ASSEMBLE PRIVACY POLICY

Last updated 15 September 2025

Assemble is a global philanthropic alliance with the purpose to drive the transition to affordable, emissions-free, and resilient buildings for all.

This Privacy Notice for Assemble (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you engage with Assemble, including when you:

  • Visit our website or any website of ours that links to this Privacy Notice
  • Engage with us in other related ways, including via electronic communication, marketing, or events.

Legal identifiers. Assemble a fiscally sponsored project, in the United States of America, under Rockefeller Philanthropy Advisors, Inc. Federal Tax Identification Number (FTIN) 13-3615533.

 

  1. WHAT INFORMATION DO WE COLLECT?

We collect personal information that you provide to us voluntarily when you engage with us, participate in activities, register for our newsletter, or contact us.

The types of personal data we may collect include:

  • Contact information: Names, email addresses, phone numbers, postal addresses
  • Professional information: Job titles, organizational details, and information about your work in the built environment
  • Sensitive information: Diversity monitoring data or other sensitive information provided voluntarily and where legally permitted
  • Technical and usage information: IP address, device and browser information, operating system, location data, cookies, and similar technologies
  • Relationship-specific data: Data relating specifically to applicants, grantees, contractors, donors, or other collaborators.

We may also obtain information about you from public sources, analytics providers, or other operational partners to supplement the information you provide directly.

 

  1. HOW WE USE YOUR INFORMATION

We use your personal information only when the law allows us to and for purposes that are legitimate and relevant to the work we do. We are required under EU and UK data protection law to identify a legal basis for using your personal information. This includes:

  • Facilitating the creation, authentication, and management of a record of your details
  • Communicating with you regarding our mission, programs, events, or other initiatives
  • Administering grant programs, evaluations, and peer review processes
  • Conducting research, analysis, and internal reporting
  • Ensuring the security and integrity of our services, detecting fraud, and complying with legal obligations
  • Marketing and promotional communications, where you have given consent, e.g. by opting into through newsletter sign-up or by email contact
  • When you provide information to be published or displayed on public areas of the Website, or transmitted to other users of the Website or third parties.

We do not use personal information for purposes other than those described in this notice without your consent.

 

  1. LEGAL BASES FOR PROCESSING

We process your personal information under one or more of the following legal bases, depending on the purpose:

  • Consent: Where you have given clear permission for us to use your personal data for a specific purpose, such as receiving newsletters, surveys, or marketing communications. You can withdraw your consent at any time.
  • Contract performance: Where processing is necessary to fulfil a contract with you, such as providing services, grants, or other agreements.
  • Legitimate interests: For internal administrative purposes, security, governance, and communications, provided these do not override your rights and freedoms.
  • Legal obligations: Where processing is required to comply with applicable laws, regulations, or legal procedures.
  • Vital interests: Where necessary to protect the life or safety of an individual.

 

  1. SHARING YOUR INFORMATION

We will only share personal information in ways that are consistent with this privacy notice and applicable law. This may include sharing with:

  • Affiliates: Including our fiscal sponsor and donor partners, both of whom are required to comply with this privacy notice
  • Service providers: Such as technology providers, analytics services and contractors, always under contracts requiring protection of your personal information
  • Professional advisors: Including auditors, legal advisors, and consultants for operational or compliance purposes
  • Regulatory authorities: Where required by law or legal process
  • Peer reviewers and collaborators: For the purposes of grant evaluation, program review, or partnership initiatives.

We will never sell your personal information.

 

  1. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, pixels, and similar technologies to collect and store information when you interact with our services. This helps us maintain the security of our services, analyze usage, improve functionality, and provide personalized communications.

You can manage cookies through your browser settings. Please note that some features of our services may not function if cookies are disabled. For more information, see our Cookie Notice: [insert link].

 

  1. INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred to, stored, or processed in countries outside your country of residence. Where such transfers occur, we implement safeguards, including the use of European Commission Standard Contractual Clauses, to ensure that your data receives an adequate level of protection consistent with applicable law.

 

  1. DATA RETENTION

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this privacy notice, unless a longer retention period is required or permitted by law. Typical retention periods include:

  • Active service or relationship: Duration of engagement or account
  • Legal or regulatory compliance: Up to seven years or as required by law
  • Research and archiving: Where anonymization or aggregation is not possible, for a period consistent with operational needs

Once data is no longer required, we will securely delete or anonymize it.

 

  1. DATA SECURITY

We implement organizational, administrative, and technical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

However, no system is completely secure. You should be aware that transmission of personal information over the internet carries some risk. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. To the fullest extent legally permitted, we are not responsible for circumvention of any privacy settings or security measures contained on the Website.

 

  1. YOUR RIGHTS

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access and obtain a copy of the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of personal data, where legally permissible
  • Restrict or object to processing of your personal data
  • Receive your data in a portable format
  • Withdraw consent at any time, without affecting the lawfulness of prior processing
  • If you are concerned about how Assemble uses your personal information and we are unable to resolve your issue, you have the right to make a complaint to the supervisory authority in your place of work or residence or the place in which the relevant infringement has taken place.

Requests may require verification of identity, and we will respond within applicable statutory timeframes (usually 30 days, extendable to 90 days in complex cases).

 

 

  1. 10. THIRD-PARTY TOOLS AND EXTERNAL WEBSITES

Our services may include links to external websites or integrate third-party tools. These third parties may process personal information according to their own privacy policies. We encourage you to review their policies and control your preferences directly with them.

 

  1. 11. CHANGES TO THIS PRIVACY NOTICE

We may update this privacy notice from time to time. Material changes will be clearly indicated by a revised date at the top of this document and, where appropriate, communicated directly. We encourage you to revisit this page regularly.

 

  1. 12. CONTACT INFORMATION AND REQUEST PROCEDURES

To exercise your rights, verify your identity, or submit requests regarding personal data, contact us:

Email: info@assemblealliance.org