Privacy Notice

Global Association of Risk Professionals, Inc. (“GARP”, “our” “we” or “us”) is committed to protecting your privacy and the personal information you have entrusted to us. This privacy notice (“Privacy Notice”) outlines how GARP collects and processes information through www.garp.org (the “Site”) or through your use of any of our other services (collectively, the “Services”) as well as the steps we take to ensure that such information remains secure.

Information consists of personal information and non-personal information. “Personal information” refers to any information you provide to us directly that identifies you personally, either alone, or in combination with other information. Some examples of personal information are your name and email address. “Non-personal information” refers to information that does not identify you personally. Some examples of non-personal information are cookies and your device’s operating system.

Information You Provide to Us Directly

We may collect from you and process any of the following personal information, dependent upon the specific Service you’ve requested and the country in which you reside:

• Name

• Date of Birth

• Passport Number

• Driver’s License Number

• Email Address

• Postal Address

• Phone Number

• Job Title

• Employer

• Payment Information (e.g., credit card)

 

 

To lawfully process your personal information, we rely upon either your consent or our obligation to fulfill a contract we have with you. In certain limited circumstances, we may process your personal information where it is in our legitimate interests, provided that such processing is not overridden by your privacy rights.

Information We Collect

When you use the Services, including interacting on our Site we may automatically collect certain non-personal information from your visit, often referred to as technical information. The technical information obtained from your computer or mobile device may include:

• Internet Service Provider

• Location of your computer or mobile device

• Device operating system

• Browser details

• Full URL clickstream to, through and from the Site

• Pages and content viewed on the Site

• Length of visit(s)

• Frequency of visit(s)

• Technical error details (if applicable)

Technical information collected is used to:

• isolate and troubleshoot any technical errors on the Site

• monitor Site performance

• improve the overall Site experience

• ensure content served to you on the Site is optimized for your computer or mobile device

• analyze Site traffic patterns

• support Site security efforts

We use Stripe for payment processing services. Stripe collects transaction and personally identifying information, which it analyzes and uses to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at www.stripe.com/privacy.

We also use “cookies” and similar technologies (e.g. Google Analytics) to collect information about your use of the Site. To learn more about our use of cookies and similar technologies and to configure preferences, please read our Cookie Policy. You may also opt-out of having your activity on the Site available to Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on.

Information We Receive from Other Sources

We may receive personal information about you from our authorized business partners, including, payment processors, exam administration companies, exam preparation providers, and package delivery companies. An example would be updated postal address information from one of our package fulfillment partners.

How We Store Your Information

Your privacy and the security of your personal information is paramount to us. We store your personal information on secure servers located within the United States. We have in place appropriate technical and organizational safeguards to protect your personal information from unauthorized use, disclosure or loss, including, current industry standard encryption protocols. Further, we limit access to your personal information to those specific individuals with a need to know in order to provide the Services. Where payment for Services is required, we utilize a PCI compliant payment service provider to securely process payment card transactions.

We will retain your personal information for the minimum duration necessary for us to fulfill our obligations with respect to the Service(s) rendered to you. In certain instances, we may be required to retain your personal information for a greater duration in order to comply with our document retention policies and requirements pursuant to applicable laws.

Where we have provided you with login credentials, including the ability to select and reset your password, you are responsible for keeping it confidential.

Who We Share Your Information With

We will never sell your personal information to a third party. However, we do utilize third parties to assist us in performing the Services. In this regard, we may share your personal information with our affiliates and third-party partners, but only to the extent necessary to provide the Services. Where we do so, such third parties are contractually bound by a duty of confidentiality and only process your personal information upon our instructions. Depending on your country of residence, our sharing of your personal information with certain third-party partners may constitute an international data transfer under applicable law. In such instances, we have implemented appropriate safeguards to ensure your personal information remains protected, and rely upon adequacy decisions, or enter into data processing agreements that require third-party partners process your personal information in compliance with applicable data privacy laws and maintain adequate data security measures.

• Third Party Partners – including, cloud service providers, exam delivery partners, exam preparation providers, payment processors, and package fulfillment companies.

When you register for an exam, we give you the option to have exam preparation providers (“EPPs”) contact you regarding the services they offer to prepare candidates to take our exams. With your consent, we will share your name, email address, and city/state of residence with such EPPs.  The purpose of sharing your city and state is to provide EPPs with the region in which you are located. 

We also sometimes provide eligible sponsors of GARP’s conventions, symposiums, and webinars (collectively, "GARP Events") with a list of registrants. The registrant list includes the registrant’s name, title, organization and email address. Upon conclusion of any GARP Event, we may allow certain eligible sponsors to email you a single time regarding their products and services, unless you reside in a jurisdiction that requires we obtain your explicit consent to do so.

We use Zoom to provide our business phone system. With respect to GARP’s use of Zoom as a phone system:

• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.

• All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We may also share your information with governmental authorities or law enforcement as compelled or required by law.

What are Your Rights

You have the following rights with respect to your personal information:

• The right to access: you have the right to request a copy of the personal information held by us about you. We may be permitted to charge you a small fee for this service.

• The right to rectification: you may request we update or correct your personal information. Certain personal information about you can be updated without our assistance through your account.

• The right to withdraw your consent: where you have consented to our processing your personal information, you have the right to withdraw such consent at any time, subject to certain conditions.   

• The right to portability: you may request we port (that is, transmit) your personal information directly to you or another organization, subject to certain conditions.

• The right to erasure: you may request us to erase your personal information – this is known as the "right to be forgotten". However, there are certain situations where we may be required to retain your personal information to fulfill our contractual obligation to you or to comply with document retention policies.

• The right to object to processing: you may request that we stop processing your personal information, subject to certain conditions.

• The right to restrict processing: you have the right to object to our processing your personal information for specific purposes, such as for the purposes of direct marketing.

To exercise any of your rights related to your personal information, please contact us at: privacy@garp.com.

What are Your Choices

We give you the choice of receiving a variety of information that complements our products and services. You can subscribe to receive certain product-specific and service-specific information and also choose to receive our general communications.

You can modify your preferences for receiving either subscription or general communications from us through your account or the manage preferences link contained at the bottom of any email. This option does not apply to communications primarily for the purpose of administering order completion, fulfilling a contract, support, or other administrative and transactional notices where the primary purpose of these communications is not promotional in nature.

Our Photography/Videography Policy

If you attend one of our symposiums or any other GARP Event where you are physically or virtually present, your likeness may be captured and used in accordance with our Event Media Policy, incorporated herein by this reference.

Contact

Any questions regarding our privacy notice can be directed to the following:

Global Association of Risk Professionals, Inc.
Attn: Legal Department
111 Town Square Place, 14th Floor
Jersey City, NJ 07310
privacy@garp.com

Updates to Privacy Notice

We may update this Privacy Notice at any time by posting the amended version on the Site, including the effective date.