In short
- We collect only what we need to award scholarships, pay tuition, thank donors and keep honest records.
- Your ID number, contact details, documents and grades are private. They are seen only by the people who run the Endowment.
- If you become a scholar, your name, country, institution, programme, the photo you choose for the Scholars page and the amounts paid for you are shown publicly, because every gift we make is on a public record.
- Scholar records are kept for good, as part of the Endowment's history.
- We never sell your data and we do not use advertising or tracking cookies.
- You can ask to see, correct or delete your data at [email protected].
1. Who we are
The Brial Endowment ("the Endowment", "we") is a sovereign philanthropic foundation: an independent, privately funded perpetual endowment. It is not currently registered as a charity, foundation, association or company in any country. The Endowment decides how your personal data is used and is responsible for it. Today the Endowment is run by its founder; in time it will be governed by a council. Whoever runs the Endowment is bound by this policy.
Contact for anything about your data: [email protected].
Wherever you live, we hold ourselves to the principles of Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022), Türkiye's Personal Data Protection Law (KVKK, Law No. 6698) and the European Union's GDPR.
2. What we collect and why
| Who | What we collect | Why |
|---|---|---|
| Applicants and scholars | Name, email, password (stored only as a one-way hash), date of birth, phone, country, address, national ID number, passport-style photo, school and university details, grades and report cards, student card, essay, interview times | To check who you are, assess your application fairly and contact you about it |
| Scholars | Tuition bills, semester results and transcripts, payment records, graduation documents, messages you send to our help desk, change requests | To pay your tuition directly to your institution each semester and follow your progress to graduation |
| Donors | Name (unless you give anonymously), email, country, message, amount, transaction reference | To record and verify your gift, send your receipt, and tell you once a year what your gift became |
| Everyone who writes to us | Your email and what you write | To answer you |
| Website visitors | Anonymous visit counts through Cloudflare Web Analytics, which uses no cookies and does not identify you | To understand which pages are read |
We use your data only for these purposes. We do not sell it, rent it, or use it for advertising.
The legal basis
We rely on your consent, which you give when you create an account or confirm this policy in the Scholar Portal, and on what is needed to carry out the scholarship or gift you asked for. You can withdraw consent at any time (see section 7).
3. Applicants aged 14 to 17
Our scholarships reach students from high school to doctorate, so applicants can be as young as 14. If you are under 18, you must confirm that your parent or guardian knows about your application and agrees to it. We may contact your parent or guardian, and they may exercise your rights on your behalf.
4. What is public
The Endowment publishes every gift it makes. If you are accepted as a scholar, these details appear on our website: your name, country, institution, programme and level of study, your current semester, the photo you choose for the Scholars page, and the dates and amounts of tuition paid for you. Your ID number, contact details, documents, grades, essay and messages are never published.
If you would like to be shown with less detail, for example by first name only, write to us and we will do our best to agree.
Donors: unless you give anonymously, your name, country, message and the amount of your gift may appear on our public ledger. Your email is never shown. Gifts in cryptocurrency are recorded on a public blockchain, where the transfer and the sending wallet address can be seen by anyone, forever. We cannot change or remove anything on a blockchain.
5. Who else handles your data
Only the people who run the Endowment can see private data. To run the website we use these services, which store or process data on our behalf and only on our instructions:
- Supabase: database and file storage, located in Tokyo, Japan. Private documents are kept in a private store with no public links.
- Cloudflare: website hosting, email forwarding and cookieless visit statistics.
- Resend: sending our emails, based in the United States.
- Google: the mailbox where emails to brialendowment.org addresses arrive.
- GitHub: weekly backups, encrypted with a password only we hold, in a private repository.
This means your data is stored outside your own country. We choose providers with strong security, keep access to the minimum, and protect sensitive files so that only the Endowment and, for your own files, you can open them. We do not share your data with anyone else unless the law requires it.
6. How long we keep it
- Scholars: kept permanently. A scholarship is part of the Endowment's history, and we intend that history to be clear and complete for as long as the Endowment stands. Your documents stay in private storage and are never published.
- Applicants who are not accepted: kept so that you can be considered again in a later round. You can ask us to delete your application at any time.
- Donors: gift records are kept permanently as part of the public ledger and the Endowment's accounts.
- Emails and help desk messages: kept as long as they are useful to answer you and to keep a record of what was agreed.
7. Your rights
You can ask us to:
- show you the personal data we hold about you and give you a copy;
- correct anything that is wrong or out of date;
- delete your data, or stop using part of it;
- withdraw your consent;
- stop sending you our yearly report, if you are a donor.
Write to [email protected] from the email address on your account. We will reply within three days and complete your request as quickly as we can. Most profile details can also be corrected yourself in the Scholar Portal.
Please note: once tuition has been paid for you, we keep a minimal historical record of the scholarship (your name, institution, dates and amounts) even if you ask us to delete the rest, because it is part of the Endowment's accounts and history. Records on a blockchain cannot be deleted by anyone. If you withdraw consent while your application or scholarship is active, we may no longer be able to continue it.
If you believe we have not handled your data properly, please tell us first so we can put it right. You also have the right to complain to the data protection authority in your country.
8. Security
Passwords are stored only as one-way hashes. Private documents are kept in storage that has no public links and opens only through short-lived signed links. Database rules allow each scholar to read only their own record. The accounts that run the Endowment's hosting, database, email and code are protected with two-step verification. Backups are encrypted. No system is perfectly safe, so if a breach ever affects your data, we will tell you and the relevant authority without undue delay.
9. Cookies
We do not use advertising or tracking cookies, and our visit statistics use no cookies at all. The website stores a few small items in your own browser so that it works: for example, keeping you signed in to the Scholar Portal and remembering pages you have opened. These never leave your device except to sign you in.
10. Changes to this policy
When we change this policy in a way that matters, we will publish the new version here with a new date and ask scholars to confirm it the next time they sign in.