3 Brazil (LGPD)

Under Brazil’s Lei Geral de Proteção de Dados (LGPD), we rely on: consent (for newsletter and marketing communications), contract performance (for membership, donations, and event bookings), legitimate interest (for website security and analytics), and legal obligation (for financial record-keeping).

5. Data Sharing & Processors

We do not sell or rent your personal data. We share data only with the following trusted processors, strictly to operate our services:

Google LLC (USA) — Google Analytics (anonymised usage data)
Hetzner Online GmbH (Germany, EEA) — hosting for our website (resonancefoundation.org) and CiviCRM (crm.resonancefoundation.org). DPA signed 12 April 2026.
Cloudflare Inc. (USA) — CDN and security services
Stripe Inc. (USA/Ireland) — payment processing for donations, memberships, and sponsorships
PayPal Holdings Inc. (USA/Luxembourg) — alternative payment processing
Xero Limited (New Zealand/UK) — accounting and financial management software. Data processed on EU-based servers (AWS Frankfurt). New Zealand holds an EU adequacy decision.
Email service provider — newsletter and transactional email delivery

All processors are bound by data processing agreements (DPAs). Payment card data is processed exclusively by Stripe or PayPal and is never transmitted to or stored on our servers.

6. International Data Transfers

RESONANCE FOUNDATION is a UK-registered entity operating services hosted across multiple jurisdictions. This section explains how personal data flows are managed in compliance with UK GDPR and EU GDPR.

6.1 Data Infrastructure & Residency

All core infrastructure is consolidated on Hetzner Cloud, Frankfurt, Germany (EEA). There are no international transfers for core services:

Website hosting — Hetzner Cloud, Frankfurt, Germany (EEA). No international transfer. Full GDPR protection applies directly.
CiviCRM (memberships, donations, volunteers, partners, events) — self-hosted on Hetzner Cloud, Frankfurt, Germany (EEA). No international transfer.
Financial management — Xero Limited (New Zealand/UK). Data processed on EU-based servers (AWS Frankfurt). New Zealand holds an EU adequacy decision. DPA in place.
CDN & security — Cloudflare Inc., USA. Data in transit only; no personal data stored. Covered by Cloudflare’s DPA and SCCs.
Analytics — Google Analytics (Google LLC, USA). Anonymised usage data only (IP anonymisation enabled). Covered by Google’s DPA and SCCs.
Payment processing — Stripe (USA/Ireland) and PayPal (USA/Luxembourg). Payment card data processed exclusively by these providers under their own DPAs and SCCs. No card data reaches our servers.

6.2 UK ↔ EU Data Flows

As a UK entity with EEA-based infrastructure, our primary data flows benefit from the EU adequacy decision for the UK adopted in June 2021. Under this decision, personal data may flow freely between the UK and EEA without additional safeguards.

Important: The EU adequacy decision for the UK is valid until June 2027 and subject to renewal. RESONANCE FOUNDATION monitors this actively. If the decision is not renewed, we will implement Standard Contractual Clauses (SCCs) with affected processors.

6.3 Data Processing Agreements (DPAs)

Under UK GDPR and EU GDPR, we maintain a Data Processing Agreement with every processor that handles personal data on our behalf. Current status:

Hetzner Online GmbH — ✅ DPA signed 12 April 2026 (Art. 28 GDPR). Covers all infrastructure (website and CiviCRM).
Cloudflare Inc. — ✅ DPA in place via Cloudflare’s standard Data Processing Addendum.
Google LLC — ✅ DPA in place via Google’s Data Processing Terms.
Stripe Inc. — ✅ DPA in place via Stripe’s Data Processing Addendum.
PayPal Holdings Inc. — ✅ DPA in place via PayPal’s Data Processing Agreement.
Xero Limited — ⏳ DPA available via Xero’s standard Data Processing Agreement. Data processed on EU-based servers (AWS Frankfurt). Pending execution.

6.4 International Transfers Outside the EEA and UK

Where personal data is transferred to processors based outside the UK and EEA (primarily USA-based services), we rely on:

Standard Contractual Clauses (SCCs) approved by the European Commission and the UK ICO’s International Data Transfer Agreement (IDTA)
Adequacy decisions where applicable (New Zealand for Xero)
Binding Corporate Rules or equivalent mechanisms where SCCs are not available

6.5 Brazil (LGPD) Transfers

For data relating to Brazilian residents, international transfers are governed by Standard Contractual Clauses or equivalent mechanisms recognised by Brazil’s Autoridade Nacional de Proteção de Dados (ANPD).

6.6 Remote Access

Administrative access to CiviCRM and other systems from within the EEA (including Spain) does not constitute an international transfer. If administrative access is required from outside the EEA in the future, appropriate access controls and transfer mechanisms will be implemented.

7. Data Retention

Contact form & enquiry data: 2 years from last contact
Newsletter subscriber data: until you unsubscribe, plus 1 year
Membership & donation records: 7 years (legal/accounting requirement)
Volunteer & partner records: duration of relationship plus 3 years
Event & activity booking records: 3 years
Financial records (Xero): 7 years (UK accounting/tax requirement)
Analytics data: up to 26 months (Google Analytics default)
Consent records: 3 years as required by applicable law

8. Your Rights — EU / UK Residents (GDPR / UK GDPR)

Under UK GDPR and EU GDPR, you have the following rights:

Right of access — to request a copy of your personal data
Right to rectification — to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data, subject to legal retention obligations
Right to restriction — to limit how we process your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to processing based on legitimate interests
Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights: backoffice@resonancefoundation.org

Supervisory authorities:

UK: Information Commissioner’s Office — ico.org.uk
Spain: Agencia Española de Protección de Datos — aepd.es
Italy: Garante per la Protezione dei Dati Personali — garanteprivacy.it

9. Your Rights — California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

Right to know — to request disclosure of the categories and specific pieces of personal information we have collected
Right to delete — to request deletion of your personal information, subject to certain exceptions
Right to correct — to request correction of inaccurate personal information
Right to opt out of sale or sharing — we do not sell personal information; you may opt out of sharing via our cookie settings or GPC signal
Right to limit use of sensitive personal information
Right to non-discrimination — we will not discriminate against you for exercising your privacy rights

We will respond to California requests within 45 days.

We do not knowingly collect personal information from consumers under 16 years of age.

10. Your Rights — Brazilian Residents (LGPD)

If you are a resident of Brazil, you have the following rights under the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018):

Right of access — to confirm the existence of and access your personal data
Right to rectification — to correct incomplete, inaccurate, or outdated data
Right to anonymisation, blocking, or deletion — of unnecessary or excessive data
Right to data portability — to transfer your data to another service provider
Right to deletion of data processed with consent — upon withdrawal of consent
Right to information about sharing — to know with which entities your data is shared
Right to revoke consent — at any time

Brazilian supervisory authority: Autoridade Nacional de Proteção de Dados (ANPD) — gov.br/anpd

11. How to Exercise Your Rights (All Regions)

To exercise any of the rights described above: backoffice@resonancefoundation.org

We will respond to all requests within 30 days (or 45 days for California residents). In some cases, we may need to verify your identity before processing your request.

12. Security

We implement appropriate technical and organisational measures to protect your personal data, including HTTPS/SSL encryption, access controls, and regular security reviews. All core infrastructure is hosted on Hetzner Cloud in Germany (EEA), ensuring European data residency.

13. Children’s Privacy

Our website and services are not directed at children under 16 (or under 13 in the USA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or applicable law. Any changes will be posted on this page with a revised date. Material changes will be communicated via our newsletter or a prominent notice on our website.

15. Contact

Data Controller: RESONANCE FOUNDATION — backoffice@resonancefoundation.org

I agree to the Privacy Policy.

Hide terms

Terms & Conditions

Last updated: 1 April 2026

1. Introduction

These Terms & Conditions (“Terms”) govern your use of the website resonancefoundation.org and its connected services, operated by RESONANCE FOUNDATION, a non-profit organisation registered in the United Kingdom. By accessing or using our website or submitting any form or application, you agree to be bound by these Terms.

These Terms apply to users worldwide. Additional consumer protections may apply depending on your jurisdiction, including California (CCPA/CPRA) and Brazil (LGPD). See Section 17 for jurisdiction-specific provisions.

2. About RESONANCE FOUNDATION

RESONANCE FOUNDATION is a regenerative non-profit ecosystem whose mission is to catalyse inner development, co-creative collaboration, and systemic impact. We operate through four programmes: Inner Development, Co-creative Circles, Regenerative Innovation, and Systemic Impact. We are a value-generating ecosystem, not a traditional charity.

3. Intellectual Property

All content on resonancefoundation.org — including text, images, graphics, logos, programme materials, research outputs, and methodologies — is the intellectual property of RESONANCE FOUNDATION or its contributors, protected by applicable copyright and intellectual property laws.

You may not reproduce, distribute, modify, or publish any content from this website without our prior written consent, except for personal, non-commercial use with appropriate attribution.

4. Use of the Website

By using this website, you agree to:

Use the website and its services only for lawful purposes and in accordance with these Terms
Not use the website in any way that could damage, disable, or impair it or interfere with others’ use
Not attempt to gain unauthorised access to any part of the website, CRM, or associated systems
Not transmit any unsolicited or unauthorised advertising or promotional material
Provide accurate, truthful, and complete information in all forms and applications

5. Membership

RESONANCE FOUNDATION offers three membership tiers — Seed, Root, and Bloom — each with defined participation rights, seat allocations, and access to programmes and initiatives. By applying for membership, you agree to:

Provide accurate personal and organisational information during the application process
Pay the applicable membership fee for your chosen tier and renewal period
Abide by the values, community agreements, and governance principles of RESONANCE FOUNDATION
Accept that membership access and benefits are personal and non-transferable unless explicitly stated otherwise

We reserve the right to refuse, suspend, or terminate membership in cases of misrepresentation, breach of community values, or non-payment.

6. Donations

Donations to RESONANCE FOUNDATION are voluntary financial contributions. By making a donation, you acknowledge that:

Donations are processed securely through Stripe or PayPal; payment card data is never stored on our servers
Donations are generally non-refundable, except in cases of processing error — please contact us within 14 days
Donations are not tax-deductible unless explicitly confirmed in writing in connection with a specific campaign
We reserve the right to allocate donations to the programmes and initiatives that best align with our mission

7. Sponsorships

Sponsorship arrangements (Event, Project, or Circle sponsorships) are governed by individual written agreements. Sponsors do not acquire any editorial or governance influence over our programmes or content.

8. Volunteers

By submitting a volunteer application, you acknowledge that:

Volunteer participation is subject to acceptance by RESONANCE FOUNDATION following a review process
Volunteers contribute time and skills in alignment with our mission and community values
Volunteering does not create an employment relationship or entitlement to compensation
We reserve the right to decline or terminate volunteer arrangements at our discretion

9. Partners

Partner relationships (Programme, Knowledge, or Network partners) are governed by individual partnership agreements. By submitting a partner application, you acknowledge that:

Partnership is subject to acceptance following a strategic alignment review
Partners are expected to uphold the values and principles of RESONANCE FOUNDATION
Partnership does not grant exclusive rights or representation unless explicitly agreed in writing

10. Activity Bookings & Event Registrations

By booking a session, activity, or event through our website or CRM, you agree that:

Bookings are confirmed only upon receipt of confirmation from RESONANCE FOUNDATION
Cancellations must be notified as soon as possible; specific cancellation policies may apply to paid activities
We reserve the right to modify, postpone, or cancel activities, in which case registered participants will be notified and, where applicable, offered alternative dates or refunds
Session content is provided for informational and developmental purposes only and does not constitute professional medical, legal, or financial advice

11. Third-Party Links

Our website may contain links to third-party websites provided for convenience only. We have no control over those sites and accept no responsibility for any loss or damage arising from their use.

12. Disclaimer of Warranties

The website and its content are provided “as is” and “as available” without any warranties of any kind. RESONANCE FOUNDATION does not warrant that the website will be uninterrupted, error-free, or free of harmful components.

13. Limitation of Liability

To the fullest extent permitted by applicable law, RESONANCE FOUNDATION shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the website or its services.

14. Comments & User Submissions

By submitting content through our website (comments, contact forms, applications), you grant us a non-exclusive, royalty-free licence to use that content for the purposes of operating and promoting our mission. You remain solely responsible for the accuracy and legality of your submissions.

We reserve the right to moderate, edit, or remove any content that violates these Terms or our community values.

15. Newsletter

By subscribing to our newsletter, you consent to receive periodic communications from RESONANCE FOUNDATION. You may unsubscribe at any time via the link in any email or by contacting us directly. We will never share your email address with third parties for marketing purposes.

16. Governing Law

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from these Terms or your use of our services shall, subject to Section 17, be subject to the exclusive jurisdiction of the courts of England and Wales.

17. Jurisdiction-Specific Provisions

17.1 California, USA (CCPA/CPRA)

If you are a California resident, you have privacy rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of your personal information. These rights are detailed in our Privacy Policy. Nothing in these Terms limits your rights under California law.

17.2 Brazil (LGPD)

If you are a resident of Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018), including the right to access, rectify, delete, and port your personal data, and to revoke consent. These rights are detailed in our Privacy Policy. Nothing in these Terms limits your rights under Brazilian law.

17.3 European Union

If you are an EU resident, you have rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your national data protection authority. Nothing in these Terms limits your rights under EU law.

18. Changes to These Terms

We reserve the right to update these Terms at any time. Changes will be posted on this page with a revised date. Continued use of the website or our services after such changes constitutes your acceptance of the updated Terms. Material changes will be communicated via our newsletter.

19. Contact

For any questions regarding these Terms & Conditions: backoffice@resonancefoundation.org

Show terms

I agree to the Terms & Conditions.

Only fill in if you are not human