Privacy and AI Policy

Who We Are

Nature on Board is an interactive governance toolkit developed by 3BL Associates Consultancy Co. W.L.L. in partnership with Diversity on Board. The toolkit helps organisations integrate nature representation into corporate governance through educational modules, assessments, and interactive tools.

Our parent organisation, Diversity on Board, maintains its own privacy policy at diversityonboard.org/policy. This privacy policy applies specifically to the Nature on Board toolkit and its associated data collection.

What Data We Collect

We collect a limited set of information to understand who is engaging with the Nature on Board toolkit. The table below details each data point:

We do not collect passwords, payment information, or any other sensitive personal data.

How We Collect Your Data

Data is collected through two mechanisms on the Nature on Board website:

• Access Gate modal on Module 1 — a registration form that appears before accessing the toolkit content. Submissions are sent via FormSubmit.co (AJAX) directly to our email inbox.
• Footer newsletter form — an optional email subscription form at the bottom of each page. Submissions are also sent via FormSubmit.co (AJAX) to our email inbox.

We also store a single boolean flag in your browser's localStorage (not a cookie) to remember that you have completed the access gate, so you are not asked to register again on return visits. This flag contains no personal data — only a true/false value and a timestamp.

We do not use cookies, browser fingerprinting, or cross-site tracking technologies. We do use Cloudflare Web Analytics, a privacy-focused, cookieless analytics service — see Section 05 below for details.

Why We Collect Your Data

We process your data on the following legal bases under GDPR:

• Legitimate interest — understanding the audience engaging with nature governance tools helps us improve the toolkit and demonstrate its reach to stakeholders and partners.
• Consent — the newsletter subscription is an explicit opt-in. You choose whether to subscribe.

Your data is never sold, rented, or shared with third parties for marketing purposes.

Third-Party Services

We use one third-party service for form processing:

• FormSubmit.co — a form-to-email relay service. When you submit a form, FormSubmit forwards the data directly to our email address (impact@3blassociates.com). FormSubmit does not permanently store your form submissions. You can learn more about their practices at formsubmit.co.

Website Analytics

We use Cloudflare Web Analytics to understand how visitors use the Nature on Board website. This is a privacy-focused analytics service provided by Cloudflare, Inc.

Cloudflare Web Analytics:

• Does not use cookies or any client-side storage for tracking.
• Does not track users across sites or build visitor profiles.
• Does not collect or store personal data such as IP addresses.
• Does not fingerprint browsers or devices.

The service collects aggregated, anonymised data including:

• Page URLs visited and referrer information
• Browser type and screen resolution (aggregated, not individually identifiable)
• Country of origin (derived from IP address during processing, but IP is not stored)
• Page load performance metrics

This data helps us understand which pages are most useful and where the toolkit can be improved. It is not used for advertising or shared with third parties. You can learn more at Cloudflare Web Analytics and review Cloudflare’s Privacy Policy.

External Resources (CDN)

The Nature on Board website loads certain resources from external content delivery networks (CDNs) to render fonts and icons. As part of standard web requests, these services may receive your IP address and basic browser metadata:

• Google Fonts (fonts.googleapis.com) — serves the Playfair Display and Space Mono typefaces.
• unpkg.com — serves the Phosphor Icons library.

These services do not set cookies or track you beyond what is necessary to deliver the requested files. You can review Google Fonts' privacy FAQ for more detail.

Local Storage (Not Cookies)

This website does not use cookies. Instead, we store a single key in your browser's localStorage:

• Key: nob_module1_access
• Value: { "granted": true, "date": "2026-..." }
• Purpose: Remembers that you have completed the access gate so you are not prompted again.

No personal data is stored in your browser. You can clear this value at any time through your browser settings (clearing site data for this domain).

We do not use any third-party cookies, advertising pixels, or cross-site tracking mechanisms.

Use of Artificial Intelligence

We use AI-assisted technologies in two areas of this toolkit's production, and we want to be straightforward about both.

Visual media. Some video and image assets on this website were generated or enhanced using generative AI tools. These are used for visual storytelling only. They do not depict real individuals, organisations, species, or ecosystems unless explicitly stated. No personal data is used as input to create them.

Development. Parts of this website were built with AI-assisted coding tools. This allowed a small team to move faster, improve accessibility, and avoid the extended energy footprint of prolonged manual development.

Three forms of intelligence. Nature on Board sits at the meeting point of three kinds of intelligence. AI (artificial intelligence) helps us scale, reaching more boards, more organisations, more decision-makers than we could alone. HI (human intelligence) brings the ethical judgement, cultural sensitivity, and relational care that no model can replicate. And BI (biological intelligence) is the more-than-human knowledge held in ecosystems, species behaviour, and the living systems we exist within, not apart from. We treat biological intelligence not as metaphor but as a genuine source of guidance: nature as relative, not resource. Our use of AI is accountable to the integrity and wellbeing of both human and more-than-human worlds. Where AI cannot serve that standard, we do not use it.

Environmental accountability. There is a real tension in advocating for nature while running compute-intensive AI workloads. We sit with that tension honestly rather than explain it away. What we can do is act on it:

• We use hardware such as Umbrl and local models to lower energy consumption, routing AI workloads through lower-carbon compute infrastructure.
• We generate media in targeted batches, not continuously, to limit unnecessary energy use.
• Where a non-AI approach produces the same result at lower environmental cost, we default to it.

This is not a solved problem. It is an ongoing practice of asking whether each use of AI genuinely serves the living world, and being willing to stop when it does not. We review and revise these practices as better tools and clearer standards become available.

Data Retention & Security

Form submissions are retained in our email inbox for the purpose of managing and improving the toolkit. We take the following measures to protect your data:

• All form data is transmitted over HTTPS (encrypted in transit).
• Access to submitted data is restricted to authorised 3BL Associates personnel only.
• We do not store form data in any database — it exists only within our email system.

You may request deletion of your data at any time by contacting us at impact@3blassociates.com.

Your Rights (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data.
• Right to restriction — request that we limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to our processing of your data based on legitimate interest.
• Right to withdraw consent — withdraw your newsletter consent at any time.

To exercise any of these rights, contact us at impact@3blassociates.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. The "Last updated" date at the top of this page will be revised whenever changes are made.

We encourage you to review this policy periodically. Continued use of the Nature on Board toolkit after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or our data practices, please get in touch.