Safety and Privacy Notice

How we collect, use, store, and protect your information

1

You are not alone

At Stop Online Harm (SOH), we are a diverse team of survivors, technologists, journalists, and community advocates.

Our Online Ambulance (OA) helpline provides digital security support, emotional first aid, and practical guidance to help survivors recover from online abuse, harassment, and technology-facilitated gender-based violence (TFGBV).

We are always guided by the following principles:

  • We understand that privacy is part of safety
  • We only collect the information necessary to support you
  • Your story is treated with care, respect, and confidentiality
2

Who operates this helpline

Stop Online Harm (SOH) is a women-led nonprofit supporting survivors of online harm across Southeast Asia.

We provide confidential support for:

  • Online harassment
  • Non-consensual intimate images
  • Impersonation
  • Doxxing
  • Threats and digital abuse

Our OA helpline team includes trained responders and counsellors providing trauma-informed support. SOH is responsible for protecting your personal information and follows relevant privacy standards such as Thailand's PDPA and the EU's GDPR.

3

What information we may collect

We practice minimal data collection, meaning we only collect information necessary to support your case.

3.1 Information you share

We collect the information that you choose to share with us, such as your:

  • Name or nickname
  • Gender
  • Contact details
  • General location
  • Situation as you describe it

3.2 Platform used

We do not record voice or video calls, and we used the disappearing message feature on Telegram.

Depending on the platform you use to contact us, limited technical information (such as device type) may be automatically collected.

You may choose to remain anonymous when using our secure case management system (Online Ambulance platform).

3.3 Information for case escalation

Technical assistance: If you request support to remove harmful content from online platforms, we may ask you to share relevant links (URLs) to the content.

We generally do not require screenshots. However, in some cases, a platform may request additional evidence (such as screenshots) to process a report.

If this happens, we will inform you and ask for your consent before collecting or sharing any additional materials.

3.4 Emotional support

Anything you share with our counselors, whether through calls or text-based services, will be treated as confidential.

To ensure you receive the best possible support, counselors may share the minimum necessary information mentioned in section 3.1 within the helpline team for internal coordination or supervision.

Information may only be shared outside the team in the following situations:

  • If there is a risk of harm to yourself or others (e.g. self-harm or threats of violence)
  • If required to involve relevant authorities or a trusted/consented guardian for your safety
  • With your explicit consent, for specific support purposes

3.5 Documentation

We may support you—per your request or consent—in documenting your case to help preserve evidence for your own records, reporting, or potential legal purposes.

3.5.1 Self-documentation (recommended for most cases)

We will guide you on how to safely document and preserve evidence yourself. This may include:

  • Saving relevant links, timestamps, and metadata
  • Using secure web archiving tools to capture content before it is removed
  • Understanding what information may be helpful for reporting or legal processes

You remain in full control of what you choose to document and share.

3.5.2 Assisted documentation (for high-priority cases)

In certain situations such as cases for women leaders, human rights defenders, journalists and activists, we may offer to document and archive content on your behalf, particularly where there is a risk of evidence being removed or lost quickly.

If we do this:

  • We will explain the process clearly and ask for your consent before proceeding
  • We will only collect and store the minimum necessary information mentioned in section 3.1
  • We will handle all documentation securely and in line with our data protection practices

3.5.3 Legal and other referrals

In some cases, we may suggest connecting you with external organizations (such as legal aid providers, civil society groups, or specialized services) that can offer additional support. You are always free to accept or decline any referral.

If a referral is appropriate:

  • We will explain your options clearly before making any referral
  • We will only share your information with partner organizations with your explicit consent
  • We will share only the minimum necessary information required to facilitate support
4

Why we collect your information

We collect information to:

  • Provide emotional support
  • Assess safety risks
  • Help remove harmful content
  • Connect you with trusted services (legal, technical, psychosocial)
  • Improve our helpline services
  • Produce anonymized statistics or communications materials to advocate for better protections

We will never publish personal information that identifies you.

5

Confidentiality and Legal Basis for Data Use

Our default rule is that your information stays strictly within the OA helpline team and is never shared without a specific reason. In accordance with Thailand's PDPA and the EU's GDPR, we process your data based on your consent, your vital interests (such as protecting you from serious harm or providing urgent mental health support), and the broader public interest.

We only disclose information in limited situations:

  • When you give us explicit permission to connect you with trusted service providers
  • When there is an immediate danger to life
  • When required by a legal court order

Whenever possible, we will always try to discuss any potential data sharing with you first. Anonymized information may be used for research or awareness purposes, but never in a way that identifies you.

6

How we protect your data

We use strong security measures to protect your information:

  • Encrypted case management system (Uwazi): Uwazi is a secure, open-source database that protects sensitive case data through end-to-end encryption and it is designed for human rights work.
  • Restricted staff access ("least privilege"): Only OA Helpline team members shall have access to Uwazi, and this access will be limited to the least privilege level, typically the Collaborator role. Administrative access will be restricted strictly to the Manager and the Digital Security Consultant.
  • Trained responders, bound by confidentiality agreements, using encrypted devices
  • Encrypted data storage and servers aligned with international data protection standards

We only keep data up to 2 years, unless it is no longer necessary to provide support or meet legal obligations.

7

Your rights

Under the regional data protection standards (such as GDPR and PDPA), you have full ownership and control over your personal data. You may always:

  • Access personal data we hold about you
  • Correct any inaccuracies
  • Request permanent deletion of your records
  • Withdraw your consent for data processing
  • File a complaint with us regarding data processing activities
8

Risks of online communications

While we have deployed advanced encryption to secure our end of communications, digital communication tools sometimes carry potential risks.

For example:

  • Shared phones or computers may allow others to see messages
  • Messaging apps have their own privacy policies
  • Compromised accounts may affect confidentiality

We recommend using a private device when possible.

Contact for privacy questions

If you have questions regarding this notice or have concerns about your digital privacy, please contact us directly. Our team is available to ensure your data remain secure and your voice is heard.

Online Ambulance Helpline Support hereforyou@stoponlineharm.org
SOH Data Protection Contact digisec@stoponlineharm.org

Last updated: May 2026