Compliance

Privacy Policy

How we collect, use, and protect your personal data. This policy applies to all JABC members and website visitors.

Updated

2025

1. Who We Are

The Jordanian American Business Council (JABC) is a registered nonprofit organization headquartered at 330 Town Center Drive, Suite 710, Dearborn, Michigan 48126, USA. JABC is the data controller responsible for your personal data collected through this website and membership portal.

info@jabcouncil.org privacy@jabcouncil.org

2. What Data We Collect

Identity & Contact Data

  • Full name, title, and professional designation
  • Business email address and phone number
  • Company name, website, and business address
  • Country and state of operation
  • LinkedIn profile URL (if voluntarily provided)

Membership & Transaction Data

  • Membership tier, Member ID, application and activation dates
  • Payment status and renewal history
  • Membership certificate and badge issuance records

We do NOT store payment card details. All card processing is handled by our secure third-party payment processor.

Platform Usage Data

  • Portal login activity, session times, and IP addresses
  • Pages visited and features accessed within the portal
  • Messages sent through the platform (Business tier and above)
  • Community posts, listings, and directory entries
  • Event registrations and webinar attendance

Communications Data

  • Email correspondence with JABC staff
  • Survey and feedback form responses

3. How We Use Your Data

  • To process and manage your membership application and account
  • To send invoices and process membership payments
  • To activate and manage your portal access at the correct tier
  • To issue your membership certificate and digital badge
  • To send newsletters, updates, and event invitations
  • To operate and improve the membership portal
  • To protect the security and integrity of the platform
  • To comply with applicable legal and regulatory obligations

4. Data Sharing

We do not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared only with:

  • Payment processors — for secure transaction processing only
  • Email service providers — for sending communications
  • Portal hosting providers — under strict data processing agreements
  • Legal authorities — only when required by law or court order

Other members may view your directory listing according to your tier permissions. You control what information appears in your public profile.

5. Data Retention

Active member data is retained for the duration of membership plus 3 years
Financial records are retained for 7 years as required by US tax law
Portal activity logs are retained for 12 months for security purposes
Deleted account data is removed within 30 days, except where law requires retention

6. Your Rights

You have the following rights regarding your personal data:

Access — request a copy of your personal data
Rectification — request correction of inaccurate data
Erasure — request deletion, subject to legal requirements
Restriction — request we limit how we use your data
Portability — receive your data in a portable format
Objection — object to processing based on legitimate interests

To exercise any right, email: privacy@jabcouncil.org. We will respond within 30 calendar days.

7. Cookies

Our website and portal use cookies for essential functionality (login sessions), analytics (to understand how members use the portal), and security purposes. You can control cookie preferences through your browser settings. Disabling essential cookies may prevent some portal features from working.

8. Security

We implement appropriate technical and organizational security measures including SSL/TLS encryption, database encryption at rest, role-based access controls, two-factor authentication for admin access, and regular security audits. In the event of a data breach posing risk to members, we will notify affected members within 72 hours.

9. GDPR — EU/EEA Members

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). The lawful basis for processing your data is primarily contract performance and legitimate interests. You have the right to lodge a complaint with your local Data Protection Authority.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify members of material changes by email at least 30 days before changes take effect. Continued use of the portal after that date constitutes acceptance.