Last updated: November 23, 2025

1. Introduction

This Privacy Policy explains how the Darkness Therapy Foundation (“DTF”, “we”, “our”, “us”) collects, uses, and protects your personal data when you visit our website https://darknesstherapy.org, contact us, or participate in our activities.
We respect your privacy and are committed to processing your personal information transparently, securely, and in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection laws.

2. Who We Are

Darkness Therapy Foundation
Non-profit organization (NPO/NGO)
Pending registration in Sweden
Address: Hagaplan 4, 113 68 Stockholm, Sweden
Email: hello@darknesstherapy.org
Website: https://darknesstherapy.org

Our mission is to advance scientific research, education, and awareness around darkness therapy (also known as Chamber-REST), promoting safe and evidence-based practices worldwide.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

a. Information you provide voluntarily

  • Name, email address, and contact details (e.g. via contact forms, newsletters, or event registrations).
  • Professional information (e.g. if you collaborate with us as a researcher, clinician, or volunteer).
  • Any information you provide in correspondence with us (e.g. inquiries, feedback, applications).

b. Information collected automatically

  • Technical data such as IP address, browser type, device type, and usage patterns (collected via cookies and analytics tools).
  • Preferences and interaction data related to our website and digital services.

For details on cookie use, please read our Cookie Policy.

4. How We Use Your Data

We process personal data only for legitimate purposes, including:

  • Responding to your inquiries and providing information.
  • Managing memberships, collaborations, or partnerships.
  • Sending updates, newsletters, and invitations (only if you have subscribed or consented).
  • Managing donations, event registrations, and participation in research projects.
  • Analyzing website traffic and improving our online services.
  • Ensuring compliance with legal and administrative obligations.

We do not sell, rent, or trade your personal data with third parties.

5. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

  • Consent – when you have given explicit permission (e.g., for newsletters or cookies).
  • Contractual necessity – when processing is required to fulfill an agreement with you (e.g., event participation).
  • Legal obligation – to comply with applicable laws.
  • Legitimate interest – for research communication, organizational management, or improving our services, provided such interests are not overridden by your privacy rights.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy or as required by law.
When data is no longer needed, it will be securely deleted or anonymized.

7. Data Sharing

Your information may be shared with:

  • Trusted service providers (e.g. hosting, analytics, or newsletter platforms) under strict confidentiality agreements.
  • Research or academic partners, only when relevant and with appropriate anonymization or consent.
  • Authorities, if required by law.

All third-party providers are GDPR-compliant and process data only on our instructions.

8. International Transfers

If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as EU Standard Contractual Clauses or equivalent protections).

9. Your Rights

Under GDPR, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Request corrections or updates.
  • Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Restriction: Request limited processing of your data.
  • Portability: Request transfer of your data to another controller.
  • Objection: Object to certain processing activities.
  • Withdrawal of consent: Withdraw consent at any time for activities based on consent.

To exercise these rights, contact us at hello@darknesstherapy.org.

If you believe we have mishandled your data, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY): https://www.imy.se.

10. Data Security

We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Access to your information is restricted to authorized personnel only.

11. Links to Other Websites

Our website may contain links to external sites, such as partner organizations or social networks. We are not responsible for their privacy practices, and we encourage you to read their policies.

12. Updates to This Policy

We may update this Privacy Policy to reflect changes in our operations or legal requirements. The latest version will always be available on this page, with the revision date clearly indicated.

13. Contact

For questions, concerns, or data access requests, please contact:

Darkness Therapy Foundation
Hagaplan 4, 113 68 Stockholm, Sweden
hello@darknesstherapy.org
https://darknesstherapy.org