Name, organisation, country, city, email and the three application answers are required. Website/social link, trainer preference, map choice and logo are optional. Do not include health information, political or religious beliefs, or other sensitive personal information, and do not upload personal identity documents. These services are for adults aged 18 or over.
How we use and keep your information
Our legitimate interest is assessing and managing partnership enquiries (GDPR Article 6(1)(f)); steps towards a contract with you use Article 6(1)(b). Optional map publication is based on consent under Article 6(1)(a), separate from reviewing the application. Contact us to withdraw that permission.
The Spark team uses Google Cloud/Firebase for applications and logos and Google Workspace for correspondence. Your full application is available to authorised staff and any assigned account owner or editor. If you choose map publication and your application is approved, the public listing includes organisation, country, city, logo, mission, website and contact email. Uploaded logos are publicly accessible, so upload only a logo intended for public use. Provider processing can take place outside the EEA, including the United States. The full privacy notice explains locations and transfer safeguards.
Our schedule is 12 months after a declined or withdrawn application; for an active partnership, its duration plus 12 months, subject to specific legal duties or disputes. These periods guide our retention reviews; some older records may remain until reviewed. You can ask us to review your records. See our retention policy (opens in a new tab).
You can contact us to request access, correction, erasure, restriction or portability where applicable, or to object to processing. You can withdraw consent where it is the basis. You can complain to the Bulgarian Commission for Personal Data Protection. We normally respond to rights requests within one month.