Privacy Policy

Effective Date: 1 October 2025.
Last Updated: 1 October 2025

Global Digital Transparency Alliance Group (“we”, “us”, “our”) is a global not-for-profit organisation (cuurently in formation) are committed to protecting your privacy. As a recognized leader in privacy-conscious practices, we believe your personal information should be treated with the highest respect, transparency, and care.

This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Australian Privacy Act 1988 (Cth).

1. Scope

This Privacy Policy applies to personal data collected from:

Individuals who become members of [Organization Name]
Users of our websites, platforms, and services
Participants in our events, programs, or initiatives

2. What Data We Collect

We collect only the minimum necessary personal data to deliver our services, which may include:

Identity Information: Full name, title, date of birth
Contact Information: Email address, phone number, mailing address
Membership Information: Membership tier, renewal status, history of services used
Professional Information: Affiliation, job title (if applicable)
Technical Information: IP address, device type, browser type (for site analytics and security)

We do not collect sensitive personal data unless voluntarily provided for a specific purpose (e.g., accessibility needs at events).d

3. How We Use Your Information

We use your personal data only for the purposes for which it was collected, including:

To manage and administer your membership
To deliver member-exclusive services, resources, and communications
To notify you of updates, events, or opportunities relevant to your membership
To maintain the security and functionality of our digital platforms
To comply with legal obligations or resolve disputes

We do not use your data for profiling, automated decision-making, or unrelated marketing.

4. Our Commitment: No Selling, Trading, or Sharing

We do not sell, trade, rent, or otherwise share your personal information with third parties for commercial purposes.

We may share information with trusted service providers only when necessary for technical or operational support (e.g., cloud hosting), under strict contractual obligations and only where compliant with this Privacy Policy.

5. Legal Bases for Processing (GDPR)

For individuals located in the European Economic Area (EEA), our legal bases for processing your personal data are:

Performance of a Contract: To provide services related to your membership
Consent: Where you have given clear consent (e.g., newsletters)
Legal Obligation: Where processing is necessary to comply with laws
Legitimate Interests: Where necessary for our operations, and where your rights are not overridden

6. Your Rights Under the GDPR (EU/EEA Residents):

Access your personal data
Correct or update inaccurate data
Erase your data (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time

Under the CCPA (California Residents):

Know what personal data we collect and how we use it
Request deletion of your personal data
Opt out of the sale (we do not sell data, but this right is always honored)
Non-discrimination for exercising your rights

Under the Australian Privacy Act:

Request access and correction of your data
Complain about a breach of Australian Privacy Principles

To exercise any of your rights, please contact us at privacy@gdtagroup.org

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. When no longer required, data is securely deleted or anonymised.

8. International Data Transfers

As a global organisation, your data may be stored or processed in countries outside your own. We ensure appropriate safeguards are in place, including standard contractual clauses (where applicable) or hosting with providers in jurisdictions recognised for adequate protection.

9. Data Security

We implement industry-standard security measures, including encryption, access controls, and regular audits, to protect your data from unauthorised access, disclosure, alteration, or destruction.

10. Use of Cookies and Analytics

Our websites use minimal, privacy-conscious cookies and analytics tools to improve performance and security. You will be notified and given the option to manage cookie preferences where required by law.

11. Third-Party Links

Our platforms may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before engaging.

12. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children without parental consent where required.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or organizational changes. The most current version will always be available on our website. We will notify members of material changes where appropriate.

14. Contact Us

If you have any questions, concerns, or wish to exercise your rights, please contact:

Privacy Officer
Global Digital Transparency Alliance
Privacy@gdtagroup.org

15. Complaints

If you are not satisfied with our handling of your data, you may contact your local data protection authority:

EU/EEA: [Your country's Data Protection Authority]
California: [California Attorney General – https://oag.ca.gov/privacy]
Australia: [Office of the Australian Information Commissioner – https://www.oaic.gov.au]