Privacy Policy
Privacy Policy
This Privacy Policy governs the privacy practices of Graduate Business Curriculum Roundtable, a Minnesota nonprofit corporation (“our organization,” “we,” “our,” or “us”). This Privacy Policy applies to information provided to us (a) through your user account when you become a member of our organization, (b) when you register for and attend any of our educational events or access our educational content (collectively, “Educational Events”), (c) when you use and access our website: https://gbcroundtable.org/ (the “Site”), (d) and any other information you provide to us when you contact our organization (subsections (a)-(d) collectively referred to herein as the “Services”).
This Privacy Policy specifies:
- What personal information we collect about you.
- How this information is used and with whom it may be shared.
- What choices are available to you regarding the use of your personal information.
- The security procedures in place to protect the misuse of your personal information.
Information We Collect
We are the owners of or have the rights to the information provided and/or collected through your use of our Services. We collect information about our members, event attendees, and other customers or users of our Services, and we primarily have access to and/or collect information that you voluntarily provide us, including the information you provide in setting up your user account and/or accessing or registering for our Educational Events, or other direct contact from you.
For purposes of this Privacy Policy, “Personal Information” will include all personally identifiable information that is specific to you which meets the definition of applicable data protection laws as “personal information,” “personal data,” or “personally identifiable information” (e.g. name, address, phone number, email address, etc.). Except as specifically noted herein, we do not provide any Personal Information to any unaffiliated third party (i.e., not under contract with us).
We collect the following Personal Information:
- Contact Information and Identifiers: When you contact us via email or phone, we collect certain Personal Information, including your name, email address, and phone number.
- Registration Information; Members: We do not require you to set up a user account to use our Services; however, an account is necessary to become a member of our organization and to manage your membership. Membership is school-wide, not on an individual basis; however, schools may designate up to 30 school contacts who may benefit from membership to have a log-in to the member portal on our Site. To create a user account, we collect certain information, such as name, title, email address, phone number, address, organization name, and other identifying information. We require that you specify a username and password for your user account. Members may voluntarily provide additional information in their membership profile. In addition, members may edit their profile at any time to change, add, or remove Personal Information.
- Registration Information; Event Attendees: We host Educational Events throughout the year, including conferences, webinars, and trainings. If you are a member and register for one of our Educational Events, we will access the information in your member account to provide you with information and services associated with the Educational Event. If you are not a member and you register for one of our Educational Events, we will collect your name, title, address, email, phone number, dietary restrictions, ADA requirements, emergency contact information, and other contact information, which we will store in our database and use to provide you with information and services associated with the Educational Event.
- Discussion Forums: When you post or create a public discussion post on our Site, we collect certain Personal Information, such as email and username.
- Payment Information: Although we may collect payments for use of our Services, we do not collect or store credit card or bank information. We use Authorize.net as our third party payment processor, who collects your credit card, debit card, and billing information directly from you, which is subject to Authorize.net’s privacy policy. Please refer to Authorize.net’s privacy policy to learn about its privacy practices.
- Geolocation Information and Internet or Other Network Activity: We may automatically collect the following information about your use of the Site through cookies, web beacons, log files, and other technologies: domain name; browser type and operating system; pages viewed, links clicked and other activities on the Site; IP address [Note: we are aware that some data protection laws consider an IP address to be Personal Information, and will protect it as such to comply with such laws]; the length of time using our Site; access time; device ID or other identifier; location and language information. We may combine this information with other information that we have collected, including, where applicable, Personal Information.
- Tracking Information:
- Do Not Track: Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies), and opt out of certain ad networks.
- Cookies: Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Site, while others are used to enable a faster log-in process or to allow us to track activities on our Site. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. Certain features of the Site may not function if you disable cookies.
- Clear GIFs, Pixel Tags and Other Technologies: Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs (a.k.a. web beacons, web bugs or pixel tags) in connection with our Site to, among other things, track activities on the Site, help us manage content, and compile statistics about usage of the Site. We also use clear GIFs in HTML emails to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.
- Analytics Information: We may use various technologies to learn more about how visitors use the Site and to collect information about your interaction with our features and other users for analytics purposes. We may also use analytics services and technologies to monitor your activities on our Site, for better understanding of how our Site is used, and ways to improve it.
Use and Disclosure of Information
We use your Personal Information as necessary to operate our Site, offer our Services, and maintain your user account. In addition, we may use Personal Information we collect, or you provide to us, to:
- Respond to any questions you ask or to respond to the reason you contacted us.
- Allow us to respond quickly and efficiently to your questions and your requests for information.
- Provide our Services, to communicate with members and visitors, to respond to requests and inquiries, and for other customer service purposes.
- Tailor the content and information that we send or display, to offer location customization, and personalized help and instructions, and to otherwise personalize experiences using the Services.
- Better understand how users access and use our Services, both on an aggregated and individualized basis, to improve our Services and respond to user desires and preferences, and for other research and analytical purposes.
- Perform data analytics for our internal business purposes.
- Enhance, improve, and develop new services, products, and educational content.
- Track use of our Services, and your user account, investigate suspicious activity, and enforce our terms and policies, to measure and improve the operation and security of our Services and your Personal Information.
- Deliver member benefits, and to inform you of our events, content, and other benefits or opportunities associated with your membership.
- Allow us to disclose your Personal Information to the extent permitted or required by law.
You may opt out of any future contact from us at any time. Depending on where you live, you may have certain legal rights under applicable law. For example, you may have the following rights:
- Your right to Access – means that you can ask us for a copy of any Personal Information we hold about you.
- Your right to Correct – if you believe that any of the Personal Information we hold about you is incorrect or out of date, you have the right to correct such Personal Information by providing us with the correct, up-to-date Personal Information.
- Right to Delete – you can ask us to delete the incorrect or out-of-date Personal Information, and we will be happy to do so unless we are prevented from doing so by law or regulation. In certain circumstances you may also have the right to ask us to erase your Personal Information. Please note that even if a request is made to delete your Personal Information, we may be permitted or required to retain a copy for our business and legal obligations as permitted or required under applicable law.
- Right to Portability – you have the right to request a copy of your Personal Information in a commonly used and machine readable format to be provided to you or to such other third party as you specify.
- Right to Limit – you have the right to opt-out of any ancillary use of your Personal Information (e.g., for targeted advertising).
- Right to List of Third Parties – you have the right to obtain a list of the specific third parties to which we have disclosed your Personal Information.
Please contact us (as specified below) to request any of the above rights. You will be required to verify your identity before we are able to fulfill your request. Upon confirmation that you are making a lawful request, we will confirm our obligations under applicable law. You can also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney, signed by you, for the agent to act on your behalf. You will still need to verify your identity directly with us. We will acknowledge your request and respond to your request (upon verification) in accordance with the response time required by applicable law. You also have the right not to be discriminated against (as provided for in applicable law) for exercising certain of your rights referenced herein. In some jurisdictions, you may have the right to appeal our action regarding your request for any of the above rights by contacting us at the email specified below.
In addition to the rights listed above, some jurisdictions may provide a right to users that are subject to profiling in furtherance of decisions that produce legal or similarly significant effects. Please note, we do not use your Personal Information for profiling purposes.
Please note, some states provide a right to opt-out of the sale of Personal Information, using Personal Information for targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of these activities, which is why we do not have an opt-out link.
Who We Share Personal Information With
We may share Personal Information we collect via our Services with the third parties listed below (collectively, “Third Party Providers”):
- Service Providers. Your Personal Information may also be provided to certain third party service providers as necessary to provide our Services, including third party vendors, service providers, contractors, or agents who perform functions on our behalf. Third party service providers may include payment processors (i.e., Authorize.net), software development providers, CRM providers, application and data hosting providers, wireless network service providers, digital marketing service providers, and mobile event application providers (i.e., Whova). These third party service providers are all under contract with us and we are responsible for assuring that these service providers comply with the terms of this Privacy Policy.
- Sponsors and Exhibitors. We may provide a limited amount of Personal Information to our event sponsors and exhibitors as further described below in the section titled “Member and Attendee Lists.” Such sponsors and exhibitors are under contract with us.
Except for the Third Party Providers listed in this section, we will not share Personal Information with an unaffiliated third party without your prior authorization, unless doing so is necessary (1) to enforce this Privacy Policy, to comply with law, regulation or other legal processes or to protect the rights, property, or safety of us or others, (2) to comply with a valid order or process from a public authority, (3) to protect against misuse or unauthorized use of our Services or your user account, (4) to detect or prevent criminal activity or fraud, or (5) in the event that our organization or substantially all of our assets are acquired by one or more third parties as a result of an acquisition, merger, sale, reorganization, consolidation, or liquidation, in which case such information may be one of the transferred assets.
Member and Attendee Lists
Members: The name, title, organization, phone, and email address of each member representative will, in our discretion, be included on the Site along with similar information on other members and their representatives. You may withdraw this consent at any time by sending us written notice using the contact information below. In addition, you may update and edit your privacy preferences in your member portal, and we will remove your identifying information from our Site. We may provide members’ Personal Information to other members who access our member directory (access is restricted to members only).
Educational Event Attendees: We may share the name, title, organization, and email address of attendees at our Educational Events with our sponsors and exhibitors who request attendee lists. In addition, event attendees may be able to view the name, job title, and other limited Personal Information of other event attendees through our virtual event platform (i.e., Whova).
We use a third party mobile application (i.e., Whova) that enhances attendee experience, and includes agendas, schedules, and interactive maps. You acknowledge that we are not responsible for the third party application. Instead, your use of the third party application is subject to such third party’s terms of use and privacy policy.
The Roundtable believes it is in the best interest of attendees to use sponsors and exhibitors at our Educational Events. We may provide member and attendee lists to our sponsors, exhibitors, or Third Party Providers for research and marketing purposes and as necessary to provide our Services. Sponsors and exhibitors are prohibited from reselling such member and attendee lists. You may opt-out of any communications from sponsors or exhibitors by contacting them.
Marketing Choices
While we may provide Personal Information to Third Party Providers to communicate with you, we require all Third Party Providers to comply with this Privacy Policy and to take appropriate steps to secure your Personal Information. We may send periodic promotional or marketing emails to you. You may opt out of such communications by following the opt-out instructions contained in any such email.
Security
We take precautions to protect your Personal Information, including implementing appropriate physical, administrative, and technical safeguards. When you submit Personal Information via our Services, your Personal Information is transmitted using secure sockets layer (SSL) encryption technology. We restrict access to your Personal Information to our authorized personnel and/or Third Party Providers as appropriate and necessary to provide our Services. However, no website, database, or system is completely secure or “hacker proof.” You are also responsible for taking reasonable steps to protect your Personal Information against unauthorized disclosure or misuse. You are also responsible for protecting your user credentials for your account as we are not liable for any unauthorized use of such user credentials.
Data Retention
We keep your Personal Information as long as needed to process your requests, to operate our business, and provide our Services, and as long as we are legally obligated to keep it. While we will use reasonable efforts to delete your Personal Information, we may be required to retain such Personal Information as required by our systems or our legal requirements. Until we have deleted all your Personal Information, we will continue to honor our privacy and security obligations related to your Personal Information.
Please note that if we elect to de-identify your Personal Information, such de-identified information is no longer your Personal Information, and we may use such de-identified information, alone or in an aggregated basis to analyze and offer our Services, or as we deem appropriate.
Where We Store and Process Personal Information
Personal Information collected by us is primarily stored in the United States, or if applicable, any other country where our Third-Party Providers maintain facilities. If you are located outside of the United States, please be aware that information we collect, including Personal Information, may be transferred to, processed in, and stored in the United States. By accessing our Services or providing us with Personal Information, you consent to the transfer, processing, and storing of Personal Information in the United States. We take steps to ensure that the Personal Information we collect under this Privacy Policy is processed according to the provisions of this Privacy Policy and the requirements of applicable law wherever the data is located.
Third Party Links
Our Site may contain links to or may appear on third-party websites. Any access to and use of such third party websites is not governed by this Privacy Policy but instead is governed by the privacy policies of those third party websites, and we are not responsible for the information practices of such third party websites.
Children’s Online Privacy Protection Act
Our Services are not designed for persons under the age of 18. In compliance with the Children’s Online Privacy Protection Act, 15 U.S.C. § 6501.06 and 16 C.F.R. §§ 312.1 – 312.12, we do not knowingly collect information from children under the age of 13, nor do our website(s) or products target children under the age of 13. By using our Site, you represent that you are not younger than 13. Please contact us if you know or suspect that we have collected information from children under the age of 13, and we will take prompt measures to remove such information. We do not have actual knowledge that we sell or share Personal Information of minors under the age of 16.
Changes
By accessing or using our Services, you agree that we will collect and handle information as described in this Privacy Policy. WE HAVE THE RIGHT TO REVISE THIS PRIVACY POLICY AT ANY TIME. WE MAY NOT NOTIFY USERS INDIVIDUALLY IF WE CHANGE THIS PRIVACY POLICY, UNLESS THERE ARE MATERIAL CHANGES, IN WHICH CASE WE MAY NOTIFY YOU ELECTRONICALLY. ANY CHANGES WILL BE EFFECTIVE WHEN POSTED. WE ENCOURAGE YOU TO CHECK THIS PRIVACY POLICY FREQUENTLY FOR CHANGES.
Contact Us
If you have any questions or concerns about the privacy of your Personal Information, please contact us by email at info@gbcroundtable.org.
Specific Laws
GDPR. If you are an individual resident in EEA or the UK, you have the data protection rights regarding personal data as specified in the General Data Protection Regulation (GDPR) as enacted in the EU, UK, or Switzerland.
US Data Protection Laws. The US states which have enacted data protection laws, similar to the California Consumer Privacy Act (CCPA) as amended by the Consumer Privacy Act Regulations (CPRA) include: California (as of January 1, 2023), Colorado (as of July 1, 2023), Connecticut (as of July 1, 2023), Delaware (as of January 1, 2025), Florida (as of July 1, 2024), Indiana (as of January 1, 2026), Iowa (as of January 1, 2025), Kentucky (as of January 1, 2026), Maryland (as of October 1, 2025), Minnesota (as of July 31, 2025), Montana (as of October 1, 2024), New Hampshire (as of January 1, 2025), Nebraska (as of January 1, 2025), New Jersey (as of January 15, 2025), Oregon (as of July 1, 2024), Rhode Island (as of January 1, 2026), Tennessee (as of July 1, 2025), Texas (as of July 1, 2024), Utah (as of December 31, 2023), and Virginia (as of January 1, 2023).
Notice to Illinois Residents. Residents of Illinois may have certain rights under the Biometric Information Privacy Act. Please note that we do not digitally analyze any data for any biometric identification purposes.
Notice to California Residents. You may have the right to receive information about the financial incentives that we offer to you, if any.
Metrics
California law may require us to compile the following metrics for the previous calendar year: the number of rights requests received, complied with, and denied, as well as the median number of days within which we responded to those requests. To the extent this obligation applies to our organization, we will comply.
California Shine the Light
Under California Civil Code sections 1798.83-1798.84, California residents who have an established business relationship with us are entitled to ask us once a year for information regarding the Personal Information we have shared, if any, with third parties for their direct marketing purposes. If you are a California resident and would like to submit such a request, please submit your request in writing to the email address listed in the Contact Us section and include the words “Shine the Light” in your correspondence. The request must include your name, street address, city, state, and ZIP code and an attestation that you are a California resident. We are not responsible for requests that are not labeled or sent properly, or that do not have complete information.
California Do-Not-Track Disclosure
We are committed to providing you with meaningful choices about the information collected on our Site for third party purposes. However, we do not currently recognize or respond to browser-initiated Do-Not-Track signals, as the Internet industry is currently still working on Do-Not-Track standards, implementations, and solutions.
Copyright © 2025 by Graduate Business Curriculum Roundtable. All rights reserved.
