Privacy Policy

EFFECTIVE DATE: July 27, 2026

The International Association of Credit Portfolio Managers (“IACPM,” “we,” “us,” or “our”) understands your concerns about privacy and how your information is used, and we want to provide you with more information on these topics.

This Privacy Policy (the “Privacy Policy”) describes the practices, policies, and procedures related to the website located at www.iacpm.org (the “Website”), including the types of personal information we collect on the Website, how we may use that information, and with whom we share it.

Please note that this Privacy Policy applies only to our online information-gathering and dissemination practices via the Website and does not apply to any of our practices conducted offline.

By visiting the Website, you are accepting the practices, policies, and procedures described herein, and you are further indicating that you agree to be bound by the terms of this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not visit or use the Website.

We may update this Policy from time to time, so please check this Privacy Policy periodically for changes. The date this Privacy Policy was last updated is indicated by the Effective Date delineated above.

SUMMARY

The notifications provided by this Privacy Policy include:

  • What personally identifiable information we collect through the Website.
  • How we use the information we collect.
  • With whom the information may be shared.
  • The kind of procedures we employ in an effort to hinder the unauthorized access, use, or disclosure of information you provide to us.
  • Information related to third-party websites.
  • How you can access, amend, or opt out of the information we collect on you.
  • Our data retention policies.
  • Rights related to the General Data Protection Regulation (GDPR).

THE INFORMATION WE COLLECT

Personal Information You Provide and How It Is Used

You may freely visit the Website anonymously and without being required to provide us with any personal information. However, certain requests, registrations, and features require that you provide us with some personally identifying information. Personal information is data that can be used to identify or contact you.

We do not collect sensitive personally identifiable information (PII) such as Social Security Numbers. The PII we collect typically includes your contact name, affiliated firm, work email, work and cell phone numbers, and work address.

We only collect personal information directly from you when you provide it to us. Examples of instances in which we may collect personal information include:

Membership Applications & Website Login: To apply for membership or access the member-only portal of our Website, you will be required to provide contact and professional information. This is managed through our association management system, iMIS.

Meeting & Conference Registrations: When registering for IACPM conferences or meetings, we collect your contact information to process your registration and facilitate event networking. We utilize third-party applications, such as iMIS and SwapCard, to manage conference details. By registering for an event, you acknowledge that a basic attendee networking roster (including your name, job title, and affiliated firm name) may be shared with official event sponsors. In addition, registration for this event implies permission for IACPM to use any photographs or videos that IACPM or its designated photographer may take during the event.

Email Submissions and Mailing Lists: You may decide to send us personally identifying information by emailing a question or signing up for our newsletters and publications (such as our SmartBrief distribution). We use this information to respond to your requests or to send you the communications you have requested.

Surveys: We may invite you to participate in industry surveys. We securely upload your first name and work email to third-party platforms (like SurveyMonkey) for survey distribution.

Non-Personal Information We Collect by Automated Means And How We Use It

We do not use scripts, cookies, or web beacons to collect personal information. However, we collect certain non-personal information by automated means when you visit the Website to help us improve user experience.

Log files, IP Addresses, and Analytics: We utilize standard analytical tools, including Google Analytics, which result in the automatic receipt and tracking of information such as your computer’s IP address, your operating system, your web browser type, and your website traffic patterns. This collective, aggregated data helps us determine how much our visitors use parts of the Website.

Use of Analytics: Data collected through Google Analytics is used in the aggregate to monitor site traffic and improve performance. We do not use data collected through Google Analytics for marketing purposes.

Cookies: While we do not use cookies to track personal data, session and persistent cookies may be utilized by our analytics providers or to facilitate your login process to the member portal.

USE OF YOUR PERSONAL INFORMATION

We collect, retain, and use your PII for business purposes only, including without limitation: (a) to qualify you as a registered member with access to the password-protected portion of the Website; (b) to process your event and conference registrations; (c) to provide member communications, newsletters, and email marketing; (d) to distribute industry surveys and compile research; (e) to respond to an inquiry from you; (f) to comply with applicable laws, regulations and rules, and to protect the rights and safety of the IACPM, our personnel, and others.

We may use the email address you provide to us to send you notifications, updates, newsletters or information regarding our Website and any features or services.

SHARING OF PERSONAL INFORMATION BY THE IACPM

We do not sell, rent, or exchange your personally identifiable information with other nonprofits, cooperatives, or unauthorized third parties, except as explicitly disclosed below regarding event sponsorships.

We share your PII only with our trusted third-party service providers to provide you with the features and services of the IACPM. Access to your PII by these contractors is limited to the information reasonably necessary to perform their specific function for us.

Conference Sponsors: We may provide a compiled list of conference attendee names, corporate titles, and firm names to verified sponsors of that specific event. We do not share your personal email address or telephone number with sponsors without your explicit consent.

Our third-party applications include:

  • iMIS: Our association management system used to maintain membership records.
  • Zapier: Used to securely transfer PII between iMIS, Constant Contact, and SurveyMonkey.
  • SurveyMonkey: Used for survey distribution and collection.
  • Microsoft PowerBI: Used for data visualization and analytics.
  • Box: A cloud-based content management platform used to store association documents and files.
  • Constant Contact & SmartBrief: Used to distribute emails, newsletters, and member communications.
  • SwapCard: Used to manage conference registration and event app functionality.

HOW WE SAFEGUARD YOUR INFORMATION

We maintain administrative, technical, and physical safeguards designed to protect your personal information against theft, loss, misuse, or unauthorized access. Our third-party platforms utilize industry-standard security measures. For example:

  • iMIS employs role-based access controls, encrypted data transmission, and secure hosting.
  • Box utilizes AES 256-bit encryption for data at rest and TLS encryption for data in transit, along with granular access permissions.
  • SurveyMonkey utilizes encryption, secure data centers, and rigorous access controls.

However, no website, application, or transmission can guarantee absolute security. While we strive to protect your personal information, we cannot warrant the security of any information you transmit to us.

MANAGING YOUR INFORMATION: OPT-OUT AND ACCESS

Access and Correction: Individuals can access and make changes to their own personal information directly through the member login portal on the IACPM Website.

Opting Out: You may opt out of our email communications at any time. All our third-party providers (such as Constant Contact and SmartBrief) feature standard “unsubscribe” links. Additionally, individual email opt-out requests sent directly to IACPM staff will be honored immediately.

Conference Roster Opt-Out: If you do not want your name, title, and/or firm name included on the attendee list shared with event sponsors and other conference attendees, you may opt out in our conference app or by contacting us directly at admin@iacpm.org.

DATA RETENTION

We will retain your information for as long as needed to provide you with services, or otherwise as is reasonable and customary. Our specific retention policies include:

Survey Data

Survey data is to be held up to three years after survey completion to allow for data comparisons and reconciliation. Anonymized aggregate data may be stored indefinitely as long as it is truly anonymous.

Deletion Method: Information stored in SurveyMonkey and Box will be deleted annually in January of each year to make sure information is deleted in a timely fashion. Survey data that comes in through email should be uploaded to Box for storage and deleted from Outlook as soon as possible.

Survey data that is shared with Consultant Partners (BCG, Oliver Wyman, etc.) will most often fall under consultant partner’s data retention policy and we will allow them to deal with the data in accordance with their own internal policies. At the outset of each project, the IACPM makes enquiries into consultant firm’s data retention policy to ensure it is sound. If consultant firm does not have a data retention policy established, they must agree to the IACPM’s three-year data retention policy or delete individual responses upon project completion.

Survey data may be downloaded onto a local hard drive for ease of use during analysis but is deleted from local storage as soon as survey data analysis is finished. All files that may be needed in the future must be saved to Box for long-term storage.

Distribution Lists

Distribution List data is to be held up to three years after use to compare year-on-year.
Deletion Method: Information stored in Box will be deleted annually in January of each year to make sure information is deleted in a timely fashion.

CHILDREN’S PRIVACY

We do not knowingly collect, use, or disclose personally identifiable information from minors under the age of 18.

THIRD-PARTY WEBSITES/LINKS

We may provide links to third-party websites or display sponsor logos on our website. Please note that we have no affiliation with the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personally identifying information to them.

Use Of The Website From Outside The United States

Please note that the Website is hosted in the United States and is governed by United States law. If you are visiting the Website from outside the United States, please be aware that your information will be transferred to, stored and processed in the United States where our servers are located and our central database is operated.

The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. By using the Website, you consent to your information being transferred to our facilities and to the facilities of those third parties with whom we share it as described in this Privacy Policy.

SPECIAL NOTICE TO EUROPEAN ECONOMIC AREA (EEA), SWITZERLAND, AND UNITED KINGDOM USERS

Because our membership is international, the following provisions apply to users residing in the European Economic Area, Switzerland, and the United Kingdom.

Pursuant to the EU General Data Protection Regulation (“GDPR”), we process personal data only if it is in our legitimate interest for the effective administration of the Website, to fulfill your membership requests, or to provide association services.

GDPR provides EU Visitors with specific rights regarding the Personal Data we hold about you, including:

  • The right of access: To confirm whether we are processing your Personal Data and request a copy.
  • Your right to correction (rectification): To request correction of inaccurate data.
  • Your right to erasure: To ask us to delete your Personal Data in certain circumstances.
  • Your right to data portability: To receive a copy of your Personal Data in a structured, machine-readable format.
  • Your right to withdraw consent: To withdraw consent for marketing or data processing at any time.
  • Your right to register a complaint: To report concerns to the relevant supervisory authority.

You may access, correct, or request deletion of your Personal Data by managing your account on the IACPM website or by contacting us directly. We will respond to your request within a reasonable timeframe. Please note that we may need to retain certain information for record-keeping purposes or to comply with our legal obligations.

QUESTIONS AND CONTACT INFORMATION

If you have any questions or concerns about this Privacy Policy or your rights, please contact us at admin@iacpm.org.

PRIVACY POLICY REVISIONS

We reserve the right to revise this Privacy Policy at any time by updating this posting. Please check back regularly to see if there have been any changes to this policy. By continuing to use the Website after those changes become effective, you agree to be bound by the revised Privacy Policy.