Privacy Policy

1. Who We Are

World Development Council is a global, execution-led institution that converts policy intent, institutional vision, and capital commitment into measurable outcomes. We operate through offices in:

• New Delhi, India (Headquarters)
• London, United Kingdom (International Office)

For the purposes of data protection law:

• In the EU/UK: WDC acts as the Data Controller
• In India: WDC acts as the Data Fiduciary
• In California: WDC is the Business collecting personal information

2. Data We Collect

2.1 Information You Provide

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Organization, job title, professional background
• Account Information: Username, password (encrypted), account preferences
• Communications: Inquiries, feedback, correspondence with us
• Event Registration: Attendance preferences, dietary requirements, accessibility needs
• Application Data: CVs, cover letters, references (for job applicants)
• Membership Information: Membership tier, contribution history, engagement records

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, navigation patterns
• Location Data: Approximate location based on IP address
• Cookies & Similar Technologies: See our Cookie Policy

2.3 Information from Third Parties

• Partner Organizations: Referral information from partner institutions
• Public Sources: Publicly available professional information
• Social Media: Information from social media platforms when you interact with us

3. How We Use Your Data

We use your personal data for the following purposes:

3.1 Service Delivery

• Processing inquiries and providing information about our services
• Managing membership and engagement
• Organizing and administering events, training programs, and convenings
• Delivering research publications and knowledge products

3.2 Communications

• Sending newsletters, updates, and announcements (with consent)
• Responding to your questions and requests
• Notifying you of changes to our services or policies

3.3 Operations & Improvement

• Analyzing website usage to improve user experience
• Conducting research and analytics
• Ensuring security and preventing fraud
• Complying with legal obligations

3.4 Recruitment

• Processing job applications and managing recruitment
• Conducting background checks where legally permitted

4. Legal Basis for Processing

Under GDPR and similar laws, we process your data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications)
• Contract: Where processing is necessary to fulfill a contract with you or take pre-contractual steps
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these don't override your rights
• Legal Obligation: Where processing is required to comply with applicable laws

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your data with:

5.1 Service Providers

Third parties who assist us in operating our website, conducting business, or providing services to you, including:

• IT and hosting providers
• Email service providers
• Event management platforms
• Payment processors
• Analytics providers

5.2 Partners & Collaborators

When you participate in joint events or programs, we may share relevant information with co-organizers or partner institutions, with your knowledge.

5.3 Legal Requirements

We may disclose your data when required by law, court order, or government request, or to protect our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

6. International Data Transfers

As a global organization with offices in India and the UK, your data may be transferred to and processed in countries outside your residence.

For transfers from the EU/UK, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with adequacy decisions
• Other legally recognized mechanisms

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active engagement data: Duration of your relationship with us plus 3 years
• Event attendance records: 5 years
• Financial records: As required by applicable law (typically 7 years)
• Job applications: 2 years for unsuccessful candidates
• Marketing consent records: Duration of consent plus 2 years

8. Your Rights

Depending on your location, you may have the following rights:

8.1 Access

Request a copy of the personal data we hold about you.

8.2 Rectification

Request correction of inaccurate or incomplete data.

8.3 Erasure

Request deletion of your personal data in certain circumstances.

8.4 Restriction

Request limitation of processing in certain circumstances.

8.5 Portability

Request transfer of your data to another organization in a structured format.

8.6 Objection

Object to processing based on legitimate interests or for direct marketing.

8.7 Withdraw Consent

Withdraw consent at any time for processing based on consent.

To exercise these rights, contact us at privacy@worlddevelopmentcouncil.org. We will respond within 30 days (or as required by applicable law).

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. For detailed information, please see our Cookie Policy.

You can manage your cookie preferences through our Cookie Settings panel or your browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication measures
• Regular security assessments and audits
• Staff training on data protection
• Incident response procedures

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notification for material changes (where we have your email)

13. Contact Us

For privacy-related inquiries or to exercise your rights:

You also have the right to lodge a complaint with a supervisory authority:

• UK: Information Commissioner's Office (ICO)
• EU: Your local Data Protection Authority
• India: Data Protection Board of India (once established)

14. Jurisdiction-Specific Rights

14.1 European Economic Area & UK (GDPR)

If you are in the EEA or UK, you have the rights described in Section 8, plus the right to lodge a complaint with your supervisory authority.

14.2 California (CCPA)

California residents have specific rights under the CCPA:

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@worlddevelopmentcouncil.org or call [phone number].

14.3 India (DPDP Act)

If you are in India, under the Digital Personal Data Protection Act 2023, you have the right to:

• Access information about your personal data processing
• Correct and erase your personal data
• Grievance redressal
• Nominate another person to exercise rights on your behalf

Contact our Grievance Officer at grievance@worlddevelopmentcouncil.org.