Skip to content

Data Protection and Privacy Notice

Original document

LAST VERIFIED 2026-10-01

Attention points

13 TO CHECK

Pointers to disclosures this policy may not clearly make, checked against major privacy laws. This is a heuristic — not legal advice, and not a finding that anything is missing or unlawful.

GDPR / UK-GDPR

5/13 ADDRESSED
  • Who controls your data (identity & contact of the data controller)GDPR Art. 13(1)(a)
  • Data Protection Officer contactGDPR Art. 13(1)(b)
  • The legal basis for using your dataGDPR Art. 13(1)(c)
  • Legitimate interests relied on (where that is the basis)GDPR Art. 13(1)(d)
  • International transfers and their safeguardsGDPR Art. 13(1)(f) / 46
  • Your data-subject rights (access, erasure, portability, object, …)GDPR Arts. 13(2)(b), 15–21
  • The right to complain to a supervisory authority (e.g. the ICO)GDPR Art. 13(2)(d)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)

CCPA / CPRA

5/10 ADDRESSED
  • Categories of third parties data is shared/sold toCCPA §1798.115
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125

Current text

Introduction FAO is committed to process data fairly, with integrity, responsibility, security, and transparency. We collect and process data - personal data and sensitive non-personal data - solely in accordance with our internal data protection rules and procedures, to the exclusion of any single national or regional system of law. This means we handle information in line with FAO's own Data Protection Policy (DPP) and not under any national, regional jurisdiction. We…

Show full text