Privacy

Privacy Policy

Last updated: [DATE — fill in]

This policy is a plain-language starting point covering the site's current data practices. Because the Roundtable operates across the United States and Europe, please have it reviewed by someone familiar with GDPR and U.S. state privacy law before relying on it, and fill in the highlighted items.

The NYC-DR Roundtable Breakfast ("the Roundtable," "we") respects your privacy. This policy explains what personal information we collect through this website, why, how we use it, and the rights you have over it.

Who is responsible for your data

The data controller for this site is [Niki Borofsky / CUNY Dispute Resolution Center — confirm which]. For any privacy question or request, contact us at [contact email — fill in].

What we collect

We only collect what you choose to give us through our forms:

Session registration: your name, email address, and (optionally) your organization.
Newsletter / notifications: your email address.
The date and time you gave consent, so we can honor your preferences.

We do not use advertising cookies or third-party analytics trackers on this site. Videos are embedded from YouTube and only load YouTube's cookies if you choose to play a video; that is governed by Google's privacy policy.

Why we use it (legal basis)

We use your information solely to:

Send you the Zoom link and details for the session you registered for;
Send occasional announcements about upcoming Roundtable sessions, if you asked us to.

Our legal basis under the GDPR is your consent, which you give by ticking the box on our forms. You can withdraw it at any time.

How long we keep it

We keep your information only as long as you wish to hear from us. If you unsubscribe or ask us to delete your data, we remove it promptly. [Optionally state a retention period, e.g. "and in any case no longer than X years of inactivity."]

Who can see it

Your information is stored securely with our service provider, Supabase, and is accessible only to the Roundtable's organizers. We do not sell your data, and we do not share it with third parties for marketing. We may share it only if required by law.

Where your data is stored

Our data is held by Supabase [confirm your project's region]. If you are in the European Economic Area and your data is transferred outside it, that transfer is made under appropriate safeguards.

Your rights

You have the right to:

Access the personal data we hold about you;
Correct it if it is inaccurate;
Have it deleted ("right to be forgotten");
Withdraw consent and unsubscribe at any time;
Object to or restrict how we use it;
Request a copy of your data in a portable format.

If you are in California, you have similar rights under the CCPA/CPRA, including the right to know what we collect and to request deletion, and the right not to be discriminated against for exercising those rights. We do not sell or "share" personal information as those terms are defined under California law.

To exercise any of these rights, email us at [contact email]. To unsubscribe from emails, use the unsubscribe link in any message we send, or email us and we will remove you.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.

Contact

Questions about your privacy or this policy? Email [contact email].