Privacy Policy
Last updated: August 2026
What this notice covers
This notice describes how the Center on Long-Term Risk (CLR) collects, uses and shares your personal information when you apply for a job, program or grant with us, subscribe to our mailing list, attend one of our events, donate to us, or contact us.
CLR is the controller for the personal information described here, except where this notice says otherwise. We are a charity registered in England and Wales (no. 1195079), and UK data protection law applies: the UK GDPR and the Data Protection Act 2018.
What we collect and why
| Information | Purpose | Lawful basis |
|---|---|---|
| Contact details: your name, email address, and any postal address or phone number you give us | Corresponding with you, and administering our programs and events | Legitimate interests, or contract where we are employing you or making you a grant |
| Application information, including your CV, work history, referees, and your answers to our questions, when you apply for a job, a place on one of our programs, or a grant from the CLR Fund | Assessing your application and telling you the outcome | Legitimate interests, or contract |
| Event information, including any dietary or access requirements you tell us about | Running our events and programs | Consent |
| Your email address, if you subscribe to our mailing list | Sending you our updates | Consent |
| Donor information, including your name, email address, and the amount and date of your donation, and your bank details where you pay us directly | Thanking donors, answering their questions, and recording our income | Legitimate interests, and legal obligation for financial records |
| Correspondence you send us | Answering it, and keeping a record of our dealings with you | Legitimate interests |
Where the table says legitimate interests, those interests are running CLR as a charity: recruiting staff, selecting fellows and grantees, putting on our events and programs, keeping proper records, and staying in touch with the people who support our work.
Some of what we collect is special category data under UK data protection law: an access or dietary requirement for an event, which can reveal information about health or religion, and the optional diversity monitoring form applicants can fill in after applying. We collect it with your consent. We use requirements only to make the arrangements you asked for, and monitoring answers only to understand who applies to us, not to assess applications.
Information from other sources
When you apply for a job, a place on one of our programs, or a grant, we may collect information about you from referees you have named, and from public sources such as your published work, personal website or professional profile.
If someone names you as their referee, we hold your name and contact details and what you tell us about them, and use it only to assess their application.
How we make decisions
We do not make decisions about you by automated means alone. We sometimes use AI tools to help us read and summarise applications, but the person deciding reads the application itself.
This website
This site sets no cookies and uses no analytics.
Application forms are hosted by Google or Airtable. Subscribing to our mailing list takes you to Buttondown, which records whether our emails are opened and which links are clicked.
Donations
Most donations to CLR are processed by Giving What We Can, who take the payment, issue receipts and claim Gift Aid. They are a separate controller for the information you give them, and their privacy notice governs it. We never receive your card details.
Giving What We Can passes us donor details where a donor has agreed to be identified to us. Some donations are arranged directly with us instead: donations to the CLR Fund, some larger gifts, and older recurring donations set up before the Giving What We Can arrangement. Our bank and accounting records then show your name and account details.
We also hold records of donations made before this arrangement, including donations to the Effective Altruism Foundation, which CLR was part of until the end of 2021. Charity and tax law requires us to keep records of our income.
Donations made through another organisation, such as Effektiv Spenden, are covered by that organisation's own privacy notice.
Who we share it with
We do not sell personal information, and we do not share it for advertising.
We use service providers who process personal information on our behalf, under contract and on our instructions. They include Google (Workspace, Forms and Drive), Airtable, and Buttondown.
We also disclose personal information to our auditors and professional advisers, and to the Charity Commission, HMRC or others where the law requires it.
Transfers outside the UK
Some of our service providers are based in the United States or process personal information there. Where personal information is transferred outside the UK, we rely on the safeguards UK data protection law provides for, such as an adequacy decision or the International Data Transfer Agreement.
If you work for us
If you join CLR as an employee or contractor, we hold what we need to employ you and meet our obligations as an employer: your contract and personal details, right-to-work documents, bank details and payroll records, pension details, absence and sickness records, and notes of our management of your work. We share these with HMRC, our pension provider, our payroll and accounting providers, and our auditors. Our lawful bases are contract, legal obligation, and our legitimate interest in running the organisation.
How long we keep it
We keep personal information for as long as we need it for the purposes described above, and for as long as charity, tax and employment law requires us to keep the relevant records. We review what we hold from time to time and delete what we no longer need.
Your rights
You have rights over your personal information under the UK GDPR, including rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where we rely on it. To exercise any of them, email info@longtermrisk.org.
You can also complain to the Information Commissioner's Office, at ico.org.uk/make-a-complaint.
Changes to this notice
We update this notice when what we do with personal information changes. The date at the top is when we last did.
Who we are
Center on Long-Term Risk, a charity registered in England and Wales (no. 1195079). Registered office: 69 Wilson Street, London, EC2A 2BB.
Questions about this notice: info@longtermrisk.org.