Privacy Policy

Last Updated: June 18, 2026

Introduction

At IS-MPMI, accessible from https://ismpmi.org/, the privacy and security of our visitors is a top priority. This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights and choices you have.

This policy applies to information collected through our website only. It does not cover data collected offline or via third-party services that link to or from our site.

By accessing or using IS-MPMI, you acknowledge that you have read and agree to this Privacy Policy. Questions or requests may be sent to contact@ismpmi.org.

Definitions

• Personal Data: Any information relating to an identified or identifiable person, including name, email, IP address, and online identifiers.
• Processing: Any operation on personal data, including collection, storage, use, transfer, and deletion.
• Data Controller: IS-MPMI, determining the purposes and means of processing personal data on IS-MPMI.
• You / User: Any individual accessing or using IS-MPMI.

Information We Collect

1. Information You Provide Directly

• Contact form submissions: name, email address, and message content
• Account registration: name, email address, username, and encrypted password
• Billing details (processed securely via third-party processors; full card numbers are never stored on our servers)
• Email address and preferences for newsletter or mailing list subscriptions

2. Automatically Collected Data

• IP address, browser type and version, operating system, and device type
• Pages visited, time and date of visit, duration, and referring URL
• HTTP request headers and server log data
• Cookie identifiers, session tokens, and similar tracking data (see Cookies section)
• Aggregated usage analytics via Google Analytics 4 or similar services
• Interaction data from embedded third-party content (e.g. videos, social widgets, maps)

How We Use Your Information

We process personal data for the following purposes:

Cookies and Tracking Technologies

IS-MPMI uses cookies, web beacons, and similar technologies. Cookies are small text files placed on your browser to help us deliver and improve our services. We use the following categories:

Managing Cookies: You can control or delete cookies through your browser settings. Opt-out tools: DAA Opt-Out, Your Online Choices (EU), Google Analytics Opt-Out. Disabling strictly necessary cookies may impair website functionality.

Cookie Consent: Where required by law, you will be presented with a cookie consent banner on your first visit. Your preference is stored and honored on subsequent visits.

Analytics

We use Google Analytics 4 (GA4) to measure traffic and usage patterns. GA4 uses first-party cookies and does not use third-party cookies for cross-site tracking. Our privacy configuration includes:

• IP anonymization enabled; your full IP address is never stored by Google
• Data retention configured to a maximum of 14 months
• We have signed a Data Processing Amendment with Google in accordance with GDPR
• GA4 data is not shared with Google for its own advertising purposes

You may opt out of Google Analytics tracking at any time via the Google Analytics Opt-Out Browser Add-on.

Payments and Financial Transactions

Payments are processed by PCI-DSS Level 1 compliant third-party processors. We do not store, transmit, or access full payment card numbers. Our payment infrastructure includes:

• SSL/TLS encryption for all payment data in transit
• PCI-DSS compliant environments audited by certified security assessors

Transaction records (excluding card details) are retained for up to 7 years for accounting, tax, and legal compliance.

Email Communications and Newsletter

With your consent, we may send newsletters, product updates, or promotional emails. Every commercial email includes a working one-click unsubscribe link in compliance with the CAN-SPAM Act and, where applicable, CASL. You may also unsubscribe by emailing contact@ismpmi.org. Requests are processed within 10 business days. We may retain your address on a suppression list to honor your opt-out preference.

Embedded Third-Party Content

Our pages may include embedded content from YouTube, Google Maps, or MembershipWorks platforms. Embedded content behaves as if you visited the originating website directly and may collect data, set cookies, and track your interaction independently. We encourage you to review each provider’s privacy policy before interacting with embedded content.

Third-Party Services and Integrations

We work with trusted third-party service providers who may access your personal data only to the extent necessary to perform services on our behalf. All processors are bound by Data Processing Agreements (DPAs). Categories include:

• Hosting and infrastructure: Cloud providers who host our website and databases
• Analytics: Tools for measuring usage and performance
• Email delivery: Providers for transactional and marketing emails
• Payment processing: PCI-compliant payment processors
• Security and monitoring: Fraud detection and uptime monitoring services

How We Share Your Information

We do not sell your personal information. Data is shared only in these limited circumstances:

• Service Providers: Trusted processors under contract who help operate our website; they may only process data as instructed by us.
• Legal Requirements: Where required by law, regulation, subpoena, or court order. We notify you where legally permitted before disclosing.
• Safety: To protect the rights, property, or safety of IS-MPMI, our users, or the public.
• Business Transfers: In a merger, acquisition, or asset sale, your data may transfer. You will be notified via a prominent website notice and, where feasible, by email.
• With Your Consent: For any other purpose with your explicit prior consent.

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• HTTPS/TLS 1.2+ encryption for all data in transit
• Role-based access controls limiting data access to authorized personnel
• Regular security assessments, penetration testing, and vulnerability scanning
• Real-time monitoring systems for detecting suspicious activity
• PCI-DSS compliant payment environment

In the event of a personal data breach likely to result in risk to your rights, we will notify affected individuals and relevant supervisory authorities within the legally mandated time frame (e.g. 72 hours under GDPR).

Data Retention

We retain personal data only as long as necessary to fulfill stated purposes or as required by law:

Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or transfer your personal data. You may exercise these rights by contacting us at contact@ismpmi.org. We will respond within the time frame required by applicable law. You will never be penalized or discriminated against for exercising your privacy rights.

GDPR – European Union Data Protection Rights

If you are in the EU or EEA, the General Data Protection Regulation (EU) 2016/679 grants you these rights:

• Right of Access (Art. 15): Request a copy of personal data we hold and how it is processed.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data without undue delay.
• Right to Erasure / “Right to be Forgotten” (Art. 17): Request deletion of your data where no longer necessary, consent is withdrawn, or processing is unlawful, subject to legal retention obligations.
• Right to Restriction of Processing (Art. 18): Request we temporarily halt processing in certain circumstances.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format (e.g. CSV/JSON) and transfer it to another controller where technically feasible.
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing; we will cease unless we demonstrate compelling grounds.
• Rights re: Automated Decisions (Art. 22): Not be subject to solely automated decisions, including profiling, that produce significant legal or similarly significant effects, without human review.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing relies on it, without affecting the lawfulness of prior processing.

Legal Bases for Processing: Art. 6(1)(a) Consent; Art. 6(1)(b) Contract; Art. 6(1)(c) Legal obligation; Art. 6(1)(f) Legitimate interests. For special category data, we rely on Art. 9(2)(a) explicit consent or other applicable bases.

International Transfers: Transfers outside the EEA are protected by EU Standard Contractual Clauses (SCCs, Commission Decision 2021/914), adequacy decisions, or other lawful Chapter V GDPR mechanisms.

Data Protection Officer: Where legally required, a DPO has been appointed. Contact: contact@ismpmi.org.

We will respond to GDPR requests within 30 days (extendable by 2 months for complex cases). You may also lodge a complaint with your EU Member State’s supervisory authority (DPA).

CCPA / CPRA – California Consumer Privacy Rights

The California Consumer Privacy Act (CCPA), as amended by the CPRA (effective January 1, 2023), grants California residents:

• Right to Know: Disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom data is shared.
• Right to Delete: Request deletion of personal information, subject to exceptions (completing transactions, security, legal obligations).
• Right to Correct: Request correction of inaccurate personal information we hold.
• Right to Opt Out of Sale or Sharing: Opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell personal information. Should this change, we will add a “Do Not Sell or Share My Personal Information” link to our homepage.
• Right to Limit Sensitive Personal Information: Restrict use of sensitive personal information to necessary purposes only.
• Right to Non-Discrimination: We will not deny service, charge different prices, or provide lower quality because you exercised a CCPA right.

Personal information collected in the past 12 months: Identifiers (name, email, IP address); Internet or network activity (browsing history, site interactions); Commercial information (if purchases made); Geolocation data (if location features used); Inferences drawn to build user profiles.

Submit CCPA requests to contact@ismpmi.org. We verify identity and respond within 45 days (extendable by 45 days). Authorized agents may submit requests on your behalf with proper documentation.

Other US State Privacy Rights: Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and other states with similar privacy laws may exercise equivalent rights by contacting contact@ismpmi.org.

COPPA – Children’s Online Privacy Protection

IS-MPMI is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions where a higher threshold applies, such as certain EU member states under GDPR Art. 8).

If we discover we have inadvertently collected data from a child under the applicable age threshold without verified parental consent, we will delete it immediately. Parents or guardians who believe their child has submitted data on IS-MPMI should contact us at contact@ismpmi.org. We will investigate and take corrective action within 72 hours of notification.

Links to External Websites

IS-MPMI may contain links to third-party websites. Once you leave our site, this Privacy Policy no longer applies. We have no control over and accept no responsibility for external sites’ content, privacy policies, or practices. We recommend reviewing the privacy policy of any third-party site you visit.

Do Not Track (DNT) Signals

Some browsers transmit “Do Not Track” signals to websites. There is currently no universally accepted standard for how websites must respond to DNT signals. At this time, IS-MPMI does not alter its data collection practices in response to DNT browser signals. We will review this position as industry standards evolve.

IS-MPMI Event Terms & Conditions

Attendee Information

A full list of attendees will be viewable in the mobile and/or web-based apps for select events. Attendees can direct message through the apps to connect, set appointments, and network with other attendees. The full attendee list will be available in the app for a limited time post-event. A PDF document will be provided to exhibitors and sponsors including attendee’s full name, role, organization/affiliation, and mailing address.​

Cancellation/Refund Policy

Registration cancellations must be made in writing and received by IS-MPMI by date specified for each event. Cancellations received by this date may be subject to a processing fee. Registration cancellations received after a specified date, may not be subject to a refund. In the event of an IS-MPMI-cancelled event, IS-MPMI will refund registration fees for the cancelled event. By registering for this meeting, you agree to the cancellation and refund terms and conditions.​

Expected Behavior Policy

We are dedicated to providing a harassment-free meeting experience for everyone, regardless of gender, sexual orientation, disability, physical appearance, body size, race, or religion. We do not tolerate harassment of participants in any form. We ask all attendees, exhibitors, speakers, sponsors, volunteers, guests and other participants be considerate and respectful to all members and refrain from demeaning, discriminatory, or harassing behavior and speech. Please note, if you register a guest for the meeting, you may be held responsible for the actions of the guest. Violations of this policy should be reported to meeting staff.

IS-MPMI reserves the right to remove any individual from attendance or other participation in any IS-MPMI sponsored event without prior warning or refund, and to take additional action as determined necessary, up to and including expulsion from participation in IS-MPMI. Any course of action recommended by IS-MPMI is final.​

Force Majeure

If IS-MPMI is prevented from carrying out its obligations as it pertains to any event as a result of any cause outside of our control, or the event cannot be conducted virtually because of a software issue or issue with the hosting platform, IS-MPMI shall have the right to immediately terminate all or a portion of the event without liability and shall be relieved of its obligations to any registrant. An event outside of our control includes, but is not limited to: acts of God, strikes or labor disputes, government requisitions, restrictions or war or apparent act of war, terrorism, disaster, civil disorder, epidemic or pandemic curtailment or restriction on transportation. If the event is terminated due to Force Majeure occurrence before the first day of the event, IS-MPMI will reschedule the event and your registration fee will be applied to the rescheduled event.

Limitations on Use

By registering for a paid IS-MPMI event, you agree not to share, sell or trade your access. By registering for an IS-MPMI event you agree not to sell, trade, transfer, or share your complimentary access link and/or code, unless such transfer is granted by IS-MPMI. If IS-MPMI determines that you have violated this policy, IS-MPMI may cancel your access, retain any payments made by you, charge an additional fee, and/or prohibit you from attending future events.​

Recording, Live Streaming, and Videotaping

To encourage open communication and the sharing of unpublished data and ideas participants agree to not record, broadcast, video, post to social media or otherwise distribute sessions at any IS-MPMI events without the consent of the presenter.​

Virtual (Zoom) Meeting Policy

Consistent with IS-MPMI privacy and security policies, IS-MPMI does not permit 3rd party note-takers or AI assistants in Zoom meetings. The Zoom AI is available to Zoom attendees and the transcriptions can be made available to all attendees after a meeting. Failure to comply with this policy may result in the 3rd party tool being removed from the meeting.​

Use of Likeness

By participating in an IS-MPMI event, you acknowledge and agree to grant IS-MPMI the right to record, film, live stream, photograph, or capture your likeness in any media now available or hereafter developed and to distribute, broadcast, or use without any further approval from you or any payment to you. IS-MPMI reserves the right to edit such media, the right to use the media alone or together with other information, and the right to allow others to use or disseminate the media.​

Housing

Booking a room at a contracted hotel under the official IS-MPMI room block benefits you and it supports the Society. When you “book within the block,” you help our organization secure future meeting sites, you enable us to provide some important features that participants have come to enjoy, and you help keep the meeting registration fees lower. Please book responsibly.

By selecting the housing discount during registration, if available, you are agreeing to stay at the event hotel in exchange for a specified discount on your registration fee. If you choose other accommodations after registration and/or we are unable to confirm your stay, you will be charged an additional fee equal to the discount after the meeting. As an attendee, you agree that contracted hotels can provide the organization with information about your reservation.

IS-MPMI is aware of companies pretending to be the “official” IS-MPMI housing company, offering special non-refundable rates, and requesting credit card information. There is NO company that is authorized to solicit directly by telephone for hotel bookings or special discounts. We encourage attendees to book directly with our contracted hotel via the reservation link on the hotel travel page.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. When material changes are made, we will update the “Last Updated” date at the top and post a prominent notice on our website, and where feasible notify subscribers via email. Your continued use of IS-MPMI after any modification constitutes acceptance of the revised policy. We encourage you to review this page periodically.

Contact Us

For questions, data subject requests, or privacy complaints, please contact us:

• Website: https://ismpmi.org/
• Email: contact@ismpmi.org

We aim to respond to all inquiries within 5 business days, and within applicable legal deadlines for formal data subject requests.