Skip to content

Legal & Compliance

Privacy Policy

This Privacy Policy explains how SPES Institute for Humanity and AI collects, uses, and protects your personal data when you visit spesinstitute.org.

Last updated: June 2026Effective: 1 June 2026

The Short Version

We keep it simple. We collect only what we need to run this website and respond to your messages. We never sell your data. Analytics cookies are off until you say yes. You're always in control.

The full details are below, written in plain language, not legalese.

1. Who We Are

SPES Institute for Humanity and AI is the organization responsible for this website and for the data it processes. We're based in Addis Ababa, Ethiopia.

SPES Institute for Humanity and AI

Addis Ababa, Ethiopia

Email: info@spesinstitute.org

Phone: +251 921 664 469

2. What We Collect & Why

When you contact us

If you fill out our contact form, we collect your name, email address, organisation (optional), and your message. We use this only to reply to you. We don't add you to any mailing list without your explicit consent.

When you browse (with your consent)

If you accept analytics, Google Analytics 4 records the pages you visit, time spent on each, your country level location, device type, and browser. It never captures your full IP address because GA4 anonymises it automatically.

The legal basis for this is your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time using the "Cookie Preferences" link in our footer.

For security (always on)

Our web server automatically logs technical data, including IP addresses, request timestamps, and status codes, purely for security and uptime monitoring. These logs are deleted after 30 days. The legal basis is our legitimate interest in keeping the site secure (GDPR Art. 6(1)(f)).

What we never collect

  • Passwords or financial information
  • Government IDs or sensitive personal data
  • Data from children under 16
  • Precise location data

3. Cookies & Analytics

Essential: always on, no consent needed

These two items are stored in your browser's localStorage, not as HTTP cookies. They're never sent to any server and aren't used for tracking.

NameWhat it doesStored
spes-color-modeRemembers your light / dark theme preferencelocalStorage
spes-cookie-consentRemembers your cookie choice so the banner doesn't re-appearlocalStorage

Analytics: only after you click "Accept Analytics"

We use Google Consent Mode v2. The GA4 script loads on every page, but it sends zero data to Google until you give consent. If you decline, no cookies are set and no data leaves your browser.

CookieProviderPurposeDuration
_gaGoogle LLCDistinguishes unique visitors2 years
_ga_EBPHYG6K2NGoogle LLCMaintains session state for GA42 years

Change your mind any time: click in our footer. Or block Google Analytics across every website you visit by installing the Google Analytics Opt out Browser Add-on ↗.

GA4 data is processed by Google LLC and may be transferred to their US servers under Standard Contractual Clauses. We've accepted Google's Data Processing Amendment ↗.

4. Your Rights

If you're in the EU, UK, or Switzerland (GDPR)

  • Access: Ask for a copy of the data we hold about you.
  • Correction: Ask us to fix inaccurate information.
  • Deletion: Ask us to erase your data ("right to be forgotten").
  • Restriction: Ask us to pause processing while a dispute is resolved.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Revoke analytics consent at any time via "Cookie Preferences" in our footer.
  • Complaint: Lodge a complaint with your national data protection authority.

If you're in California (CCPA / CPRA)

  • Know: Request the categories and specific pieces of personal information we hold.
  • Delete: Ask us to delete your personal information.
  • Opt out: We don't sell your data. You can still opt out of analytics sharing via "Do Not Sell My Data" in our footer.
  • Non discrimination: We will never treat you differently for exercising these rights.

To exercise any of these rights, email us at info@spesinstitute.org. For CCPA requests, include "CCPA Privacy Request" in the subject line. We respond within 30 calendar days.

5. How Long We Keep It

DataKept for
GA4 analytics14 months, then automatically deleted by Google
Contact form messagesUp to 3 years (correspondence records)
Server access logs30 days
Your consent recordUntil you clear it via "Cookie Preferences" or reset your browser

6. Children

Our website isn't directed at anyone under 16. If you believe a child has submitted personal data through our site, please contact us at info@spesinstitute.org and we'll delete it promptly.

7. Changes & Contact

If we update this policy, we'll revise the "Last updated" date at the top of this page. For material changes, we'll add a notice on the website.

Questions, requests, or concerns? Reach us here:

SPES Institute for Humanity and AI

Addis Ababa, Ethiopia

Email: info@spesinstitute.org

Phone: +251 921 664 469

We aim to respond to all privacy requests within 30 calendar days.