Privacy Policy
Introduction
Secure Diversity, as the data controller (“Secure Diversity,” “we,” or “us”), explains in this Privacy Policy (the “Policy”) how we collect, process and/or use information that we receive via our website and emails we send, including www.SecureDiversity.org, SecureDiversity.org (collectively, the “Site”) that link to this Policy, as amended from time to time. This Policy describes how Secure Diversity collects, processes, uses, shares, and protects the Personal Data you provide. It also describes your choices regarding using, accessing, and correcting your Personal Data.
This Policy applies to the information we collect:
- on our Site;
- in email, text, and other electronic messages between you and our Site;
It does not apply to information collected by:
- us offline or through any other means, including on any other website operated by us or any third party; or
- any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Site. Secure Diversity does not operate its own mobile application; any apps referenced or linked from our Site are operated by third parties and are subject to their own privacy policies.
Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you disagree with our policies and practices, your choice is not to use our Site. By accessing or using our Site, you agree to this Policy. We periodically update this Policy. We will post any privacy policy changes on this page; if the changes are material, we will provide a prominent notice. Your continued use of the Site after we make changes is deemed to be acceptance of those changes, so please check this Policy periodically for updates.
Our Privacy Policy explains the following:
Children Under the Age of 13
Our Site is not intended for children under the age of 13, and children under the age of 13 are not permitted to use our Site. We will remove any information about a child under the age of 13 if we become aware of it.
Information We Collect About You and How We Collect It
We collect different types of information about you, including information that may directly identify you, information that is about you but individually does not personally identify you, and information that we combine with our other users. This includes:
- Information that we collect.
- Information You Give Us.
- Information We Collect Automatically.
Cookies and Other Tracking Technologies
We and our service providers use cookies, web beacons, and similar tracking technologies to operate our Site, understand how visitors use it, and improve your experience. These may include:
- Essential cookies that allow the Site to function properly.
- Analytics cookies (such as Google Analytics) that help us understand Site traffic and usage patterns.
- Functional cookies that remember your preferences.
When you first visit our Site, you will see a cookie banner that lets you opt in to or opt out of non-essential cookies, including analytics cookies. You may change your preferences at any time by clicking the cookie icon displayed in the bottom-left corner of the page.
Most browsers also let you refuse or delete cookies through their settings. If you disable cookies, some parts of our Site may not function as intended. We do not currently respond to browser “Do Not Track” signals.
How We Use Information
We use your Personal Data for various purposes described below, including to:
- Provide our Site to you.
- Provide you with the information you request from us.
- Enforce our rights arising from contracts.
- Notify you about changes.
- Provide you with notices about your account.
Lawful Basis for Processing Your Personal Data
We have a lawful basis for processing your Personal Data, including processing for our legitimate interests (when balanced against your rights and freedoms), to fulfill our obligations to you under a contract with you, when required by law, and with your consent.
How We Share Information
We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Policy. We disclose your Personal Data to third parties under certain circumstances, including:
- Our subsidiaries and affiliates.
- Third-party service providers that we use to support our business.
- To a company we merge, acquire, or that buys us, or in the event of a change in the structure of our company of any form.
- To comply with our legal obligations.
- To enforce our rights.
- With your consent.
Third-Party Links
Our Site may contain links to third-party websites, plugins, or services (for example, event registration platforms, payment processors, or social media pages) that we do not operate. We are not responsible for those third parties’ privacy practices or content. We encourage you to review the privacy policy of any third-party site you visit.
International Resident Rights
You may have certain rights under applicable data protection laws, including the right to access and update your Personal Data, restrict how it is used, transfer certain Personal Data to another controller, withdraw your consent at any time, and the right to have us erase certain Personal Data about you. You also have the right to complain to a supervisory authority about our processing of your Personal Data.
California and Other U.S. State Privacy Rights
Secure Diversity is a nonprofit organization, and as such is not currently subject to the California Consumer Privacy Act or similar comprehensive privacy laws in other U.S. states (including Colorado, Connecticut, Virginia, and Utah). We do not sell your Personal Data.
That said, we know our community includes cybersecurity professionals who care deeply about how their data is handled, and we want to honor that. If you would like to know what Personal Data we hold about you, request its correction or deletion, or ask us to limit how we use it, contact us at privacy@securediversity.org and we will make reasonable, good-faith efforts to accommodate your request. We may need to verify your identity before fulfilling it.
Consent to Processing Outside the European Economic Area
We may process your Personal Data outside of your home country, including to the United States. We only do this when we are legally permitted to do so and when we have appropriate safeguards in place to protect your Personal Data.
Closing Your Account and Data Retention Periods
We retain your Personal Data for as long as you keep your account open. In some instances, we may keep it after you close your account, for example, we may keep it:
- On our backup and disaster recovery systems.
- For as long as necessary to protect our legal interests.
- Compliance with other legal requirements.
Security Safeguards
Information transmitted over the Internet is not completely secure, but we institute measures designed to protect your Personal Data. You can help protect your Personal Data and other information by keeping your password to our Site confidential and enabling Multi-Factor Authentication/Two-Factor Authentication in your settings.
Data Security Incidents
In the event of a data breach affecting your Personal Data, we will notify affected individuals and, where required, relevant regulators and authorities, in accordance with applicable law and without undue delay.
Data Controller
Secure Diversity is the data controller of the Personal Data you provide on the Site. Secure Diversity has not formally designated a Data Protection Officer or an EU representative at this time. If you have questions about how we handle your Personal Data, or wish to exercise your privacy rights, please contact us using the information in the “Contact Us” section below.
Marketing Communications and Opt-Out
If you receive marketing or promotional emails from us, you may opt out at any time by using the unsubscribe link in the email or by contacting us at privacy@securediversity.org. Please note that even after opting out of marketing communications, we may still send you non-promotional messages, such as those about your account or event registration.
Updates to Our Privacy Policy
We will post any changes to our Policy on our Site. If we make material changes to our Policy, we may notify you of such changes through your contact information and invite you to review (and accept, if necessary) the changes.
You may contact us through the contact information below.
Secure Diversity, 68 Harrison Ave, Suite 605, PMB 77008, Boston, MA 02111
privacy@securediversity.org