Society of Invasive Cardiovascular Professionals - Kerala Chapter

Privacy Policy

Privacy Policy

Society of Invasive Cardiovascular Professionals – Kerala Chapter

Website: www.sicpkerala.com
Email: sicpkerala@gmail.com
Last Updated: 03/10/2025

1. Introduction

The Society of Invasive Cardiovascular Professionals – Kerala Chapter (“SICP Kerala”, “we”, “us”, “our”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.sicpkerala.com.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

  • Register for membership through Paid Membership Pro (PMPro)
  • Register for conferences or events through Amelia booking system
  • Fill out contact forms or other forms on our website
  • Subscribe to newsletters or communications
  • Make donations or payments
  • Create user accounts

Types of personal information collected:

  • Full name and title
  • Email address
  • Phone number
  • Professional credentials and affiliations
  • Postal address
  • Payment information (processed securely through Razorpay)
  • Medical specialization and practice details
  • Professional registration numbers

2.2 Automatically Collected Information

We automatically collect certain information when you visit our website:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Referring website
  • Pages visited and time spent on pages
  • Device information
  • Cookies and similar tracking technologies

2.3 Analytics Information

We use analytics tools to collect information about website usage:

  • Google Analytics or similar services
  • Cloudflare Analytics for performance and security monitoring
  • Page views and user interactions
  • Traffic sources and user behavior patterns
  • Website performance metrics

3. How We Use Your Information

3.1 Primary Uses

  • Membership Management: Process membership applications, renewals, and maintain member records
  • Event Management: Handle conference registrations, send event information, and manage bookings
  • Communication: Send newsletters, updates, and important notifications
  • Payment Processing: Process membership fees, conference fees, and donations securely
  • Website Functionality: Provide personalized user experience and member-only content access

3.2 Secondary Uses

  • Improve our website and services
  • Analyze website traffic and user behavior
  • Ensure website security and prevent fraud
  • Comply with legal obligations
  • Send relevant professional development information

4. Information Sharing and Disclosure

4.1 We Do Not Sell Personal Information

SICP Kerala does not sell, trade, or rent your personal information to third parties.

4.2 Third-Party Service Providers

We share information with trusted third-party service providers who assist us in operating our website and providing services:

Payment Processing:

  • Razorpay: For secure payment processing (two separate accounts for different purposes)
  • Payment information is encrypted and processed according to PCI DSS standards

Website Functionality:

  • Paid Membership Pro (PMPro): Membership management and user authentication
  • Amelia: Event and conference booking management
  • Knit Pay: Payment gateway integration
  • Form Processing Plugins: Contact forms and registration forms
  • Security Plugins: Website protection and monitoring
  • Analytics Providers: Website traffic analysis and performance monitoring

Content Delivery and Security:

  • Cloudflare: CDN services, DDoS protection, web application firewall, analytics, and security filtering
  • Cloudflare may process visitor IP addresses and browser information for security and performance purposes
  • Cloudflare operates globally and may transfer data internationally under appropriate safeguards
  • Bot detection and challenge systems for security purposes

4.3 Legal Requirements

We may disclose your information when required by law or to:

  • Comply with legal processes
  • Protect our rights and property
  • Ensure user safety and security
  • Investigate potential violations of our terms

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational security measures:

  • SSL encryption for data transmission
  • Secure hosting environment
  • Regular security updates and patches
  • Access controls and authentication systems
  • Security monitoring and threat detection plugins
  • Regular security audits and vulnerability assessments
  • Cloudflare security features including DDoS protection and web application firewall

5.2 Payment Security

  • Payment information is processed through PCI DSS compliant systems
  • We do not store complete credit card information on our servers
  • All payment transactions are encrypted and secured

5.3 Data Breach Response

In the event of a data breach, we will:

  • Notify affected users within 72 hours when feasible
  • Report to relevant authorities as required by law
  • Take immediate steps to secure the breach and prevent further unauthorized access

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Update your preferences
  • Request deletion of your account and data
  • Withdraw consent for non-essential communications

6.2 Communication Preferences

  • Unsubscribe from newsletters and promotional emails
  • Modify notification settings for events and updates
  • Opt-out of non-essential communications while maintaining membership

6.3 Data Portability

You may request a copy of your personal data in a commonly used, machine-readable format.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

  • Essential Cookies: Required for website functionality and security
  • Analytics Cookies: Track website usage and performance
  • Functional Cookies: Remember your preferences and settings
  • Security Cookies: Protect against fraud and unauthorized access

7.2 Third-Party Cookies

Our website may contain cookies from third-party services:

  • Google Analytics for website analytics
  • Cloudflare for security, performance, and analytics
  • Payment processors for secure transactions
  • Social media integration cookies
  • Security and performance monitoring tools

7.3 Cookie Management

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality.

8. Data Retention

8.1 Retention Periods

We retain personal information for as long as necessary to:

  • Maintain your membership status
  • Fulfill legal and regulatory requirements
  • Provide ongoing services
  • Resolve disputes and enforce agreements

8.2 Specific Retention Periods

  • Membership Data: Retained during active membership and for 7 years after termination
  • Financial Records: Retained for 7 years for accounting and tax purposes
  • Event Registration Data: Retained for 3 years after event completion
  • Website Analytics: Aggregated data retained indefinitely, personal identifiers removed after 26 months
  • Cloudflare Data: Processed temporarily for security and performance, with logs typically retained for 30 days

9. International Data Transfers

9.1 Data Location

Your data is primarily processed and stored in India. Some third-party services may process data internationally.

9.2 Cloudflare Data Processing

  • Cloudflare operates a global network and may process visitor data in various countries
  • Cloudflare complies with international data protection standards including GDPR
  • Data processing agreements are in place to ensure appropriate protection levels
  • Cloudflare provides adequate safeguards for international data transfers

9.3 Other International Transfers

When data is transferred internationally through other services, we ensure appropriate safeguards are in place through:

  • Adequacy decisions
  • Standard contractual clauses
  • Binding corporate rules
  • Certification schemes

10. Children’s Privacy

Our website is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete it promptly.

11. Updates to This Privacy Policy

11.1 Policy Changes

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Modified” date.

11.2 Notification of Changes

For material changes, we will:

  • Send email notifications to registered users
  • Display prominent notices on our website
  • Provide reasonable time for review before changes take effect

12. Contact Information

12.1 Privacy Inquiries

For questions about this Privacy Policy or our privacy practices, contact us:

Society of Invasive Cardiovascular Professionals – Kerala Chapter
Email: sicpkerala@gmail.com
Website: www.sicpkerala.com

12.2 Data Protection Requests

To exercise your privacy rights or request information about your data:

  • Send detailed requests to sicpkerala@gmail.com
  • Include sufficient information to verify your identity
  • Specify the nature of your request (access, correction, deletion, etc.)

13. Compliance

This Privacy Policy is designed to comply with applicable privacy laws including:

  • Information Technology Act, 2000 (India)
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • Other applicable Indian privacy and data protection regulations

14. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites. We recommend reviewing the privacy policies of any third-party sites you visit.

15. Professional Information

15.1 Medical Professional Data

As a medical professional organization, we may collect and process:

  • Medical credentials and certifications
  • Professional registration numbers
  • Continuing education credits
  • Professional affiliations and memberships

15.2 Professional Directory

With your consent, we may include your professional information in member directories for networking and professional development purposes.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of your information as described herein.