Last updated: October 29, 2026

1. Who we are

This site is operated by Global Commons Review, based in Los Angeles, California, United States. We are the controller of the personal data processed here.

Contact for privacy matters: globalcommonsreview@gseis.ucla.edu.

2. What data we collect

• Contact form: name, e-mail, phone and message. The message is sent to our team by e-mail and is not stored on the site.
• Testimony form: name, e-mail, occupation, testimony and photo. The testimony is sent to our team by e-mail. If it is approved, we may publish it on the site with your name, occupation and photo.
• Author account: name, e-mail, password, phone, city, state, country, short biography and photo. These data are stored on the site. The password is stored in protected form (hash) and we do not have access to it.
• Article submission and review: section, title, message and the article file, plus the messages exchanged with the review team. These data are stored on the site.
• Password reset: when you ask for a new password, we record a single-use link linked to your account and the IP address of the request.
• Form protection: to block automated submissions (spam), we record the IP address and the browser identification of each form submission.
• Browsing: IP address, type of device and browser, and pages visited, through cookies (section 6).

3. Why we use your data and on what legal basis (LGPD, art. 7)

• To answer contact messages and receive testimonies: procedures requested by you (item V).
• To publish an approved testimony with your name, occupation and photo: consent (item I), which you can withdraw at any time.
• To create and manage your author account, receive your article and carry out the editorial review: performance of a contract and procedures requested by you (item V).
• To measure the audience of the site in a statistical way (traffic, engagement and returning visitors): legitimate interest (item IX). You can object at any time in the cookie preferences.
• To keep the site secure and prevent fraud and spam: legitimate interest (item IX).

4. Who we share data with

We do not sell personal data. We only share data with the parties below, as far as necessary:

• Reviewers: submitted articles and the messages about them are shared with the reviewers who evaluate the article.
• Hosting company: stores the site and its database.
• E-mail sending service: delivers the messages of the forms and the notices of the site.
• Google Analytics: audience measurement (section 6).
• Google Fonts: provides the fonts of the site. Your browser connects to Google to download them, which shares your IP address with Google.

5. International transfer

We are based in the United States, and some of the providers above, such as Google, process data on servers outside Brazil. These transfers follow the safeguards set out in the LGPD.

6. Cookies

Cookies are small files stored on your device. We use the categories below:

• Essential: necessary for the site to work and to be secure. Always active.
• Analytics: measure the audience of the site. They are active by default, for statistics only, and can be turned off in the preferences.

You can change your choice at any time:

Review cookie preferences

You can also block cookies in your browser settings, but parts of the site may stop working.

7. How long we keep data

• Messages of the forms, account data, submitted articles and other data: for as long as necessary to handle your request or as required by law.
• Records of the form protection (IP address and browser): 90 days.
• Password reset records: 30 days.
• Google Analytics: the browsing data linked to each visitor are kept for 2 months, the default period of the tool. After that, only statistical reports remain, with no identification.

8. Your rights

The LGPD gives you the right to: confirmation and access to your data; correction; anonymization, blocking or deletion of unnecessary data; portability; information about sharing; withdrawal of consent; and objection to processing based on legitimate interest.

To exercise these rights, write to globalcommonsreview@gseis.ucla.edu. We reply within 15 days.

You can also file a complaint with the Brazilian National Data Protection Authority (ANPD).

9. Security

• Encrypted connection (HTTPS).
• Passwords stored in protected form (hash).
• Protection of the forms against automated submissions.
• Administrative area with login and blocking after too many failed attempts.
• Password reset through a single-use link that expires.

10. Changes

This policy may be updated. The date of the last revision is at the top of this page.

11. Contact

Global Commons Review, globalcommonsreview@gseis.ucla.edu.