How we look after your information
Last updated: 11 November 2026
The short version
- We collect only what we need to count your voice: your first name, email, country, how you are joining and an optional message. You can also choose to add a voice or video recording.
- Only your first name, country and message appear publicly, and only if you choose.
- Your email is never shown publicly, sold or shared with other organisations for their own use.
- You can ask us to see, correct or delete your information at any time.
1. Who we are
1.5 Billion Voices for 1.5 Degrees (“the campaign”) is a global movement answering the call made at COP31 on behalf of the V20 countries. The campaign website is owned and operated by The Possibilities Agency (TPA), Barbados, on behalf of the Government of Barbados.
TPA is the data controller for the personal data collected through this website under the Data Protection Act, 2019-29 of Barbados (“the Act”).
Contact our Data Privacy Officer:
Kaiel Eytle, Data Privacy Officer, The Possibilities Agency
Email: [email protected]
Post: Pelican Business Centre, Princess Alice Highway, Barbados
2. What we collect
| Information | Why we need it |
|---|---|
| First name | To count your signature and, if you choose, show it on the public wall. |
| Email address | To make sure each person is counted once, to contact you about your signature, and to send updates if you opt in. |
| Country | To show where voices are coming from on the map and in campaign totals. |
| How you are joining (e.g. citizen, farmer, artist) | To show the range of people taking part. |
| Your message (optional) | To share why 1.5°C matters to you, if you choose to make it public. |
| Voice or video recording (optional) | To share your pledge in your own voice on this website and in campaign materials, if you choose to record or upload one and give your consent. |
| Your choices (public display, updates) and the date you signed | To respect your preferences and keep an accurate record. |
We do not ask for sensitive personal data, such as health, religion or political affiliation. Please do not include it in your message.
Technical information. Our hosting provider, Cloudflare, processes your IP address and basic browser information to deliver the website securely and to block automated or fraudulent sign-ups. We do not store your IP address with your signature. We do not use advertising or tracking cookies. Your browser keeps a small note that you have signed so the form is not shown to you again; this stays on your device.
3. Our legal basis
We process your personal data on the basis of your consent, which you give when you sign. Sending you campaign updates is a separate consent, given only if you tick the updates box. Recording or uploading a voice or video pledge is a further separate consent, given when you tick the boxes before sending it. You can withdraw either consent at any time (see section 9). Withdrawing does not affect anything we did with your data before you withdrew.
4. What is public
- Always public, as totals only: the number of signatures, the number by country and the number by type of participant. No one can be identified from these totals.
- Public only if you tick the box: your first name, country, how you are joining and your message, on the website's wall and in the live feed.
- Public only after review: your voice or video recording, shown with your first name, country and how you joined. Every recording is checked by our team before it appears, and we may decline to publish any recording.
- Never public: your email address and whether you opted in to updates.
5. Who we share your information with
We never sell your personal data.
- Cloudflare, Inc. hosts the website and stores the signature database as our data processor, acting only on our instructions.
- The Government of Barbados, V20 partners and other campaign partners receive campaign totals and, where relevant, public messages. We do not give them signers' email addresses.
- Authorities, only where the law requires us to.
6. International transfers
This is a global campaign, and our hosting provider stores and processes data on servers that may be located outside Barbados. When you sign, you consent to your personal data being transferred outside Barbados for the purposes in this notice. We rely on our provider's contractual commitments and security safeguards to protect it wherever it is processed.
7. How long we keep it
- Signatures: kept for the life of the campaign and deleted, or reduced to anonymous totals, within six months after the close of COP32.
- Recordings: kept for the life of the campaign and deleted within six months after the close of COP32, unless you ask us to delete yours sooner. Recordings we decide not to publish are deleted within 30 days. Recordings already used in campaign materials, such as a film shown at COP32, may remain in those materials.
- Updates list: kept until you unsubscribe or the campaign ends, whichever comes first.
8. How we protect it
Data is encrypted in transit, the database is not publicly accessible, and access is limited to authorised TPA staff who need it for the campaign. If a personal data breach puts your rights at risk, we will notify the Data Protection Commissioner and, where required, you, as the Act requires.
9. Your rights
Under the Act you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Correct it: have inaccurate or incomplete data fixed.
- Erase it: ask us to delete your signature and data.
- Restrict it: ask us to limit how we use your data.
- Take it with you: receive your data in a common, machine-readable format.
- Object and withdraw consent: stop updates or withdraw your signature at any time.
- Complain: to the Data Protection Commissioner (section 11).
To use any of these rights, email [email protected] from the address you signed with. Every update email will also include an unsubscribe link. There is no charge, and we will respond without undue delay and within the time the Act allows.
10. Young people
Young people's voices matter to this movement. If you are under 18, please ask a parent or guardian before you sign, and leave the public-wall box unticked if you would rather not appear publicly. Recordings from anyone under 18 may only be sent with a parent's or guardian's agreement, and we will not publish a recording where we have concerns about a child's safety or privacy.
11. Complaints
Please contact us first so we can try to put things right. You also have the right to complain to the regulator in Barbados:
Data Protection Commission
Ministry of Industry, Innovation, Science and Technology
5th Floor, SSA Building, Vaucluse, St. Thomas, Barbados
Telephone: (246) 536-1200 / (246) 536-1212
If you live outside Barbados, you may also be able to complain to the data protection authority in your own country.
12. Changes to this notice
If we change this notice, we will post the new version here with a new date. If a change significantly affects how we use your data, we will tell you by email before it applies.