GCSB seal
GCSB
Global Converged Security Board

Legal

CCPA / CPRA Notice for California Residents

This notice supplements the Privacy Policy for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Last updated: 5 October 2026

Notice at collection

  • Identifiers: name, email, verification ID, IP address.
  • Professional or employment information: qualifications, grade, job title, organisation, CV, CPD records.
  • Internet activity: technical request logs kept for security.
  • Geolocation: country only, as entered in the register or profile.

Sources: you, our credentialing platform (Certifier) and your use of the site. Purposes and retention periods are set out in the Privacy Policy. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

No sale or sharing

GCSB does not sell personal information and does not share it for cross-context behavioural advertising, and has not done so in the past 12 months. We do not knowingly sell or share data of consumers under 16. We honour Global Privacy Control signals, although no sale or sharing takes place.

Disclosures for business purposes

In the past 12 months we disclosed the categories above to service providers (hosting, credentialing, email delivery and AI question answering) for business purposes only.

Your rights

  • Right to know what personal information we collect, use and disclose.
  • Right to delete personal information, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of sale or sharing (not applicable, as we do neither).
  • Right to limit use of sensitive personal information (not applicable, as we use none beyond what is permitted).
  • Right not to be discriminated against for exercising these rights.

How to make a request

Use our data request process. We will verify your identity by matching the email and details we hold, confirm receipt within 10 business days and respond within 45 days (extendable once by 45 days). An authorised agent may submit a request with your signed permission.