Legal

Privacy
policy.

How we handle (or rather: do not handle) your data.

Ebando's position — V1

We do not collect.

A website's privacy policy is often a long, vague text. Ours is short and precise: no personal data is collected by ebando.org. No database. No user account. No commercial tracking. No third-party cookies. No sharing with anyone whatsoever.

Here are the details.

What we do not collect

  • No email is stored by the site. When you use the contact form or a link, your message is pre-filled and then sent from your own WhatsApp or your own mail client — the site never keeps it.
  • No health data transmitted to the site. The pre-initiation questionnaire is filled in directly in your browser: your answers stay on your device, with nothing sent to or stored on our servers. You then generate a PDF that you send to us yourself by email. Your health data NEVER passes through our site.
  • No third-party cookie — no Facebook Pixel, no Google Analytics, no TikTok pixel, no AdWords retargeting.
  • Embedded videos (YouTube, Vimeo) load only at your explicit request: until you click “Play video”, no request is sent to those third-party services and no cookie is set.
  • No user account, no password.
  • No fingerprinting, no browser fingerprint stored.
  • No sharing of data with third parties for commercial, advertising or external statistical purposes.

What we measure (anonymously)

Current V1: no measurement tool is installed on the site.

V1.1 (upcoming, subject to change): the association may activate Cloudflare Web Analytics — a cookieless, GDPR-friendly audience measurement tool that counts page views and traffic sources without identifying visitors. No IP address is stored permanently. No unique identifier is assigned. You will be able to block it with any ad blocker — this will not degrade your experience.

Your rights (GDPR)

You have the right of access, rectification, erasure and portability of your data.

Ebando specificity: as we do not collect data via the site, these rights are essentially trivial here. For the data you send us by email (questionnaire, correspondence), Ebando applies GDPR principles: erasure on request, access on request, no transfer to third parties.

To exercise your rights: OngEbando@gmail.com.

Your data by email (off-site)

When you write to us by email (completed questionnaire, first contact, request for bank details, logistical exchanges), your data reaches Ebando's mail server, off the website.

This data is:

  • Consulted by the Ebando team only
  • Kept in Ebando's internal records, for administrative management and follow-up purposes
  • Never shared with third parties
  • Deletable on request at any time

Legal basis: the association's legitimate interest in organising and following up initiations. Retention: for the duration of the exchange and follow-up, then deletion or minimal archiving — and immediate deletion on request.

Health data (GDPR Article 9)

The pre-initiation questionnaire touches on health data (cardiac, hepatic and psychological history, relationship with substances). This information falls under Article 9 of the GDPR (special categories of data) and calls for heightened care.

  • Purpose : to assess with you whether an initiation can take place safely.
  • Legal basis : your explicit consent (Art. 9-2-a), together with the protection of your vital interests during the ceremony (Art. 9-2-c).
  • No collection by the site : the questionnaire is filled in your browser and is never sent to the website. You generate a PDF that you forward to us yourself.
  • Transfer by email : if you send it by email, delivery is not end-to-end encrypted. You may prefer to hand the document over in person on arrival.
  • Retention : for the duration of your journey, then deletion or minimal archiving — deletable at any time on request.

You give this consent explicitly and separately in the questionnaire, and may withdraw it at any time. The path is reserved for adults.

Image rights

Photographs of people (initiates, celebrants, team members, participants) appear on this site and our materials. They are published with the agreement of the people concerned.

Are you in a photo and would like it removed? Just ask: we remove the image on simple request, without you having to justify yourself, as soon as possible.

For a removal request, write to OngEbando@gmail.com or contact the team on WhatsApp (see the contact page).

Hosting and data location

The site is hosted by Cloudflare, Inc. (San Francisco, United States). No personal data is stored by Cloudflare on behalf of Ebando.

Cloudflare collects technical logs (IP address, user-agent) for security, anti-DDoS and content-delivery (CDN) purposes, in accordance with its own privacy policy: cloudflare.com/privacypolicy ↗.

Cookies

No cookie is set by this site.

The site is statically generated and keeps no session: it sets neither third-party tracking cookies nor a technical session cookie.

Changes to this policy

This policy may evolve if Ebando adds features (for example a web form that would store data server-side — the current contact form stores nothing and simply opens WhatsApp or your mail client — or the activation of Cloudflare Web Analytics). Any change will be dated and published on this page.

Last updated: June 2026.

GDPR contact

For any question about this policy, or to exercise a GDPR right: OngEbando@gmail.com.