How ICC handles personal information.

01

Information ICC collects

The information collected depends on how you use the website. ICC aims to collect only information needed for the relevant service or communication.

• Contact enquiries: name, email address, enquiry category and message.
• Membership enquiries and accounts: contact details, organisation, location, professional profile, membership status and information needed to administer member access.
• Age assurance for membership: ICC membership is restricted to people aged 18 or over. A date of birth is used transiently to test the 18+ threshold and is not retained in the membership record; ICC keeps only the result, method, declaration version and audit timestamp.
• Membership billing and verification: payment-provider references, subscription status and verification records where a paid membership service is used. ICC does not store full payment-card details on this website.
• Newsletter preferences: email address, consent or preference records, subscription status and the source of the subscription.
• Technical information: security logs, normal hosting request information and privacy-friendly aggregate website analytics where you choose to allow analytics.

02

Why ICC uses information and lawful bases

ICC uses personal information only where there is a lawful basis for doing so. The basis depends on the purpose of the processing.

• To respond to an enquiry or take steps requested before entering into a membership relationship: legitimate interests and, where applicable, steps at your request before a contract.
• To provide and administer membership, member access and paid services: performance of a contract and legitimate administrative interests.
• To enforce ICC’s adult-only membership eligibility rule and maintain a proportionate audit record of the age check: legitimate interests in operating and safeguarding the membership service.
• To maintain account, payment, fraud-prevention and platform security records: legitimate interests and compliance with applicable legal obligations.
• To send optional newsletter or promotional communications to individuals: consent where required. You can withdraw that choice at any time.
• To understand aggregate website usage and improve the site: legitimate interests, with optional Vercel Web Analytics controlled through the website privacy settings.

03

Who information may be shared with

ICC uses service providers that support the website and its operations. They receive only the information needed to provide the relevant service.

• Supabase for authentication, account and application data services.
• Vercel for website hosting, delivery, security and optional aggregate Web Analytics.
• Stripe where online membership billing is enabled. Payment-card details are handled by Stripe rather than stored by ICC's website.
• Email-delivery providers where ICC sends transactional or newsletter messages.
• Professional advisers, regulators or public authorities where disclosure is required by law or reasonably necessary to protect legal rights.

04

International processing

Some technology providers may process information using infrastructure or support operations outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, ICC will rely on an appropriate transfer mechanism or the provider's applicable contractual safeguards.

05

Retention and security

ICC keeps personal information only for as long as it is reasonably required for the purpose for which it was collected, to administer an ongoing relationship, resolve disputes, maintain necessary security or transaction records, or comply with legal requirements.

Access to member, enquiry and subscriber information is restricted through authenticated roles and database access controls. ICC also uses technical safeguards intended to prevent unauthorised changes to membership, billing and protected member content.

06

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to access personal information, correct inaccurate information, request deletion or restriction, object to certain processing, request portability, or withdraw consent where processing is based on consent.

Use the dedicated ICC Privacy Request page to make a data-protection request. ICC may need to verify your identity before acting on a request.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are unhappy with how your personal information has been handled.

07

Website storage and analytics

ICC uses essential browser storage for requested account functions such as maintaining a sign-in session and remembering privacy preferences. Optional Vercel Web Analytics is not loaded unless you choose to allow analytics.

You can change the analytics choice at any time using Privacy settings in the website footer. More detail is available on the Cookies & Website Storage page.

08

Changes to this notice

ICC may update this notice when services, providers or legal requirements change. The latest published version and update date will always appear on this page.