Privacy
Collect little. Explain it plainly.
This notice describes the interest form on this site: what it collects, why it is collected, who can review it, and how a response can be removed. It makes no blanket claim of legal compliance.
On this page
What we collectWhy we collect itWhere it is storedWho can review itYour choicesWhat is not collectedWhat the form collects
Your email, country, and answers to the three Candidate Threshold questions. You may also provide a name or chosen name, city or region, and separate consent to receive occasional fellowship updates.
The system also creates a random submission reference, records the time received, consent states, and an internal review status. An authorised reviewer may add a short private note.
Why it is collected
To understand serious interest in the Fellowship, consider how people might participate across places, review responses during the membership inquiry process, and contact respondents where appropriate. Optional update consent is separate and is not required for a response to be reviewed.
Where it is stored
Responses are stored in a structured database attached to this Sites application. One complete copy is also submitted through Proton SMTP to the restricted administrator mailbox using STARTTLS-encrypted transport. This is transactional delivery, not a mailing-list integration.
Proton states that SMTP-submitted messages are not end-to-end encrypted. Proton stores the message with zero-access encryption, and may retain one copy in the sender’s Sent folder and another in the administrator’s Inbox.
The browser does not receive other people’s responses, database credentials, mailbox details, or administrator configuration. The application does not store IP addresses in its submissions database.
The hosting and delivery providers may keep operational, security, and delivery records needed to run and protect their services. Those records are controlled at the provider level rather than used by this application for candidate profiling.
Who can review it
Only a person who signs in through the hosting platform and whose email matches the server-side administrator allowlist can open the database review area. A copy is delivered only to the restricted administrator mailbox. Proton processes the copy for SMTP delivery and mailbox storage. No automated ranking, personality score, ideological score, or AI candidate selection is used.
Your choices and deletion
Sending a response requires consent to database storage, administrator review, and emailing one complete copy to the authorised administrator. Fellowship updates are optional. Records are kept for membership inquiry review or until deletion is requested.
After submission you receive a private reference. You can use that reference and the submitted email to erase your personal and reflective content from the application database through the self-service deletion page. This also cancels an unsent email copy. A minimal deletion marker remains so the system can record that the request was honoured.
Self-service deletion cannot recall or erase a copy already submitted to Proton, including Sent and Inbox copies or provider records outside the application database. The administrator is responsible for mailbox retention and for manually deleting those copies where appropriate.
Delete a responseWhat the form does not collect
No date of birth, identity document, home address, employer, religious or political affiliation, income, health information, sexual information, password, payment information, or unnecessary sensitive personal data. There are no advertising trackers, behavioural analytics, or mailing-list integrations in this form. Proton SMTP is used only for transactional delivery and storage of the authorised administrator copy.