Privacy
Your information. Handled with care.
We use the information you share to respond to questions, run recruiting and manage the club. Public pages have no analytics or advertising scripts. Staff sign-in uses a session cookie, and credited news images load from their publishers. Here is what we hold and why.
What loads
What your browser loads.
The files and services used to deliver and protect the site.
- Fonts
- Three typefaces, served as files from this domain. No external font provider receives a request when you read the site.
- Scripts
- Written here, built into the page, served from here. There is no tag manager, no embedded widget, no chat bubble, no advertising pixel and no A/B testing tool.
- Pictures and film
- Most images and film are served from this domain. News thumbnails and report covers load from their credited publishers or image hosts. Those requests reveal your IP address and browser information to the image provider. We omit the referring page address from these image requests.
- Cookies
- Public pages do not set analytics or advertising cookies. The private staff dashboard uses a session cookie for sign-in. External publishers and image providers have their own privacy policies; your browser controls whether they can use third-party cookies.
- Analytics
- No analytics script runs on this site. Nobody is counting your scroll depth, timing your visit or assembling a profile from either.
- Abuse prevention
- To limit automated submissions, the form service briefly uses hashed network and email identifiers in Cloudflare rate counters. Raw IP addresses are not saved in the application database. These counters do not track browsing behavior.
- Server logs
- Cloudflare keeps short-lived request logs, the way a web host does. Our code never writes a name, email address or form answer into those logs, and we do not use them to build a profile of a visitor.
The news page includes images hosted by the publishers it credits. Other public-page assets, including fonts and scripts, are served from this domain.
The news page, the footer and the source lists on the practice pages link to other people's sites. Once you are there you are on their site under their rules, and this page stops applying.
What you type
Three forms, and this is where each one goes.
A founder's question, a fund's brief or a student application. Each public form has a specific purpose.
- What is collected
- Your name, email address and the other information you enter in the form. There is one field you cannot see, an empty box that automated senders fill in and people never do, which is how a form with no puzzle on it stays usable.
- Where it goes
- Your submission is posted back to this domain. Cloudflare Workers and D1 validates it and stores it in the desk's private database. It has permission to hold what you sent for this one purpose and to do nothing else with it.
- Who reads it
- Approved administrators can review submissions for club work and recruiting. Correspondence uses our configured email providers, including Resend for recruiting. Group messages are sent separately to each recipient.
- What is never done with it
- Sold, rented, added to a mailing list you did not ask for, or passed to anyone else for their own use. There is no mailing list to be added to.
- How long it is kept
- Application and public-form records expire at the end of the academic year in which they arrive. Scheduled cleanup removes them and their linked database records. Provider email copies and recovery history follow their service retention settings. Club membership and operational records have the separate purpose described below.
- Having it deleted
- There is no form for this and no process to work through. Write to hello@ubuntuadvisorygroup.com and say so, and it goes, along with the copy the form handler is holding. You do not have to give a reason.
- Anything from a project
- Material a company shares once work is under way is not covered by this page. It is covered more strictly, under the confidentiality terms set out on how we work.
Club records
A shared record of the club’s work.
Membership and operational records support continuity between boards.
The private workspace holds member names, contact details, roles, attendance, projects, tasks, meeting notes, decisions and expenses entered by approved administrators. Change history records who updated a record and when.
These records are kept separately from recruiting applications and are not removed by the annual application cleanup. Archiving a club record preserves its history. Contact hello@ubuntuadvisorygroup.com about access, corrections or deletion of information about you.
Wherever you are reading this
One policy, not four.
Most people this site is written for are reading it from Lagos, Nairobi, Accra, Kigali, Johannesburg or Dar es Salaam, and the desk is run from Massachusetts. Several data protection laws therefore have something to say about the section above: Nigeria's Data Protection Act, Kenya's Data Protection Act, South Africa's Protection of Personal Information Act, and the General Data Protection Regulation for anyone reading from Europe.
They differ in their machinery. On the things a reader actually cares about they agree, and so does this page. You are told what is collected before you type it. It is used for the one purpose you gave it for. It is not sold and it is not passed on. You can ask what is held about you, ask for it to be corrected, and ask for it to be deleted, and none of those three is a favour.
One thing worth knowing before you type rather than after. What you send leaves the country you sent it from: the desk reads it in the United States, and the service handling the form may sit somewhere else again. That is true of most forms you fill in, and it is stated here instead of being left in a schedule nobody opens.
There is no version of this site that gives a reader in Lagos less than a reader in Berlin. Either the sentence is true in both places or it does not get published.
If a request is being made under one of those laws in particular, say which one and it will be answered on those terms. And if you would rather take a complaint to your own regulator than to us, that route is yours and nothing on this page asks you to give it up.
Who is responsible
An office you can write to, not a department.
Ubuntu Advisory Group is a registered student organisation at Williams College. The College does not run this site, and this policy is the group's own rather than the College's. In practice that means there is no privacy department to escalate to and no ticket queue. There is a small group of undergraduates, and one of them holds its records.
A request to see, correct or delete what is held about you goes to hello@ubuntuadvisorygroup.com, and somebody in the group is obliged to answer it.
No individual is named here, and no internal title either. Everybody on the desk turns over with the academic year, so either would be wrong within twelve months, and the obligation does not belong to a person. It belongs to the group and it passes to whoever is holding the records when your message arrives.
Reviewed 11 October 2026
If something here is wrong
Tell us, and it gets corrected.
A privacy page is only worth reading if it describes what the site actually does. If you open the network tab and find a request this page does not account for, that is our mistake and we would rather hear about it from you than not at all.