Trust & Privacy

How we handle information shared with CRCA.

This page is maintained by Conflict Research Consulting & Advocacy (CRCA) to answer common security and privacy questions about the CRCA website. It describes current, app-visible practices — it is not an independent certification or audit.

01

Shared responsibility

The CRCA website is built and operated by CRCA on the Lovable platform, which provides hosting and managed backend services. Platform-level capabilities are provided by Lovable; decisions about what information is collected, how it is used, who can access it, and how long it is kept are made by CRCA. Visitors are responsible for the accuracy of what they choose to submit through public forms.

02

Information we collect

The only routine personal information CRCA collects through this website is what visitors submit through the contact form on the Contact page: name, email address, organisation (optional), inquiry type, and message. We use this information solely to read and respond to your inquiry.

The site does not require an account to browse, does not run third-party advertising, and does not sell personal information.

03

How submissions are handled

Contact form submissions are validated on the server and stored in a managed database hosted on the Lovable platform. Access to stored submissions is restricted: the database denies direct read and write access from browsers, and submissions are written through a server-side function rather than from the visitor's device. Submissions are reviewed by CRCA staff to respond to inquiries.

04

Email

Operational emails (such as replies to inquiries and account-related notifications, where applicable) are sent from the crcahub.org domain using an authenticated mail setup with SPF, DKIM, and DMARC alignment on the sending subdomain.

05

Cookies and analytics

The CRCA website does not set marketing or advertising cookies. The hosting platform may use a small number of strictly necessary cookies to deliver the site reliably. If CRCA later adds analytics or other measurement tools, this page will be updated to describe them.

06

Retention and deletion

CRCA retains contact form submissions for as long as needed to respond to the inquiry and to keep a reasonable record of correspondence. You may request deletion of a submission you sent us by emailing the address below; please include enough detail for us to locate the message.

07

Security and privacy contact

To report a suspected security issue affecting this website, or to make a privacy request related to information you have shared with CRCA, email info@crcahub.org. Please describe the issue clearly and avoid including more personal data than necessary in the initial report.

08

Changes to this page

This page is editable content maintained by CRCA and will be updated as our website, integrations, or practices change. It is not a substitute for a formal privacy policy or data processing agreement; contact us if you need additional documentation for your organisation.