Last Updated: 13 May 2025
Narcissistic Abuse Foundation (“NAF”, “we”, “us”, or “our”) is a society incorporated under the Societies Act of British Columbia, Canada (BC Incorporation Number: S0083521), with its registered address at 11887 Burnett Street, Unit 301, Maple Ridge, British Columbia, V2X 6P6. NAF operates in Canada, the United States of America, Mexico, and the United Kingdom.
We are committed to protecting the privacy, dignity, and personal information of every person who interacts with our website and services.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, use our services, purchase merchandise or event tickets, make a donation, or contact us in any capacity.
Given the sensitive nature of the subject matter our organisation addresses — narcissistic abuse and its impacts — we treat the privacy and safety of our users with the utmost seriousness. Please read this policy carefully.
This policy applies to all individuals who:
Contact Form: Your name, email address, and the content of your message.
Story Sharing Form: Any personal information you choose to include in your story submission. We strongly advise against including details that could identify yourself or third parties if you wish to remain anonymous.
Partnership / Business Enquiry Form: Organisation name, contact person’s name, email address, phone number, and the nature of your enquiry.
Volunteering Form: Name, email address, phone number, location, availability, skills, and relevant experience.
Store Purchases: Name, billing address, shipping address, and email address. Payment card details are entered directly into Stripe, our third-party payment processor, and are never transmitted to or stored on our servers. Please refer to Stripe’s Privacy Policy at stripe.com/privacy for information on how Stripe handles your payment data.
Donations: Name, email address, billing address, and payment details. As above, all payment information is handled exclusively by Stripe.
Event Ticket Purchases: Name, email address, and billing information, processed via Stripe.
When you visit our website, we and our third-party service providers may automatically collect certain technical information, including:
This information is collected through cookies and similar tracking technologies, which are managed through the cookie consent tool on our website.
Our “Have You Experienced Narcissistic Abuse?” questionnaire is provided for awareness and self-reflection purposes only. It does not collect, transmit, or store any data whatsoever. All responses remain entirely within your browser and are never sent to us or any third party.
We use the personal information we collect for the following purposes:
Depending on your jurisdiction, we rely on one or more of the following legal bases to process your personal data:
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information only in the following limited circumstances:
As an organisation operating across Canada, the USA, Mexico, and the UK, your personal data may be transferred to, stored, or processed in any of these countries. We take appropriate safeguards to ensure such transfers comply with applicable data protection laws, including where necessary implementing data processing agreements or relying on other lawful transfer mechanisms.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
Where you request deletion of your data and we have no overriding legal obligation to retain it, we will act on your request within 30 days.
Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. All payment transactions are handled by Stripe, which is PCI-DSS compliant. Data transmitted to and from our website is encrypted using SSL/TLS.
No method of transmission over the internet is entirely secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant regulatory authorities as required by law.
Our website and services are not directed at children under the age of 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without appropriate consent, please contact us immediately and we will take steps to delete such information.
Our website may contain links to third-party websites, including social media platforms and partner organisations. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this policy and, where appropriate, notify you by email or a prominent notice on our website. Your continued use of our website after such changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us:
Narcissistic Abuse Foundation
11887 Burnett Street, Unit 301
Maple Ridge, British Columbia, V2X 6P6
Canada
Email: narcisisticabusefoundation@gmail.com
Website: www.narcissisticabusefoundation.org
Note: The email address above is current as of the date of this policy and will be updated when a dedicated organisational email address is established. Please check our website for the most up-to-date contact details.