This policy explains how The Change Architect collects, uses and protects personal data when you use this website. We aim to handle your data lawfully, fairly and transparently, in line with the EU General Data Protection Regulation (GDPR) and applicable law.
This notice is provided in good faith as a general statement of our practices. It is not legal advice; specific situations may require tailored legal guidance.
1. Who we are
The Change Architect is an independent research programme run by Mohammed Al-Hajjaj (who also publishes under the pen name Olaf Dawson), based in Belgium. For any privacy question or request, contact contact@thechangearchitect.org. The Change Architect is the data controller for the personal data described here.
2. What information we collect
Newsletter and contact forms
If you subscribe to updates or send us a message, we collect the details you provide — typically your name, email address and message. These forms are delivered to us through the form-processing service FormSubmit.
Member accounts
If you create a free account, we collect your email address and authentication details. Sign-in and accounts are handled through Google Firebase Authentication. If you sign in with Google, Google shares basic profile information with us in line with your Google settings.
Organisation directory
If you submit an organisation to the directory, we collect the details you enter — for example organisation name, type, registration number and date, country, areas of activity, description, website, logo link, and a contact name and email. You confirm consent before submitting. Submissions are reviewed before any are published, and only the organisational fields (not your contact email) are shown publicly.
Member tools (planner and procurement tracker)
These tools save your entries locally in your own browser (local storage) on your device. That data stays on your device and is not transmitted to or stored on our servers.
Governance Assistant
When you use the AI assistant, the messages you send are processed through the Anthropic API to generate a reply. We do not store your conversations on our servers, and the content is not used to train AI models.
Donations
Donations are processed by Stripe. Stripe handles your payment details directly; we do not receive or store your card information.
Technical data
Like most websites, our hosting provider automatically records basic technical information (such as IP address and browser details) in server logs, used for security and to keep the site running.
3. How we use your information and our legal basis
- To send updates you asked for — based on your consent.
- To respond to your messages and requests — based on our legitimate interest in communicating with you.
- To operate member accounts and member tools — to provide the service you requested.
- To run the organisation directory and review submissions — based on your consent and our legitimate interest in maintaining an accurate directory.
- To process donations — to complete the transaction you initiated.
- To keep the site secure and working — based on our legitimate interest.
4. Who we share it with
We do not sell your personal data. We share it only with service providers that help us run the site, who process it on our behalf: FormSubmit (forms), Google Firebase (accounts), Anthropic (AI assistant), Stripe (payments), and our hosting provider. Some of these providers may process data outside the European Economic Area; where they do, appropriate safeguards are intended to apply. We may also disclose information where required by law.
5. How long we keep it
We keep personal data only as long as needed for the purposes above or as required by law. Newsletter data is kept until you unsubscribe; directory listings until you ask us to remove them or they are withdrawn; account data while your account is active. You can ask us to delete your data at any time.
6. Your rights
Subject to applicable law, you have the right to access your data; to correct it; to ask us to delete it; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these, email contact@thechangearchitect.org. You also have the right to lodge a complaint with your local data protection authority (in Belgium, the Data Protection Authority / Autorité de protection des données).
7. Cookies and local storage
We keep cookies to a minimum. Some features — sign-in and the member tools — use cookies or browser local storage on your device to work properly. You can clear these through your browser settings, though some features may then stop working.
8. Children
This site and its services are intended for professionals and organisations, not for children, and we do not knowingly collect data from children.
9. Changes to this policy
We may update this policy from time to time. We will change the "last updated" date above when we do, and significant changes will be made clear on this page.
10. Contact
For any question or request about your data, contact contact@thechangearchitect.org or write to The Change Architect, Brussels, Belgium.