Policy

Data Protection & GDPR.

Our approach to data protection, including GDPR principles.

Lawful basis

We process personal data on the basis of your consent (applications and enquiries) and our legitimate interest in running the association and its register.

Your GDPR rights

Where GDPR applies, you have the right to access, rectify, erase, restrict, port and object to processing of your personal data. To exercise these, email support@iapcct.com.

International transfers

As a global body, we may process data across borders. We take reasonable steps to ensure appropriate safeguards.

Data requests & breaches

We respond to data requests within a reasonable period and will notify affected individuals of a material breach where required.

This policy is provided as a starting template. Have it reviewed for your jurisdiction before launch. Last updated: 2026.