Privacy Policy
Last updated: 2026-09-02
Who we are
This website, iso26k.org, is the website of the ISO 26000 Stakeholders Global Network (SGN). It is operated for the network and hosted with the support of the x1 Foundation. The Meta developer registration used by this website is held by xex.one Limited, Hong Kong SAR.
Contact for anything on this page, including data protection questions: nik@x1-foundation.org (Nik Metaxa-Schwarten). You can also use the contact form.
What personal data we process, and why
- Server logs. When you open a page, our web server records your IP address, browser type, the page requested and the time. We keep these logs for up to 30 days, for security and error analysis only.
- Contact, inquiry and suggestion forms. The name, email address and message you type are stored so that we can answer you and follow up. Nothing else is done with them.
- Member directory. Members of the network provide their name, organisation, country, role and the profile details they choose to publish. The public directory shows no email addresses. Members can ask for a change or removal at any time.
- News, case-study and Ambassador Corner submissions. The content and author details you submit for publication, used only for that publication.
We run no advertising, we do not sell or share personal data with third parties for marketing, and we set no tracking cookies. Links to external sites (for example LinkedIn) open a warning first; those sites have their own privacy policies.
Social media and Meta platforms
Pages on this site carry Open Graph and fb:app_id meta tags so that links shared on
Facebook, Instagram, Threads or LinkedIn show a correct preview. The Meta app registered for
this purpose ("ISO 26000 SGN Website", App ID 1862137584438121) has no login function, requests
no permissions from anyone, and receives no personal data from this website or its visitors.
If we embed public Facebook, Instagram or Threads posts on a page, your browser loads that content from Meta's servers and Meta may record your IP address. Meta's own privacy policy applies to that: facebook.com/privacy/policy.
Legal basis and retention
We process data to run this website and to answer the requests you send us (legitimate interest, and your consent where you submit a form). Form messages are deleted once the matter is closed, at the latest after 24 months. Member directory data is kept while the person is a member of the network. Server logs are deleted after 30 days.
How to delete your data
Send an email to nik@x1-foundation.org with the subject line "Data deletion request" and say which data you want removed: your member profile, a form message, a submitted article, or any data connected to your Facebook, Instagram or Threads account. You can also use the contact form.
No account or login is needed to make this request. We confirm the deletion by email within 30 days.
Your rights
You can ask what data we hold about you, have it corrected, have it deleted, or object to its processing. Write to the address above. If you are in the EU or EEA you may also complain to your local data protection authority; in the Philippines to the National Privacy Commission; in Hong Kong to the Office of the Privacy Commissioner for Personal Data.
Changes to this policy
We update this page when our practices change and show the date of the last change at the top.