Privacy Policy

Please read. IISLP is a free, volunteer-run, non-commercial educational and social initiative. It is not a company, corporation, employer, or legal entity, and is organized by individual volunteers. Applying or participating does not create any employment, commercial, or contractual relationship. Nothing on this site constitutes legal, professional, or commercial advice.

Please read. IISLP is a free, volunteer-run, non-commercial educational and social initiative. It is not a company, corporation, employer, or legal entity, and is organized by individual volunteers. Applying or participating does not create any employment, commercial, or contractual relationship. Nothing on this site constitutes legal, professional, or commercial advice.

Our pledge to you — your data is never sold

We will never sell your personal data. Not your name, not your contact details, not your photographs, not your application, not anything you share with us. This is not a marketing claim — it is a structural commitment that applies to every applicant and participant, in every country, regardless of age:

• No sale, ever. Your data is never sold to any third party, advertiser, broker, or data marketplace, now or in the future.
• No trade or barter. Your data is never exchanged for services, discounts, or any other benefit.
• Encrypted in transit and at rest. All data you submit travels over encrypted TLS/HTTPS connections. Sensitive uploads — especially verification photographs — are encrypted at rest in separate, access-restricted storage.
• Strict access controls. Only authorized personnel with a legitimate need can access your data. Access to verification photographs is further restricted, and every view is recorded in an audit trail.
• Used only to run the program. Your information is used solely to assess applications, verify identity and eligibility, communicate with you, administer the program, and (where applicable) issue certificates — nothing else.
• Not used for advertising, AI training, or profiling. Your data is never used to train AI models, build advertising profiles, run facial recognition, or handed to anyone who would.

This pledge survives any future change to this policy: any update will preserve or strengthen these commitments, never weaken them.

What information we collect

We collect the information you provide when you register and apply: your name, surname, phone number, email, date of birth, gender, nationality, country of residence, your personal statement, parent or guardian information (for applicants under 18), identity verification photographs, and the content of any support requests you send us.

Why we collect information

We collect information to assess applications, verify identity and eligibility, communicate with applicants, administer the program, and (where applicable) issue certificates. Gender and date of birth are collected specifically to enforce the program's eligibility criteria (women aged 13–27).

Legal basis

The legal basis for processing depends on applicable law and may include your consent, our legitimate interests in administering the program, and contractual necessity for accepted participants. Final wording is subject to legal review.

Applicant and guardian information

For applicants under 18, we collect parent or guardian information and consent. The exact consent requirements follow applicable laws and the program's legal guidance. Parents or guardians may exercise rights on behalf of minor applicants where applicable.

Verification photographs

Verification photographs are treated as highly sensitive personal data. They are encrypted at rest, stored with strict access controls, and accessible only to authorized personnel. Access is logged. They are not used for marketing, social media, public galleries, advertising, AI training, facial recognition experimentation, profiling, unrelated research, or sale to third parties. They are not retained indefinitely and are deleted after a configured retention period.

Eligibility data (gender and date of birth)

Gender and date of birth are collected to verify that applicants meet the program's eligibility criteria (women aged 13–27). This data is stored as part of your application and is used only for eligibility verification and program administration. It is not shared with third parties except where required by law.

Storage

Data is stored on secure, reputable cloud infrastructure providers. Verification photographs use encrypted storage separate from ordinary application data. All data in transit is encrypted via TLS/HTTPS.

Retention

Ordinary application data is retained for a configurable period. Verification photographs have a separately configurable, shorter retention period because they are more sensitive. For withdrawn or rejected applications, the configured retention policy is applied and data is securely deleted when the retention period expires.

Access controls

Only authorized personnel with appropriate roles can access applicant data. Access to verification photographs is further restricted and audited. All access is logged in an audit trail.

Data deletion

You may request deletion of your data subject to applicable legal requirements. Contact us using the details in the Contact page. We will respond within a reasonable time and in accordance with applicable law.

International applicants and data transfers

Because the program accepts applicants globally, your information may be processed in jurisdictions other than your own, including Türkiye and the United States (where our cloud infrastructure providers operate). Appropriate safeguards will be applied where required by applicable law.

Service providers

We use your phone number to contact you about your application by SMS or WhatsApp message where a matter is urgent or where you have no account to read a reply in. We may use trusted service providers (for example, database hosting, file storage, and Cloudflare Turnstile to check that sign-up and sign-in forms are not being used by automated scripts) under appropriate agreements. They process data only on our behalf and under confidentiality obligations. They do not use your data for their own purposes. We do not use an email delivery provider, because the program sends no email.

Security measures

We apply security measures including encryption in transit (TLS/HTTPS), encryption at rest for sensitive uploads, strict role-based access controls, audit logging of every access to sensitive data, secure authentication, and rate limiting. As pledged at the top of this policy, your data is never sold and is used only to run the program. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.

Applicant rights

Depending on applicable law, you may have rights to access, correct, delete, or restrict processing of your personal data. You may also have the right to data portability and to object to processing. Contact us to exercise these rights.

Parent or guardian rights

Where applicable, parents or guardians may have rights regarding a minor applicant's personal data, including the right to access, correct, or delete the minor's data.

Children's privacy

This program is open to applicants aged 13 and older. For applicants under 18, we collect parent or guardian information and consent as described above. We do not knowingly collect data from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

Contact

For privacy questions, contact us through the Contact page.

Policy changes

We may update this policy at any time. Material changes will be communicated through the portal.

Breach notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable law.

This policy describes how a volunteer-run initiative handles personal data. It is provided in good faith and does not create a commercial or contractual relationship.