Privacy Policy

Last updated: 02 October 2026

This is a working draft written to match what this system actually collects and stores. It is a starting point for the Institute's own legal review, not a substitute for one.

Who we are

The Institute of Chartered Loss Control & Private Security Management (ICLPSM), 25 John Plagis Avenue, Alexandra Park, Harare, Zimbabwe, is the data controller for the information described below. Contact us at info@iclm-int.org or membership@iclm-int.org.

What we collect

• Member accounts: name, email address, phone number, organisation, area of specialty, and your chosen membership category, when you register for a member portal account.
• Public directory listings: name, organisation, location, category, specialty, membership number, email, and photograph — shown on the public "Find a Member" directory only for members who have explicitly given consent and enabled public visibility. You can request removal at any time.
• Account security data: IP address and timestamps of sign-in attempts, kept to detect and block repeated failed logins, and an internal activity log recording who changed what content and when.
• Content you submit: job vacancies, event details, and other material submitted by staff or partners for publication on the site.

Cookies

We use only two strictly-necessary cookies: a session cookie that keeps you signed in, and a CSRF-protection cookie that prevents cross-site request forgery. We do not use analytics, advertising, or tracking cookies of any kind.

How we use your information

• To operate your member account and the admin/staff console.
• To process and track membership applications.
• To publish your directory listing, only where you have consented.
• To protect accounts against unauthorised access (failed-login tracking, audit logging).
• To communicate with you about your application, membership status, or account security (e.g. password resets, email verification).

Who we share it with

We do not sell or rent personal data. Directory listings are public by design, but only for the fields and only for the members who have opted in. We do not share account data with third parties except where required by law.

How long we keep it

Member and account data is kept for as long as your account is active, plus a reasonable period afterward for record-keeping. Failed sign-in records are cleared automatically after a successful login and expire on their own after the lockout window.

Your rights

You may ask us to access, correct, remove from the public directory, or delete your personal data by writing to membership@iclm-int.org. We will respond within a reasonable time.

Changes to this policy

We may update this policy as the system changes. The "last updated" date above will always reflect the latest version.