Skip to main content

Privacy Policy

Effective date: 04/14/21

This Initiative on Climate Risk and Resilience Law (ICRRL) website is operated by Environmental Defense Fund (EDF). This Privacy Notice explains how we collect, use and disclose personal data gathered through this website.

We take protecting your privacy very seriously and will always take all reasonable steps within our power to make sure your personal information is safe.

The website is not intended for persons under the age of 18. We do not knowingly collect personal information from young people. We reserve the right to delete any information identified as having been provided by under 18s at our discretion.

This Privacy Notice will be updated from time to time. If you have any questions, please Contact Us.


  • Who we are and how to contact us
  • What personal information we collect
  • How we collect personal information
  • What purposes do we use your personal information for
  • The lawful grounds we rely on to use your personal information
  • Your rights concerning your personal information
  • Who we share your personal information with
  • How we keep your personal information safe
  • How long we will store your personal information for

1. Who we are and how to contact us

The website operator, Environmental Defense Fund (EDF), is a non-profit environmental advocacy and research organization. EDF is responsible for any information collected on or used by our websites.

2. What personal information we collect

The personal information we collect includes:

  • Any personal information you provide via the website. For example, if you sign-up for email updates. Sign-up is optional, but if you do wish to sign-up, we ask you to provide your first name, last name and organization along with your email address.
  • We request the same personal information if you use our Contact Us form.
  • We may collect certain details of your visit to the website, including technical information, such as the IP address you use to access the website, your web browser and which pages were visited.

3. How we collect personal information

We collect personal information when you interact with us. The type and quantity of personal information we collect and how we use it depends on why you are providing it. For example, we may collect information when you:

  • Visit and browse our website
  • Sign-up for our email updates
  • Use our Contact Us form
  • Send an email to one of the people listed on the website

4. What purposes we do use your personal information for

We will use your personal information to:

  • Keep a record of your contact with us
  • Provide you with the services, products or information you have asked for
  • To provide email updates to you. We will only send these if you requested these emails. You can opt-out at any time.
  • To carry out any obligations arising from any contracts or agreements you may enter into with us.

5. The lawful grounds we rely on to use your personal information

We rely on the following lawful grounds to use your personal information:

  1. a) If you have provided your consent to us using your personal information for a specific purpose
  2. b) When it is necessary for compliance with a legal obligation

We may sometimes need to process personal data to meet a specific legal obligation.

  1. c) When it is within our legitimate interests

We may process personal information when it is necessary for EDF’s legitimate interests, or those of a third party. We will only do this when the processing is fair, proportionate and does not unduly impact the rights or interests of individuals.

6. Your rights concerning your personal information

You have certain rights concerning how we use your personal information.

Right to access your personal information

If you are an resident of the European Economic Area (EEA), the UK or certain other areas (such as California) you have the right to access the personal data we may hold about you and the purposes for which we use it. If you wish to exercise this right please let us know by Contacting Us. We may ask for proof of your identity. On receipt of your request we will endeavor to respond to you as soon as possible, at most within one calendar month.

You have a right to ask for any errors in the personal information we hold about you to be rectified (called the Right of Rectification), or to request the restriction of our processing of your personal information or to request for it to be erased.

If you don’t want us to retain certain personal information, it’s best just not to give that personal information to us. If you want us to erase certain or all of the personal information we hold about you, please let us know. You may obtain, rectify, update or delete records of your personal information, or change your preferences, by using the Contact Us form.

Right to withdraw consent

If you signed-up to receive our newsletter you can withdraw your consent by clicking on the ‘Unsubscribe’ link on any email update sent to you.

Right to complain

You have the right to complain to us about the way we use your personal information, using the email address above. If you live in the European Economic Area or the UK you also have the right to complain to your local Data Protection Authority about the way we use your personal information.

7. Who we share your personal information with

We would only disclose your personal information with other parties for specific, limited and legal purposes, such as:

  • if we believe in good faith that the law requires disclosure, such as in the event of a police investigation, or to regulatory bodies or legal advisors;
  • when it’s necessary to disclose information to protect the rights, property and safety of EDF or others;
  • if you have given us your permission to share it with another party.

We may allow our suppliers or data processors to access and use your personal information to allow them to perform specific services on our behalf. In these circumstances, we will not give these organizations any rights to use your personal information for their own purposes. They must only use your details to provide specific services to us, in accordance with our instructions.

As part of agreements with our service providers we may need to transfer personal information to other countries, so they can perform services on our behalf. When doing so we take steps to ensure that the transfer and processing of personal information is subject to appropriate security measures and safeguards.

8. How we keep your personal information safe

We take commercially reasonable precautions to protect us and our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold.

We take care to utilize appropriate and reasonable administrative, physical, and technical measures to help safeguard personally identifiable information that we control. While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job are granted access to personally identifiable information. The computers/servers on which we store personally identifiable information and process credit card donations and updates to monthly billing are kept in a secure environment. We also use “anti-hacking” security measures and employ security consultants.

Despite the efforts we use to protect your information, no transmission or electronic storage of information can be guaranteed to be 100% secure. If you have reason to believe that your use of the Services or engagement with us is no longer secure, please contact us immediately.

9. How long we will store your personal information for

We will hold your personal information only as long as is necessary for specific purpose(s), in accordance with our Data Retention Policy.


This Privacy Notice was updated in April 2021.