Privacy Policy

1. Who we are

This website, womenshealth2040.org, is operated by Julia Persson, based in Denmark, as part of the Women's Health 2040 initiative developed in partnership with the Copenhagen Institute for Futures Studies (CIFS).

Julia Persson is the data controller responsible for the processing of personal data through this website.

2. What data we collect

We aim to collect as little personal data as possible. Here is what we may process:

• Contact information — if you email us at hello@womenshealth2040.org, we receive your email address and message content.
• Network forms — when you sign as a Supporter or apply as an Ambassador or Partner Organisation at /join, we process what you enter on the form to review and manage participation in the WH2040 network. For Supporters that is your name, email, and optionally your role and organisation, plus your country. For Ambassadors it also includes a short bio and how you would like to engage; for Partner Organisations, the organisation details and a named contact. Photographs and logos are requested separately, by email, only if an application is approved.
• Public listing — if you ask to be listed, your name, role, organisation and country appear on the public Network page. Supporters are listed in a personal capacity; an organisation shown beside a name identifies the person and does not indicate that the organisation endorses the Charter. Nothing is published until you confirm by clicking a link we email to you, and you can withdraw with one click at any time.
• Weekly Intelligence Brief — if you subscribe, we store your email address, and your name where you give it, to send the Brief. Subscription is never automatic: you have to tick the box.
• Charter chat messages — questions you type into the Charter AI assistant are sent to our server to generate a response. These messages are not stored after the session ends.
• Technical data — our hosting provider (Vercel) may automatically collect standard server logs including IP addresses, browser type, and referring pages for security and performance purposes.

3. Legal basis for processing

We process your data based on:

• Consent — when you use the Charter AI assistant, when you subscribe to the weekly Intelligence Brief, and when you ask to be listed publicly on the Network page. Consent can be withdrawn at any time, and withdrawing it is one click in any email we send you.
• Legitimate interest — when responding to enquiries you send us via email, when reviewing an Ambassador or Partner Organisation application you have submitted, and when maintaining the security and availability of our website.

4. How we use your data

• To respond to enquiries you send us via email.
• To provide the Charter AI chat feature — messages are forwarded to the MiniScita inference endpoint for processing and are not retained by us.
• To evaluate and manage Supporter, Ambassador and Partner Organisation participation, including publishing the listings you have asked for.
• To send the weekly Intelligence Brief, where you asked for it.
• To maintain the security and availability of our website.

5. Cookies

We use only essential cookies required for the website to function. We do not use analytics, advertising, or third-party tracking cookies. For full details, see our Cookie Policy.

6. Third-party services

• Vercel — hosts this website. Privacy policy
• Cloudflare — provides DNS and access control infrastructure for the MiniScita inference endpoint used by the Charter AI assistant. Privacy policy
• HighLevel (LeadConnector) — the customer relationship system where network form submissions and Brief subscriptions are held, and from which our emails are sent. Data is processed on servers in the United States under the provider’s standard contractual clauses. Privacy policy

7. Data retention

This website itself stores nothing about you: it holds no accounts, no profiles and no tracking. Charter chat messages are not stored after your browser session ends, and email correspondence is kept only as long as it takes to answer you.

Records created by the network forms are held in our customer relationship system for as long as you are part of the network. An application we decline is kept for twelve months so that we can recognise it if you come back to us, and is then deleted. If you withdraw, your public listing comes off the site that week and the underlying record is deleted on request.

8. Your rights

Under the EU General Data Protection Regulation (GDPR) and applicable Danish and Nordic data protection laws, you have the right to:

• Access any personal data we hold about you.
• Request correction or deletion of your data.
• Request portability of your data.
• Object to or restrict processing of your data.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

9. Contact

For any privacy-related questions, please contact us at hello@womenshealth2040.org.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.