Privacy Policy
This policy covers the New Generation Leaders Summit website and the application process. It explains what we collect, why, and what you can do about it. It is written to be read, not to be skipped.
1. Who we are
The New Generation Leaders Summit is organised by Better World Charity, an international non-profit organisation, which is responsible for the personal information described here. To reach the people responsible for this policy, use the contact form.
2. What we collect
When you apply or register: your name, email address, phone number, gender, date of birth, nationality, country and city of residence, organisation and position, an optional LinkedIn or CV link, and your answers to the application questions.
When you pay: Stripe processes your card on its own secure page. We receive confirmation of the payment, the amount, and the email address used. We never see or store your card number.
When you are confirmed as a delegate: the passport details we need to issue your visa invitation letter and to book your hotel or flight. We ask for these by email only once your place is confirmed.
When you browse: a record of the pages you open, the time, your IP address, your browser and the referring site. Subscribing to our newsletter or writing to us through the contact form means giving us the details you type in.
3. Why we hold it
To assess your application fairly, to contact you about it, to issue invitation letters, to arrange accommodation and travel for funded delegates, to keep the Summit safe, and to report anonymised statistics (for example, how many countries were represented) to our partners. We do not sell, rent or trade your information.
Your application is read by our selection committee, which may include volunteers and representatives of partner organisations bound by confidentiality. Hotels, airlines and transport providers receive only what they need to provide the service.
4. Legal basis
Where data protection law such as the GDPR applies, we process application data to take steps at your request before entering into an agreement with you, payment and travel data to perform that agreement, and browsing data on the basis of our legitimate interest in running the website. Newsletter emails are sent only with your consent.
5. Third parties
We use Stripe for payments, an email provider to send messages, and, depending on how this site is configured, Google Analytics, Google Tag Manager, the Meta pixel, Microsoft Clarity and Google reCAPTCHA. Each operates under its own privacy policy. Our cookie policy lists what may be in use.
Some of these providers process data outside your country. Where they do, they rely on recognised safeguards such as standard contractual clauses.
6. How long we keep it
Applications that are not selected are deleted two years after the Summit they were made for. Confirmed delegates' records are kept for six years for accounting and reporting purposes, after which passport details are deleted and the rest is reduced to what we need to issue certificates and keep an alumni list. Payment records are kept as long as the law requires.
7. Your rights
You can ask what we hold about you, ask for it to be corrected or deleted, object to how we use it, or ask for a copy in a portable form. Use the contact form and we will answer within thirty days. You also have the right to complain to the data protection authority in your country.
8. Children
Applicants must normally be 18 or older. We do not knowingly collect information from anyone under 16 without the consent of a parent or guardian.
9. Security
We implement industry-standard security measures including HTTPS encryption, hashed password storage, two-factor authentication for admin accounts, and regular security audits. No system is 100% secure — if you believe your data has been compromised, contact us immediately.
This platform was designed and built by Uni B Agency, a digital technology company specialising in secure web application development. All encryption protocols, data transmission standards, and application-level security architecture implemented on this platform comply with Uni B Agency's Web Security & Data Protection Standards — a documented framework governing how client platforms collect, transmit, store, and protect user data. Details of those standards, including our approach to AES-256 data encryption at rest, TLS 1.3 in transit, and secure session management, are published on the Uni B Agency Technology Partner page.
A full copy of that statement is kept on this page.
10. Changes
If this policy changes in a way that affects you, the date below changes with it, and applicants with an open application will be told by email.
Last updated 15 October 2026.