CISO Network Privacy Policy

CISO Network Inc. (hereinafter, “CISO Network,” “we,” “us,” or “our”)  is a US-based invitation-only community of senior executives  which provides highly-valuable support services to our members (collectively,  the “Services”).

This Privacy Policy (the “Policy”) explains how we collect, process, and  share personal data (also referred to as personal information) of  individuals who are not part of our organization, including but not limited to our members, sponsors, partners, website visitors, and service providers and their respective individual representatives (referred to in this Policy as “you” or “your”). Personal data generally includes any information about you – an individual, natural person. 

As further explained below, we collect and process personal data only  for lawful reasons, such as when the processing is necessary to perform a  contract (for example, to provide Services to our members), our  legitimate business interests, such as improving, personalizing,  marketing, and developing the Services and promoting safety and  security, or, where required, obtaining your consent.

Information We Collect From You

Applications, Forms, and Profile Data:  When you apply for membership with us or submit a form seeking more  information, you provide us with the information requested in the  application or form. This information may include your name, email  address, phone number, address, employment information, and other  information about your professional interests, goals, background, and  experience.   

Inquiries, Discussions, and Other Data:  

When you interact with us or other members through our Slack channel, online contact form, group email list, email, or any other communication mechanism, you may provide us with your name, profile picture, email address, phone number, employment information, professional background, and any other information you choose to provide.

For example, you may provide this information when you:

• Join our Slack channel
• Send us an email
• Submit a question through our online contact form
• Participate in a group email discussion
  

Event Audio and Video: We may record audio  and/or video of our members, sponsors, and panelists at events for  marketing purposes and also so members who were unable to attend the  event live may watch or listen to it at a later date. We also may  request that our members provide testimonials for our marketing  purposes.  

No Sensitive Information: Please do not provide  any highly sensitive personal data to us – such as social security  numbers, health or medical information, racial or ethnic origin,  political opinions, religious or philosophical beliefs, trade union  membership, or data concerning a person’s sex life or sexual  orientation. We do not intentionally process highly sensitive personal  data and reserve the right to reject or delete it.  

Information We Collect from Third Parties From time to time, we may collect personal data from third parties such  as public websites, news and news outlets, or social networks, such as  LinkedIn and Twitter. This information may include names, contact  information, email, professional or employment information, and other  information where publicly available.

We may use information collected from third parties for our own  promotional or marketing purposes, such as sending prospective members  emails about our Services.

In sum, we use data collected from you or third parties for:

– Membership: We use your application and interview data to determine whether to grant you membership in CISO Network.

– Provide, Improve, and Maintain the Services:  We use the data you provide to set up your account profile; provide,  improve, and customize the Services; and communicate with you about your  account and the Services.

– Marketing: We may use your information to  market and promote our Services. You may opt-out of marketing  communications at any time by clicking the “Unsubscribe” button in the  applicable communication.

– Protect You and the Services: We use the  information we collect to promote the safety and security of the  Services, our members, and other parties. For example, we may use  personal information to authenticate users, protect against fraud and  abuse, respond to a legal request or claim, conduct audits, or enforce  our contracts and policies that may be in effect.  

Information We Collect Automatically

We collect certain information via cookies and similar automated  means when you use the Services and visit our website, some of which  may be personal data. Cookies and similar technologies do not gather  your unique personal data, like name, date of birth, gender, or email.  Rather, the information collected by cookies and other automated means  is generally about your devices, such as type of device, settings,  frequency of usage, search history, IP address, browser used, operating  system and settings, access times, and referring url.  

In sum, we use data collected automatically from your devices for the following purposes:

CISO Network and its analytics partners and service providers use the  automatically collected data described above to provide and improve the  Services, including to:

– keep track of your preferences and account information,
– customize Services and content,
– measure promotional effectiveness,
– estimate your general location and time zone, and
– secure your account

You have options to control or limit how we or our partners use  cookies and similar technologies. For more information, please see www.allaboutcookies.org/cookies. 

We share your personal data with the following types of third parties:   

• IT service providers,  such as Google, to store and secure your personal data. These providers  are contractually obligated to protect your personal data to the same  standard as we do.
• Customer relationship management (CRM) tools to help us manage our member and prospective member base. These tools  help us keep track of your contact information, membership status, and  other relevant information.
• Chat platforms, such as  Slack, to facilitate discussions with us and among our members. These  platforms allow us to communicate with you in a private and secure way.
• Email and communications partners to send you marketing emails and generally communicate with you. These  partners are contractually obligated to only send you emails that you  have opted in to receive.
• Analytics and measurement partners to help us improve, customize, and promote the Services. These partners  help us understand how you use the Services so that we can make them  better.

We only share your personal data with third parties when it is necessary to provide, improve, promote, and secure the Services. We take steps to ensure that your personal data is protected when it is shared with third parties.

A note about how we share your data with our event sponsors:

If you attend one of our sponsored events, we may share your  name, email, job information, and LinkedIn profile with the sponsor for  their own marketing and business purposes. If we are required to do so  under applicable law, we will obtain your consent before sharing your  data with our sponsors for their own purposes.

Other than the limited sharing with sponsors described above, we  do not sell, rent, or lease your personal data to third parties or  share personal data with third parties for their own marketing or  business purposes. 

To submit a question or concern about how to control, modify, or cancel your membership or data, contact us at info@cisonetwork.net. Depending on your location, you may have certain legal rights regarding your personal data, including:   

– You may request access to your personal data and obtain  information about our processing of your personal data, with whom we  share your personal data, and your rights.
– You may request that we restrict our processing of your personal data.
– You may object to our processing of your personal data.
– If we process personal data based on your consent, you may withdraw your consent.
– You may correct personal data that is inaccurate or incomplete.
– You may request that we delete your personal data or provide a copy of it to you.

We may request proof of your identity before acting upon any  request. To submit a question or concern about your rights, please  contact us at info@cisonetwork.net.  

We take steps to protect your personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These steps include:

• Administrative safeguards: We have implemented administrative procedures to protect your personal  data, such as access controls and training for our employees on data  security.
• Technical safeguards: We use technical measures to protect your personal data, such as encryption and firewalls.
• Organizational safeguards: We have implemented organizational measures to protect your personal data, such as data retention policies and procedures.

We restrict access to your personal data to our employees, contractors, and certain third-party service providers who need to access it to provide the Services to you. These individuals are contractually obligated to protect your personal data to the same standard as we do.

Data retention

We generally store your personal data for as long as necessary to provide the Services to you. When you cancel your membership, we take reasonable steps to delete your personal data within a reasonable period of time. However, we may retain certain personal data after you cancel your account to the extent necessary to comply with our legal and regulatory obligations, for the purpose of fraud monitoring, detection and prevention, and for our tax, accounting, and financial reporting obligations. Where we retain data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.

Our Services are intended for adults 18 years of age or older. We do not  knowingly collect personal data from children under 18. If we learn  that we have collected any personal information from a child under 18,  we will take reasonable steps to delete such information. 

Third-party websites

We may provide links to third-party websites on our website. These websites are not operated by us and we have no control over their privacy practices. When you click on a link to a third-party website, you will be directed to that website's privacy policy. We encourage you to review the privacy policies of all third-party websites before providing any personal data to them.

We are not responsible for the content or information of third-party websites, any products or services that may be offered through them, or any other use of the websites.

Here are some tips for protecting your privacy when using third-party websites:

• Read the privacy policy of the website before providing any personal data.
• Be careful about what personal data you provide.
• Do not click on any links in emails or messages from unknown senders.
• Use a strong password and change it regularly.
• Keep your software up to date.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on our website and/or through our Services. It is your responsibility to periodically review this Privacy Policy. By continuing to use our Services or engage with us after any changes have been posted, you are agreeing to be bound by the updated Privacy Policy.

If you have any questions about this Privacy Policy, please contact us at info@cisonetwork.net

If you have any questions, comments, or concerns regarding this Policy or our practices please feel free to write to us at: Info@cisonetwork.net