Protecting young members' data
Young people are at the heart of what we do, so we treat their data with particular care. This page is a plain-language overview of how we protect it. It sits alongside our Privacy Policy and is provided for transparency; it is not legal advice.
Care in layers
We do not rely on any single measure. Protection comes from several layers working together, so that if one is ever tested, others still stand.
We collect as little as possible. We ask only for what an application actually needs. A parent or guardian's details are collected only when a member's age requires consent, and never otherwise.
Everything travels encrypted. Every connection to the portal uses an encrypted (HTTPS) channel, so data is protected on its way to and from us.
Sensitive contact details are encrypted where they are stored. A guardian's name, email and phone number are encrypted at rest. Even a copy of the database cannot read them without a separate key that is kept apart from the data.
Backups are encrypted too. Our database backups are encrypted and kept outside the public area of the website, so a stray backup file is not a way in.
Access is limited and logged. Only a small number of authorised people can reach member data, only for as long as their role needs it, and sensitive actions are recorded so we can always see who did what.
Guardian consent, then automatic clean-up. For members below the digital age of consent, a parent or guardian must consent first. Once a member reaches the age at which they can consent for themselves, the guardian's details are deleted automatically.
Extra care for under-18s. Our account-security location check, which flags an unusual sign-in for a person to review, is never applied to under-18 members. Their sign-ins are not logged in that way at all.
Kept only as long as needed. We keep data only for as long as it is needed, then delete it, and you can ask us to access, correct or delete what we hold at any time.
Why we do not publish the fine detail
This page describes our approach, not a step-by-step manual. For security reasons we do not publish the exact methods, keys, or settings we use, because doing so would only help someone trying to get around them. If you are a parent, guardian or member and want to understand more, or exercise any of your rights, contact us at info@nordicdiplomacy.org and we will be glad to help.
Nordic Diplomacy Initiative. Guided by the North.