Privacy Policy

Status: The full Privacy Policy is being finalised by the Facilitator Body and will be published here. Until then, the principles below apply to any personal data submitted through this website.

1. What we collect

When you submit a membership application or contact form, we collect the personal and professional information you provide (name, email, phone number, organisation, accreditation details, and any supporting documents).

2. Why we collect it

We use this information solely to process your application, communicate with you about Forum activities, and verify your eligibility under Section 81 of the Cybersecurity Act, 2020 (Act 1038).

3. Who we share it with

We may share verification details with the Cyber Security Authority (CSA) where required under Act 1038. We do not sell or share your data with third parties for marketing.

4. How long we keep it

We retain application data for the duration of your membership plus any period required by law or by the Forum's record-keeping policy.

5. Your rights

You may request access to, correction of, or deletion of your personal data by writing to the Secretariat via the Contact page.

6. Contact

For privacy enquiries, contact the GCIF Secretariat through the Contact page.

Last updated: pending publication.