Privacy & Other Policies

 

Other Policies

Privacy Notice

GTIA (“we”, “us”, or “our”) recognizes that privacy, security, and data protection are paramount to our members and website visitors. This Privacy Notice informs you of how we collect, use, and share personal information in connection with our websites, events, GTIA-branded applications, and services controlled by GTIA (collectively the "Services"). This Privacy Notice also describes your choices about the collection and use of your information. You can jump to particular topics by going to the headings below:

1. How We Collect Information
   
2. Types Of Information We Collect
   
3. Online User Activity
4. Use and Processing of Information
5. Sharing of Information
6. Your Privacy Choices
7. International Notices and Rights
8. How We Retain and Protect Personal Information
9. Links to Other Online Sites and Services
10. Children’s Privacy
11. Updates to our Privacy Policy
    
12. International Considerations
13. Contact Information

Please read this Privacy Notice carefully before you start to use our Services.

1. How We Collect Information.

We may collect information about you by various means, including: (i) directly from you, both online (e.g., website, email) and offline (e.g., phone, events); (ii) through your use of our Services; (iii) from affiliates, third-party sources and social media platforms that you may use to engage with us; (iv) from your employer or a similar organization that may introduce you to, or provide you with, our Services; and (v) by combining information from these different sources.

 

2. Types Of Information We Collect.

The following chart lists the types of information that we may collect from you and how we use that information.

Context	Types of Data
Account Registration, Membership Application, User Profile, Member Directory	We collect your name, contact information, username and password, profile preferences and professional information such as your company or industry upon account creation and for inclusion in our Member Directory. We also collect information relating to the actions that you perform while logged into your account. We collect, use and disclose payment information via our third-party payment processor (e.g., credit card or banking information) only as necessary to process transactions.
Creation of Single Sign On (SSO) Account	We collect your name and contact information as needed and as relevant to enable the automatic creation of an SSO account during completion of the registration and/or check-out process so that you can access certain Services.
Member Education and Learning	We collect learning information, as well as customer service interactions.
Online User Activity through first-party tracking	We use cookies, pixels, tags, beacons, and clear GIFs.
Online User Activity through third-party tracking	We participate in behavior-based advertising, which means that a third party uses technology (e.g., a cookie) to collect information about your use of our websites so that it can provide advertising about products and services tailored to your interests on our websites or on other websites.
Events & Webinars	We collect the name, job title, company name, and contact information, of individuals who register for our events, conferences, and webinars as participants, co-sponsors, or volunteers. We may also record our webinars and collect information about your participation, including questions asked, polls answered, and interactions with the webinar content. With your permission, we may use your image in any photographs, videotape, motion picture or any other media taken at our events.
Email and other communications	We may collect communications between you and us, such as via email, mail, phone, text, chat transcripts, or other channels. If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains, and/or make purchases or interact with Member Education materials.
Feedback/Support	If you provide us feedback or contact us for support, we will collect your name and e-mail address, as well as any other content that you send, so that we can reply.
Mailing List	When you register for one of our email lists, we collect your email address and/or postal address.
Mobile Devices	We collect information from your mobile device such as unique identifying information broadcast from your device and location when visiting our websites or using our application.
Partner Promotion	We collect information that you provide as part of a co-branded promotion with another company. We may also have service providers collect information on our or our partners’ behalf, and we may collect information from third-party sources, such as ZoomInfo.
Surveys and Member Portals	When you participate in a survey or contribute within member portals, we collect information that you provide through the survey or portal post. If the survey or portal is provided by a third-party service provider, the third party’s privacy policy applies to the collection, use, and disclosure of your information.
Online User Activity through website interactions	We use technology to monitor how you interact with our website. This may include which links you click on, or information that you type into our online forms. This may also include information about your device or browser.
Online User Activity through web logs	We collect information, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used), domain name, click-activity, referring website, and/or a date/time stamp for visitors.

If you provide us with information regarding another individual (such as an employee, or colleague), you represent that you have that person’s consent to give us their information and to permit us to use the information in accordance with this Privacy Notice.

 

3. Online User Activity.

Cookies are a commonly used web technology that allows websites to store and retrieve certain information on a user’s system, and track users’ online activities. We, together with vendors we use, may collect information about your use of our Services by such automated means, including but not limited to cookies, tags, beacons, pixels, SDKs and other similar technologies.

Cookies and similar technologies can help us automatically identify you when you return to our Services. Cookies help us review website traffic patterns, improve the Services, and determine which Services are popular. We can also use such information to deliver customized content and advertising to users of the Services whose behavior indicates that they are interested in a particular subject area.

When you use the Services, the information we may collect by automated means includes, for example:

• Usage details about your interaction with our Services (such as the date, time, and length of visits, and specific pages or content accessed during the visits, search terms, frequency of the visits, referring website addresses);
• Device information including the IP address and other details of a device that you use to connect with our Services (such as device type and unique device identifier, operating system, browser type, mobile network information, and the device's telephone number); and
• Location information where you choose to provide the Services with access to information about your device’s location.

We may also ask advertisers or other partners to serve ads or services to you, which may use cookies or similar technologies placed by us or the third party. If a user does not want information collected through the use of cookies, most browsers allow the visitor to reject cookies, but if you choose to decline cookies, you may not be able to fully experience the interactive features our Services provide. We may share non-personal information obtained via cookies with our advertisers and affiliates. Because there is not yet a consensus on how companies should respond to web browser-based do-not-track (“DNT”) mechanisms, we do not respond to web browser-based DNT signals at this time.

If we implement third party targeted advertising cookies or other tools that require an opt-out right under applicable privacy laws, we will provide an opt-out option, and endeavor to process “Global Privacy Control” (GPC) signals from web browsers by automatically opting-out such visitors from such third party tools, although GPC technology is not fully developed and it is not yet supported by all browsers. Where required by law, we may provide a cookie banner and opt-in consent functionality for certain cookies. Any choices concerning cookies are browser and/or device specific. If you clear your cookies from your browser on any of your devices, your choices will need to be reset.

 

4. Use And Processing of Information.

In addition to the purposes and uses described above, we use information in the following ways:

• To provide our Services to you, including to identify you when you visit our Services, manage any transactions and refunds/returns, provide important notices, respond to your requests, questions and comments, and provide customer support.
• To fulfill any obligation arising from a contract entered into between you and us.
• To track your progress through a member program or benefit you have requested (such as the Cybersecurity Trustmark or Member Education materials).
• To operate, evaluate and improve our Services and product offerings (including developing new Services), and diagnose or fix technology and other problems.
• To monitor the performance of our Services, including metrics such as total number of visitors, traffic, and demographic patterns, and to conduct other such analytics.
• To respond to inquiries related to support, membership, or other requests.
• To send marketing and promotional materials, including information relating to membership, Services, products, events, or promotions and including SMS marketing.
• For internal administrative purposes, as well as to manage our relationships.
• To comply with and enforce applicable legal requirements, industry standards, our policies and our contractual rights, as needed for security purposes, and to investigate and respond to possible fraud or safety issues.

If you register for membership, we may collect your information to perform our contract with you. We also collect your information because we have a legitimate interest in maintaining your information after your membership concludes so that we can quickly and easily respond to any questions about your history with the organization. As a result, our collection and processing of your information is based in different contexts, upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in maintaining our programs.

We may also use or share information in an anonymized or aggregate manner for many purposes without restriction, such as for research, analysis, modeling, marketing, and improvement of our Services.

 

5. Sharing Of Information.

In addition to the specific situations discussed elsewhere in this policy, we disclose information in the following situations:

• Affiliates and Acquisitions. We may share information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage.
• Online User Activity. As discussed above, certain Online User Activity may be shared through third party targeted advertising cookies or other tools, but subject to opt-out or opt-in functionality that we provide.
• Other Disclosures with Your Consent or Direction. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy. We may share your information when you direct us to do so, such as to a current or prospective employer, a third-party organization, or other unaffiliated third party.
• Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third-party intermediary.
• Public. Some of our websites may provide the opportunity to post comments, or reviews, in a public forum. If you decide to submit information on these pages, that information may be publicly available. You are solely responsible for information you choose to make public. Any information you post publicly will no longer be considered private information.
• Partner Promotion. We may offer contests, sweepstakes, or other promotions with third party partners (collectively, “contest” or “contests”). If you decide to enter a contest that is sponsored or administered by a third-party partner, the information you provide in connection with that contest will be shared with us and with them.  Their use of your information is not governed by this Privacy Policy.
• Service Providers. We may share your information with our service providers, such as HubSpot and Sakari. Among other things, service providers may help us to administer our Services (including IT services, maintenance and hosting), conduct advertising, conduct surveys, provide technical support, process payments, assist in fulfilling orders, and in delivering content and other materials. In some cases, these providers may use data we share with them for their own internal business purposes, such as to improve their services.

Where appropriate, we will limit sharing of your information in accordance with the choices you have provided to us and consistent with applicable law.

 

6. Your Privacy Choices.

You may have the following choices regarding your personal information based on your jurisdiction.

• Access To Your Personal Information. You may request access to your personal information by logging into your account (if you have one) or by contacting us at the address provided below. We will respond within the time required by law.
• Changes To Your Personal Information. We rely on you to update and correct your personal information. Most of our Services allow you to modify or delete your account profile. Note that we may keep historical information in our backup files as permitted by law. If our Services do not permit you to update or correct certain information, contact us at the address provided below.
• Deletion Of Your Personal Information. Typically, we retain personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may ask us to stop using all or some of your personal information, to limit our use of it, or to erase or delete all or some of it under certain circumstances. If you hold a GTIA Trustmark or if you engaged with our Services through an account established by your employer, we may be unable to comply with your request. We may take steps to verify your identity before acting on your request. You may submit a request under this subsection by contacting us at the address provided below.
• Promotional Emails. You may provide us with your email address and/or phone number for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can unsubscribe from promotional emails by following the instructions in e-mails that you receive.  If you decide not to receive promotional emails, we may still send you service-related communications.
• SMS/Text. If you opt-in to receiving text messages from us, you can opt out at any time by texting “STOP” to the text message received from us or following other instructions provided to you when you elected to receive texts. Please note that this will only opt you out of the specific text messaging program associated with that number. Mobile information will not be shared with third parties/affiliates for their marketing/promotional purposes. Any other mentions in this policy exclude text messaging or originator opt-in data and consent; this information will not be shared with any third parties for their marketing/promotional purposes.
• Cookies and similar tools: Web browsers may offer users the ability to disable receiving certain types of Cookies; however, if Cookies are disabled, some features or functionality of our Services may not function correctly. We also provide certain opt-out and/or opt-in functionality as described above.
• Device settings. Your device may enable you to disable certain permissions or functionality in our Services (e.g., location); however, when necessary permissions or functionality are disabled, some features or functionality of our website may not function correctly. You can also disable pop-up notifications in device settings.
• Additional notice for Nevada residents. Please note that we do not sell personal information as defined by Nevada law (Nevada Revised Statutes, Chapter 603A, Section 1.6), but you can submit a request to us as directed below regarding the sale of such information.
  
  

      7. International Notices and Rights.
This section is specifically intended for individuals residing outside of the United States (“US”). This includes residents of the European Economic Area ("EEA") including the European Union ("EU"), the United Kingdom ("UK"), Switzerland and other relevant jurisdictions with respect to privacy and data protection laws applicable to us. GTIA is a US-owned and operated organization, and is not generally subject to foreign laws, even for foreign individuals who visit our website or otherwise use our Services, but to the extent helpful or where specifically required by law, please note as follows:

1. Legitimate Bases for Processing: Where required by law, all processing of personal information is justified by a legally recognized basis for processing. In the majority of cases, processing will be justified on one or more of the following bases for processing: (i) The processing is necessary to perform a contract with you (such as if you purchase certain products or services, or subscribe to email marketing); (ii) The processing is necessary for us to comply with a relevant legal obligation, such as keeping accounting records; (iii) The processing is in our legitimate interests, which are not overridden by your interests and fundamental rights. Our legitimate interests are to use user information and other available data to reasonably and responsibly conduct and develop our business activities without abusing any privacy interests or rights of such individuals; and (iv) In some instances, we rely on your consent to our processing (at times as a secondary basis for processing in an abundance of caution). Additional information about our legitimate bases for processing is provided in Section 2 above.
2. Transfer of Personal Information: If you are in the EEA/EU, the UK, Switzerland or another jurisdiction that has imposed similar legal requirements regarding the lawful transfer of personal information from that jurisdiction to another country (e.g., the US), to the extent that we engage in such a transfer of your personal information (a “Cross-Border Transfer”) we will take steps to ensure that such Cross-Border Transfer satisfies known legal requirements. In particular: If we transfer personal information to a jurisdiction deemed by relevant regulatory authorities to provide adequate protection for personal information, we will rely on such adequacy decision, as applicable, and will otherwise take steps to conduct the Cross-Border Transfer using other legally-valid mechanisms, such as by entering into data transfer agreements with standard contractual clauses ("SCCs") among our affiliates and with relevant service providers, in any necessary supplementary safeguards.
3. Exercising Your Privacy Rights: Residents of certain jurisdictions are entitled to exercise certain rights under privacy laws applicable to their personal information. The rights described below are, for example, applicable to residents of the EEA/EU, Switzerland and UK. This includes the right to (a) request access to your personal information; (b) request that we correct inaccurate personal information we hold about you; (c) request that we delete any personal information we hold about you; (d) restrict or object (i.e., withdraw consent) to the processing of personal information we hold about you in some circumstances; and/or (e) receive any personal information we hold about you in a structured and commonly used format.  You also have the right to lodge a complaint with your supervisory authority if the processing of your personal information infringes applicable law. Please contact us as provided below if you wish to exercise any of your rights, or if you have any inquiries or complaints regarding the processing of your personal information.
   
   
   8. How We Retain and Protect Personal Information.

We apply a general rule of keeping personal information only for as long as required to fulfill the purposes for which it was collected including (i) to provide you with our products and services, such as to maintain account records while active and after termination for the purposes described above, and (ii) as reasonably necessary for legal, tax and accounting requirements, or if required to do so by a legal process, legal authority, or other governmental entity having authority to make the request, for so long as required.

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use commercially reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot absolutely guarantee the security of your personal information. If legally required and/or permitted by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone.

Some of our Services permit you to create an account. When you do, you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

 

9. Links to Other Online Sites and Services.

Our Services may contain links to other websites or online services, including social media. Please be aware that we are not responsible for the content or privacy practices of such other websites or online services, and we encourage you to be aware when you leave our Services and to read the privacy statements of any other website or online service that collects personal information.

You may see us promoted by other businesses on various websites, web pages, social media and other platforms. Please note that we do not always have complete information about where our brand may be displayed or promoted, and if you believe that we are featured in venues that are inappropriate or offensive, please contact us.

 

10. Children’s Privacy.

We do not direct our online Services to children (individuals under 18) and we do not knowingly collect their information online, except that minors may attend GTIA events where a parent or legal guardian provides information and consent through GTIA’s Minor Attendance Form. If we learn that we have otherwise collected a child’s personal information online without the required parental consent, we will delete it as soon as reasonably possible.

 

11. Updates to our Privacy Policy

We reserve the right to amend this Privacy Notice from time to time and for any reason, in our sole discretion, by updating this Privacy Notice. If we decide to change our Privacy Notice, we will post those changes so our users are always aware of what information we collect, how we use it and under what circumstances we disclose it. Your continued access or use of our Services following the posting of changes to this Privacy Notice means that you accept such revisions, changes and/or amendments. If you object to any of the changes to this Privacy Notice, please stop accessing our Services.  

 

12. International Considerations.

As a multi-national non-profit, we may transmit information between and among our affiliates. Therefore, your information may be processed in a foreign country where privacy laws may be less stringent than the laws in your country. Nonetheless, where possible, we take steps to treat personal information using the same privacy principles applicable to the law of the country where we first received your information. By submitting your personal information to us you agree to the transfer, storage, and processing of your information in a country other than your country of residence including, but not necessarily limited to, the United States. If you would like more information concerning our attempts to apply the privacy principles applicable to the jurisdiction where data originates to that of another, you can contact us using the contact information below.

 

13. Contact Information.

If you have any questions, comments, or complaints concerning our privacy practices please contact us at the appropriate address below. We will attempt to respond to your requests and to provide you with additional privacy-related information.

[email protected]

If you are dissatisfied with our response, and are in the European Union, you may have a right to lodge a complaint with your local supervisory authority.

Last Revised: October 29, 2025

Effective Date: April 11, 2023