Privacy Policy


Last update: August 28, 2023

This website is operated by the Open Society Foundations (OSF). This privacy policy provides information about the different types of personal information that we collect and the ways in which we use it. This privacy policy applies to all those who interact with us online (particularly through the website https://www.essentialforrecovery.org and any other website we own or operate) or whose personal information we otherwise collect (although please note that if you are an employee or worker at OSF, there is a separate privacy policy).

If you have any questions, please feel free to contact us using the contact details included at section 18.

  1. Who we are
  2. When do we collect personal information about you?
  3. What personal information do we use?
  4. What information is collected automatically online?
  5. What about personal information that is considered more sensitive?
  6. How we use your personal information
  7. Lawful grounds
  8. Use of our online services
  9. Do we share your personal information?
  10. International data transfers
  11. Securing your personal information
  12. How long do we keep your personal information?
  13. Children
  14. Your rights and preferences
  15. Other websites
  16. Social media
  17. Updating this privacy policy
  18. How to contact us

1. Who we are

This privacy policy describes how OSF will collect and use your personal information when you interact with us online or when we otherwise collect and use your personal information. The Open Society Foundations have offices located through the world. You can learn more about where we are located on our Offices page. While our website is operated by OSF in the United States, the personal information we collect (through the website or otherwise) may be used by any of our family of offices and foundations in line with the purposes set out in this privacy policy. When we refer to OSF in this privacy policy, we include all OSF offices and foundations.

Please note that there are certain aspects of this privacy policy that only apply when we are required to comply with specific laws (e.g., the European data protection law, the General Data Protection Regulation). In some instances, EU data protection law may apply. Please see section 10 for information about the transfer of your personal information.

The representative of the Open Society Foundations’ U.S. entity that operates our websites, the Open Society Institute, in the EU is Open Society Foundation–London.

2. When do we collect personal information about you?

We may obtain your personal information from a number of sources including:

  1. When you give it to us directly. For example, if you provide us with your email address to sign up to receive our news updates or if you provide us with your name and email address when you leave a comment on our website.
  2. When we obtain it indirectly. Your personal information may be shared with us by third parties such as recruitment agencies when we are recruiting staff and vetting agencies when we gather information on grant applicants. To the extent that we have not done so already and that we are required to, we will notify you when we receive personal information about you from them, and tell you how and why we intend to use that personal information.
  3. When it is publicly available. Your personal information may be available to us from external publicly available sources. This includes information available on government websites (e.g., U.S. Federal and European institutions) or non-OSF company or institutional websites.
  4. When you visit our website. Our website uses cookies and other tracking technologies to improve your experience of our website—this can involve collecting personal information. We will only deploy non-essential cookies, including analytics cookies, with your consent. Please refer to our Cookie Policy for details of the way the use of cookies may affect your personal information and to update your preferences.

3. What personal information do we use?

4. What information do we collect online?

We will also collect certain information when you interact with our website. We do this through server log files, cookies, and pixel tags. While the information obtained may not be personal information under the laws of the country you are based in, we recognize that there are certain laws (e.g., EU law) where this information is likely to be personal information.

For instance, we identify and log the Internet Protocol (IP) address of the device you use to access our website automatically in our server log files whenever you visit our website, along with the time of your visit and pages you visit. While the intention of such a practice is to calculate website usage levels and to help us diagnose problems with the website’s servers, we recognize that an IP address is also an online identifier which can be used to create profiles of individuals behind devices. Thus, if we combine non-personal information with personal information, we will treat the combined information as personal information as long as it is combined.

We will only deploy non-essential cookies, including analytics cookies, with your consent. Please see our Cookie Policy for further information about how we collect and use cookies and pixels and our use of analytics.

5. What about personal information that is considered more sensitive?

Certain countries have laws that recognize particular types of personal information as more sensitive and therefore requiring greater protection. We collect these types of personal information in limited circumstances. For instance, we may collect personal information about health, religion, ethnicity, sexual life, and political opinions. We may also collect personal information about criminal convictions and offenses.

We will only collect and use this sensitive information if there is a valid reason for doing so and where the law allows us to. For instance, there are stricter rules about the collection and use of sensitive information where EU law applies. When we collect sensitive information or criminal conviction data about you and we are required to tell you what our lawful basis is for doing so, we will set this out.

6. How we use your personal information

OSF will use your personal information:

7. Lawful grounds

Under certain laws, we are required to rely on one or more lawful grounds to collect and use the personal information that we have outlined above. We consider the grounds listed below to be relevant:

  1. Legal obligation. Where the processing of your personal information is necessary for us to comply with a legal obligation to which we are subject (e.g., because we have to provide information to tax authorities).
  2. Contractual relationship. Where it is necessary for us to use your personal information in order to perform a contract to which you are a party (or to take steps at your request prior to entering a contract).
  3. Legitimate interests. We rely on this basis where applicable law allows us to collect and use personal information for our legitimate interests and the use of your personal information is fair, balanced, and does not unduly impact your rights. For instance, it is in our legitimate interest to use personal information in association with planning of, delivery of, and monitoring of our programmatic work and grant making.
  4. Consent. We may obtain your consent to use your personal information in certain circumstances (e.g., to send you email marketing or for the use of non-essential cookies). We will ensure that when we obtain your consent, you are free both to give it and to decline to give it. Additionally, you may always withdraw your consent at any time without any further detriment to you.

8. Use of our online services (e.g., forums, blogs, comments)

We may make available certain interactive services through our website such as message boards, blogs, comment section and wikis (“Forums”). You will be able to post comments, information and materials to Forums. Please see our Community Guidelines.

Any information (including personal information) that you post in a Forum becomes public information and may be available to other visitors to our website and to the general public. Apart from posting directly in a Forum, you will also be able to share your comments via email, which then may be published on sections of our website where we post comments. We reserve the right to only publish selected comments, and we may edit them before publishing for brevity, style, grammar or clarity. In addition, your name will be available in association with any posting you make. Additionally, information regarding your Forum activities is also available for other users to view.

Please exercise caution and discretion when posting information (including personal information) in a Forum. In particular, please do not post personal information about other individuals unless you are confident that they would not object to their personal information being used in this way. If you post any personal information relating to other people, you represent that you have the authority to do so and to permit us to use the information in accordance with this privacy policy. OSF IS NOT RESPONSIBLE FOR THE USE BY OTHERS OF THE PERSONAL INFORMATION THAT YOU DISCLOSE IN FORUMS.

If you are a resident of California, under 18, and a registered user of the services, you may ask us to remove content or information that you have posted to the services by contacting us using the details at section 18. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your content may have been reposted by another user.

9. Do we share your personal information?

Personal information collected by OSF (through the website or otherwise) may be shared between any of our family of offices and foundations in line with the purposes set out in this privacy policy in section 6 and in accordance with the international data sharing agreements between OSF offices.

We may also share your personal data with organizations we partner with in pursuit of the same programmatic objectives as set out in section 6 of this privacy policy.

Apart from where set out in this privacy policy, OSF will not sell, rent, or lease your personal information to other third parties. However, we may ask third-party processors to assist us or we may disclose your personal information to selected third-party processors (such as agents or sub-contractors) for the purposes outlined at section 6. The third party in question will be obligated to use any personal information they receive in accordance with our instructions.

For instance, we use a third-party marketing automation platform to assist with managing email addresses and sending emails to our subscribers. When you sign up to receive email updates from us and provide us with your email address, you will receive an automated email originating from this third party confirming your subscription and providing you with a link to unsubscribe from the list.

We may also engage third parties to assist us with website hosting, data analysis, transaction processing, grant making, and other administrative services.

We reserve the right to disclose your personal information to third parties:

10. International data transfers

Certain countries have rules around the transfer of personal information and require us to ensure that personal information remains protected according to appropriate standards. If you are located in the United Kingdom or the EU or your personal data is collected and used by an organization in the United Kingdom or the EU, please note that certain countries outside of the United Kingdom or the EU have a different standard of protection for personal information. In such cases, where your personal information is transferred, stored, and/or otherwise processed outside the United Kingdom or EU on a regular basis, we will implement appropriate safeguards designed to protect your personal information. The full list of countries recognized by the European Commission as providing an adequate level of protection is available here.

We may engage third parties outside the United Kingdom and the EU to process personal information on our behalf. Since personal information may be shared between OSF entities, personal information is transferred outside the United Kingdom and the EU to OSF in the United States.

If you have any questions about the transfer of your personal information, please contact us using the details at section 18.

11. Securing your personal information

OSF takes reasonable technical and organizational precautions to prevent the loss, misuse, or alteration of your personal information. We restrict access to those who have a need to know and we train staff in handling the information securely. Unfortunately, there is no such thing as perfect security in the online environment. As a result, we cannot and do not guarantee the security of any information you transmit to us through or in connection with the website.

If you believe that your interaction with us is no longer secure (e.g., you consider that the security of any account you might have with us has been compromised) please immediately notify us by contacting us at dataprotection@opensocietyfoundations.org.

12. How long do we keep your personal information?

We will keep your personal information for as long as necessary:

13. Children

Our website is not intended to be used by individuals who are under the age of sixteen (16). If you are under the age of sixteen (16), please do not provide personal information to us or through our website.

14. Your rights and preferences

Please note that we will honor your requests to exercise your rights to the extent possible and required under applicable law. Certain of these rights may only be available to individuals who interact with our UK or EU offices and to individuals who are located in the United Kingdom or the EU who are on our mailing list.

You have the right to:

Please note that you also have the right to lodge a complaint with your local data protection authority about how we use your personal information if you are located in the United Kingdom or the EU or your personal data is collected and used by an organization in the United Kingdom or the EU. Please always consider raising your concern with us first by contacting us using the contact details in section 18 below.

Your choices regarding our use and disclosure of your personal information

We give you choices regarding our use and disclosure of your personal information for marketing purposes. You may opt-out from:

We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing-related emails, text messages, or paper communications from us, we may still send you important administrative messages, from which you cannot opt-out.

15. Other websites

The website may contain links to third-party websites. These linked websites are not under OSF’s control and we are not responsible for the privacy practices or the contents of any such linked website, or any link contained in any linked website. We provide such links only as a convenience, and the inclusion of a link on the website does not imply endorsement of the linked website by OSF. If you provide any personal information through any such third-party website, your interaction will occur on such third-party’s website (not on our website) and the personal information you provide will be collected by, and controlled by, the privacy policy of that third party. We recommend that you familiarize yourself with the privacy policies and practices of any such third parties. PLEASE NOTE THAT THIS PRIVACY POLICY DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY THIRD PARTIES.

16. Social media

To interact with you and provide you with more information about our work, we use multiple social media platforms (e.g., Twitter, Facebook, Instagram, Threads, YouTube, LinkedIn, and TikTok) to share posts, photos and content related to OSF and its members. We engage with you using social media platforms as a part of our legitimate interests. Our use of these platforms involves the use of third-party service providers who may engage in extensive data collection for their personal use. We ask you to refer to the privacy policies of each platform for more detailed information.

OSF has access to the following personal data that you may make available to us:

Our processing of your data using social media platforms is kept to a minimum. Apart from the limited processing described below, we do not collect or store your information or any other purposes. We process your data to:

Any information that you choose to submit to us via these platforms is done at your own risk without any expectation of privacy. Social media platforms may host external links and other users and we cannot control the actions of such users or the platforms themselves. Such platforms may also engage in additional plug-ins, cookies or data collection which is governed by their internal privacy policies. We encourage you to be aware of your digital rights before interacting with us on social media.

17. Updating this privacy policy

OSF may update this privacy policy by posting a new version on our website. If we update this privacy policy in a way that significantly changes how we use your personal information, we will bring these changes to your attention. Otherwise, we would recommend that you periodically review this privacy policy to be aware of any other revisions.

18. How to contact us

OSF’s Office of the General Counsel is responsible for monitoring compliance with relevant legislation in relation to personal information. You can contact the Office of the General Counsel if you have any questions about this privacy or our treatment of your personal information:

Email: dataprotection@opensocietyfoundations.org

Post: Office of the General Counsel, Open Society Foundations, 224 West 57 St, New York, NY 10019