Goodwall Privacy Policy

Last updated: August 2026

This Privacy Policy (“Policy”) describes how Goodwall (Goodwall SA) (“Goodwall”, “we”, “us”, or “our”) collects, uses, and discloses personal data (“Personal Data”) in connection with our engagement with corporate and institutional partners, our events, and related communications. This Policy applies to representatives of partner organisations, event attendees, and other business contacts, and is separate from any privacy policy governing use of the Goodwall platform by its members. If you are a visitor to our website or a member of our platform, you are kindly referred to our Data Protection Notice.

For any queries regarding this Policy or our data protection practices, please contact us at dpo@goodwall.io.

In the course of engaging with partners and organising or participating in events, Goodwall may collect the following categories of Personal Data:

• Name, job title, and employer;
• Business email address and telephone number;
• Records of correspondence, meetings, and event registrations;
• Any other information voluntarily provided to us.

Goodwall does not seek to collect, and does not knowingly collect, special category data (as defined under the GDPR) in connection with these activities.

Goodwall uses Personal Data for the following purposes:

• To manage and administer our relationship with partner organisations and event participants;
• To communicate regarding programs, meetings, deliverables, and events;
• To provide updates regarding Goodwall’s activities, where consent has been given;
• To maintain records for contractual, accounting, and reporting purposes.

Goodwall processes Personal Data on the following legal bases under the GDPR:

• Contract: where processing is necessary for the performance of a partnership, program, or event in which you participate;
• Legitimate interests: for the management of our business relationships and communications, provided such interests are not overridden by your rights;
• Consent: for optional marketing communications, which may be withdrawn at any time.

Goodwall may disclose Personal Data to:

• Employees of Goodwall who require access to perform their duties;
• Third-party service providers engaged to support our operations (including email, CRM, and event management providers), each bound by contractual obligations consistent with this Policy;
• The partner organisation with which you are associated, where relevant to a joint undertaking (for example, sharing attendance records in connection with a joint event).

Goodwall does not sell Personal Data to third parties.

Where Personal Data is transferred outside the United Kingdom or European Economic Area, Goodwall ensures that appropriate safeguards are in place, including Standard Contractual Clauses, to protect such data in accordance with applicable law.

Personal Data is retained only for as long as necessary to fulfil the purposes described in this Policy, including any applicable legal, accounting, or reporting requirements, following which it is securely deleted or anonymised.

Subject to applicable law, you have the right to:

• Request access to, and a copy of, the Personal Data we hold about you;
• Request rectification or erasure of your Personal Data;
• Object to, or request restriction of, our processing of your Personal Data;
• Withdraw consent to marketing communications at any time;
• Lodge a complaint with the relevant supervisory authority (in the United Kingdom, the Information Commissioner’s Office).

To exercise any of these rights, please contact us at dpo@goodwall.io.

Goodwall maintains appropriate technical and organisational measures, including access controls and secure storage, designed to protect Personal Data against unauthorised access, loss, or misuse.

Goodwall may amend this Policy from time to time to reflect changes in its practices or applicable law. The date of the most recent revision is indicated above.