Privacy Policy

Your privacy is very important to us. We have developed this policy so you can understand how we collect, use, communicate, disclose and make use of personal information.

Our principles

• Before or at the time of collecting personal information, we will identify the purposes for which it is being collected.
• We will collect and use personal information solely to fulfil those purposes and other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.
• We will only retain personal information as long as necessary for the fulfilment of those purposes.
• We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
• Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete and up to date.
• We will protect personal information with reasonable security safeguards against loss or theft, as well as unauthorised access, disclosure, copying, use or modification.
• We will make readily available information about our policies and practices relating to the management of personal information.

We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.

What EACA ID collects

EACA ID is our single sign-on service. Using it, we collect:

• Sign-in methods. The email addresses and phone numbers you register, and whether each has been verified.
• Profile details. Your name and an optional contact email address.
• Sign-in records. Times, IP addresses, browser user agents and the outcome of each sign-in attempt, kept to secure accounts against misuse.
• Passkeys. The public key your device registers. We never receive your fingerprint, face data or device PIN — those never leave your device.
• Associations. Links between you and records EACA already holds, such as exhibitor, member and contractor contacts.
• Email preferences. Which optional lists you have joined or left, when, and how the change was made.

How we use it

To sign you in; to tell EACA applications who you are when you authorise them; to secure accounts against misuse; and to send the optional email you have asked for.

Transactional versus optional email

One-time codes, security notices and essential service messages are necessary to operate your account. They are sent regardless of your marketing preferences, because unsubscribing from them would prevent you signing in. Optional email is managed on your Subscriptions page and you may leave any list at any time.

Sharing

When you sign in to an EACA application, we share your identifier, your name and — if you grant it — your verified email address, phone number and organisation associations with that application. We use third-party providers to deliver one-time codes by email, SMS and voice. We do not sell personal information.

Retention

Account details are kept while your EACA ID exists. Sign-in records and consent records are kept longer where needed to secure accounts or to evidence consent.

Your choices

You can change your name and contact email, add or remove sign-in methods (keeping at least one), add or remove passkeys, and change your email preferences at any time from your account pages. To request access to or deletion of your information, contact us below.

Security

There are no passwords in EACA ID. Access requires a one-time code sent to a channel you have proved you control, or a passkey held on your device.

Contact

Jim Wurm, Executive Director
jimwurm@eaca.com