1. Introduction
The CISO Reserve ("The CISO Reserve," "we," "us" or "our") respects your privacy. This Privacy Policy explains how we collect, use, share and protect personal information about members, applicants, Getaway attendees, partners and visitors to thecisoreserve.com (together, our "Services").
We aim to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA) and the Colorado Privacy Act (CPA). By using our Services, you acknowledge the practices described in this policy.
2. Information we collect
Information you provide to us
When you apply for membership, inquire about a partnership, register for a Getaway or otherwise contact us, we may collect:
- Identity information: your name, job title, LinkedIn profile and professional biography.
- Contact information: work and personal email addresses and phone numbers.
- Professional information: your organization, industry, organization size, reporting structure, referrals and the topics you want to discuss.
- Getaway logistics: dietary requirements, accessibility needs, emergency contacts, apparel sizes and activity preferences.
- Payment information: billing details needed to process fees or partnership payments.
Dietary, accessibility and health-related details may be considered sensitive personal information. We collect them only with your explicit consent and only to keep you safe and comfortable at our events.
Payments are handled by third-party payment processors. We do not store full credit card numbers on our systems.
Information collected automatically
- Technical data: IP address, browser type and version, device type, operating system and time zone.
- Usage data: pages viewed, links clicked and the referring website.
- Cookies and similar technologies: see Cookies and tracking below.
3. How we use your information
We use personal information to:
- Provide our Services: review applications, manage memberships, plan and run Getaways and respond to inquiries.
- Maintain a trusted community: confirm that applicants meet our membership criteria and support introductions among members.
- Communicate with you: send updates about the community, upcoming Getaways and partnership opportunities. You can opt out of marketing messages at any time.
- Improve our Services: understand how our website is used and make it better.
- Meet legal obligations: comply with law, enforce our terms and protect the rights and safety of our members and others.
5. Your data protection rights
Wherever you live in the United States, you may ask us to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your personal information, subject to legal exceptions such as records we must keep.
- Opt out of marketing by using the unsubscribe link in any email or by contacting us.
To make a request, email mark@thecisoreserve.com. We may need to verify your identity before responding.
6. State-specific rights
California residents
Under the CCPA/CPRA, California residents have the right to:
- Know the categories and specific pieces of personal information we have collected, the sources, the purposes and the categories of third parties we share it with.
- Opt out of the sale or sharing of personal information. To opt out, email mark@thecisoreserve.com with the subject line "Do Not Sell or Share My Personal Information."
- Limit the use of sensitive personal information to what is necessary to provide our Services.
- Non-discrimination: we will not treat you differently for exercising your privacy rights.
Virginia, Colorado, Connecticut and Utah residents
Residents of these states have similar rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising, sale and certain profiling. If we decline your request, you may appeal by replying to our decision. If your appeal is denied, you may contact your state's Attorney General.
How to exercise your rights
Email mark@thecisoreserve.com. We respond to verified requests within the time required by applicable law. You may also use an authorized agent to submit a request on your behalf.
7. Data security and retention
As a community of security leaders, we take safeguarding your information seriously. We use reasonable administrative, technical and physical measures, including encryption in transit (TLS), access controls limited to those who need the information and review of the vendors we rely on. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
We keep personal information only as long as needed for the purposes described in this policy, or as required by law. When it is no longer needed, we delete or anonymize it.
9. Children's privacy
Our Services are intended for business professionals. We do not knowingly collect personal information from children under 13, or under 16 where local law sets a higher age. If you believe a child has given us personal information, contact us and we will delete it.
10. International users
Our Services are operated in the United States. If you access them from outside the U.S., your information will be transferred to, stored and processed in the United States, where data protection laws may differ from those in your country.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and revise the "Last updated" date above. For significant changes, we may also notify members by email.
12. Contact us
Questions about this policy or how we handle your information can be sent to:
The CISO Reserve
mark@thecisoreserve.com