Privacy Policy

Last Updated: October 14, 2026

1. Introduction

SDRL Inc. (“SDRL,” “we,” “us,” or “our”) respects your privacy and is committed to being transparent about how we collect, use, disclose, and protect your information. This Privacy Policy (“Privacy Policy”) describes how we handle Personal Information in connection with our websites, including sdrleader.com, pipelineconference.io, and pipelineconferenceeurope.com, and other digital properties we operate (collectively, the “Sites”); our member community and account features; our surveys, research, and benchmarking; our conferences, dinners, and other events (collectively, “Events”); and our related products and services (together with the Sites and Events, collectively, the “Services”).

Please read this Privacy Policy carefully before you start to use the Services. By accessing and/or using the Services, you accept and agree to be bound and abide by this Privacy Policy, and our terms of service available at https://sdrleader.com/terms-of-service, as updated from time to time (the “Terms of Service”) incorporated herein by reference and to comply with all applicable laws, rules and regulations (collectively, “Applicable Laws”).

If you do not want to agree to this Privacy Policy, and the Terms of Service, you must not access or use the Services.

Where we ask you to acknowledge this Privacy Policy through an online interface, such as by checking a box or clicking a button when you first log in following an update, or when you register for an Event (including online and in person), your acknowledgment confirms that you have been given the opportunity to review this Privacy Policy as of that time. As described below, this Privacy Policy, including our individual-level sharing and sale practices and our identified artificial intelligence uses, applies to Personal Information we collect after its effective date and, for individuals who accept the updated Terms of Service and acknowledge this Privacy Policy or where another legal basis applies, to Personal Information collected before that date.

This Privacy Policy applies to Personal Information we collect on or after its effective date and, except where a different commitment was expressly made to you at the time of collection, to Personal Information we collected before its effective date. For previously collected Personal Information, we apply the individual-level sharing and sale practices and the identified (non-de-identified) artificial intelligence uses described in this Privacy Policy only to Personal Information of individuals who accept the updated Terms of Service and acknowledge this Privacy Policy, or where another legal basis applies.

IMPORTANT NOTICE REGARDING SHARING, SALE, AND ARTIFICIAL INTELLIGENCE. THIS PRIVACY POLICY DESCRIBES HOW WE SHARE, AND MAY SELL, PERSONAL INFORMATION—INCLUDING MEMBER ENGAGEMENT INFORMATION—TO EVENT SPONSORS AND OTHER BUSINESS PARTNERS, AND HOW WE USE CONTENT AND INFORMATION COLLECTED THROUGH THE SERVICES TO DEVELOP AND OPERATE ARTIFICIAL INTELLIGENCE FEATURES. YOUR CHOICES ARE DESCRIBED IN THE “YOUR CHOICES” SECTION BELOW.

For purposes of this Privacy Policy, “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular individual or household. Personal Information does not include information that is publicly available from government records, de-identified or aggregated data that cannot reasonably be used to identify an individual, or information that is otherwise excluded from the scope of Applicable Laws.

2. Our Business

SDRL operates a sponsorship-funded professional community for sales development leaders (our “Members”). Through the Services, Members access member content, research, and benchmarking; participate in surveys, discussions, and other community activities; attend Events; and use the features we make available, including any artificial intelligence features we may offer. Our community is funded primarily through sponsorships, and we work with Event Sponsors, exhibitors, research partners, and other business partners who support the community and who may receive Member information and engagement insights as described in this Privacy Policy.

The Services involve the following primary groups of individuals:

User Type	Relationship to Services	Example
Members	Sales development leaders and other professionals who join the SDRL community to access member content and research, participate in surveys and discussions, attend Events, and use the features of the Services.	A vice president of sales development who joins to access benchmarking research and attend conferences.
Event Sponsors and Partners	Event Sponsors, exhibitors, research partners, and other businesses that support the community or partner with SDRL and that may receive Member information and engagement insights.	A sales-technology vendor that sponsors a conference or receives engagement reporting.
Visitors, Applicants, and Event Guests	Individuals who visit the Sites, apply for Membership, or register for or attend Events without being Members.	A prospective Member who registers for a conference or downloads gated content.

SDRL determines the purposes and means of processing Personal Information collected through the Services and is responsible for that Personal Information as described in this Privacy Policy. Where we work with Event Sponsors, partners, and other third parties, we and they may act as independent controllers of the Personal Information each receives, and each party is responsible for its own privacy practices.

3. Information We Collect

a. From Members, Applicants, and Event Participants

Category of Information	Specific Data Elements	How We Collect It
Identity and Profile Information	Name, email address, phone number, employer, job title, professional background, LinkedIn profile URL, Member ID, and other profile details you provide or that we maintain.	Provided when you apply for Membership, register for an Event, or create or update your profile.
Membership and Application Information	Application responses, Membership status, and account settings and preferences.	Provided when you apply for or manage your Membership.
Survey and Research Responses	Answers to surveys, benchmarking studies, polls, and other research we conduct.	Provided when you participate in our surveys and research.
Communications and Member Contributions	Posts, comments, questions, messages, and other content you submit through the Services or in communications with us or other Members (“Member Contributions,” as defined in the Terms of Service).	Provided when you communicate through or contribute content to the Services.
Event Participation Information	Registration, attendance, and participation details, and audio and video recordings of Events (“Event Recordings”) in which your name, image, likeness, and voice may appear.	Collected when you register for, attend, or participate in Events.
Engagement Information	Information about how you use the Services when you are logged in, which we associate with your Member profile and identifiers (such as name, email address, LinkedIn profile URL, and Member ID), including the member content, reports, and research you view or download; the vendor materials and videos you watch; the Events you register for and attend; the links you click; your survey participation; the questions, prompts, and other inputs you submit to any AI Features (as described in the “Artificial Intelligence and Machine Learning” section below) and the topics and interests reflected in them; and the dates and frequency of this activity (“Engagement Information”). We may also derive inferences from Engagement Information and other Personal Information—such as interest, engagement, or qualification indicators—which we treat as Engagement Information.	Collected automatically through your logged-in use of the Services, using cookies, web forms, software development kits, and similar technologies, together with our membership and CRM systems.
Payment and Billing Information	If you purchase a paid offering, billing contact information and payment method details processed by our third-party payment processor (currently Stripe); we do not store full payment card numbers.	Provided when you purchase a paid offering, if and when paid offerings are introduced.

b. From Sponsors, Partners, and Vendors

Category of Information	Specific Data Elements	How We Collect It
Business Contact Information	Name, business email address, phone number, employer, and job title of sponsor, partner, and vendor representatives.	Provided when a sponsor, partner, or vendor engages with us or registers for the Services.
Agreement and Transaction Information	Sponsorship, partnership, and vendor agreement details, billing information, and related records.	Provided in the course of our business relationship.
Communications with Us	Inquiries, feedback, requests, and other communications.	Provided when sponsors, partners, or vendors contact us.

4. How We Collect Information

a. Directly From You

We collect Personal Information that you provide to us directly when you use the Services. This includes information you submit when creating or managing an account, configuring platform settings, uploading contact lists or campaign materials, communicating with us, or otherwise interacting with the Services.

The categories of information you may provide directly are described in Section 3 (Information We Collect) above.

b. Automatically

When individuals interact with our Services, we may automatically collect certain technical and usage information to operate, secure, and improve the Services.

Category of Information	Examples	How We Collect It
Device Information	Device type, operating system, browser type, device identifiers	Automatically when a device connects to the Services
Approximate Location Information	city-level location inferred from device data, phone number area code, or user-provided location information	Automatically collected or provided by users
Usage Information	Pages viewed, features used, time spent, interaction activity	Generated through normal use of the platform
Log and Diagnostic Data	IP address, timestamps, error logs, system activity	Automatically recorded by our systems
Cookie and Tracking Data	Cookies, pixels, tags, SDKs, and similar technologies	Collected through standard website and application technologies

We use this information to operate the Services, analyze system performance, troubleshoot issues, improve functionality, and protect the security of the platform.

c. From Third Parties

In some cases, we receive Personal Information from third parties that support our community and the functionality of the Services.

Third-Party Source	Example of Information Received	Purpose
Data Enrichment and Professional Networks	Contact and professional profile information (such as from LinkedIn) and data enrichment attributes.	To build, maintain, and enhance Member and prospect profiles.
Event Co-Hosts and Sponsors	Registration, attendance, and contact information for co-hosted or sponsored Events.	To administer Events and coordinate with partners.
Analytics and Advertising Partners	Attribution data, campaign performance metrics, and audience insights.	To measure and improve marketing performance.
Social Media Platforms	Public profile information or interaction data when you engage with our content.	To manage social media engagement and communications.

Information received from third parties is handled in accordance with this Privacy Policy and Applicable Laws.

5. Third-Party Applications and Integrations

The Services may integrate with or rely on certain third-party platforms and services (collectively, “Third-Party Applications”) to operate and support functionality.

These may include:

website and membership platform providers
CRM and marketing platforms
survey and research tools
payment processors
analytics providers
event production and webinar tools
data enrichment providers
social media platforms

When we or Members connect or authorize these integrations, the Third-Party Applications may exchange certain information with our Services. We process this information to provide and support the functionality of the Services. Third-Party Applications operate under their own privacy practices and policies.

6. How We Use Personal Information

We may use Personal Information for the following purposes:

Purpose	Description
Provide and Operate the Services	To create and manage Memberships and accounts, operate our community and member features, organize and deliver Events, provide the features and functionality of the Services, and process payments for paid offerings if and when they are introduced.
Evaluate Applications and Administer Memberships	To evaluate Membership applications, administer Memberships and accounts, and maintain community history.
Surveys, Research, and Benchmarking	To conduct surveys, research, and benchmarking and to prepare and publish research outputs and community statistics.
Communications, Marketing, and Sponsorships	To communicate with you about the Services, including newsletters, updates, and administrative messages, and to send promotional communications and personalized offers and to deliver and measure advertising and sponsorships, based on usage activity, preferences, and engagement history.
Analytics and Service Improvement	To analyze usage and engagement, evaluate performance, improve the Services, and develop new products and features.
Sharing and Sale to Sponsors and Partners	To share and, where applicable, sell Personal Information—including Engagement Information—to Event Sponsors and business partners, as described in this Privacy Policy.
Artificial Intelligence and Machine Learning	To develop, train, fine-tune, test, evaluate, and operate artificial intelligence and machine learning models, features, and products, as described in the “Artificial Intelligence and Machine Learning” section below.
Security and Fraud Prevention	To detect, investigate, and prevent unauthorized access, fraud, abuse, or other harmful activity affecting the Services.
Legal and Compliance Purposes	To comply with Applicable Laws, enforce our Terms of Service and agreements, protect our rights and property, and respond to legal requests or regulatory requirements.

We may also use aggregated, anonymized, or de-identified information that cannot reasonably identify an individual for purposes such as improving the Services, analyzing trends, developing new features, and supporting research and analytics.

7. How We Share and Sell Personal Information

We may share, and in certain cases sell, Personal Information with the following categories of recipients, and in the following circumstances. Under some Applicable Laws, certain of these disclosures may be considered a “sale” of Personal Information or “sharing” for purposes of targeted advertising; your opt-out rights are described in the “Your Choices” section below.

Category of Recipient	Description
Event Sponsors and Business Partners	We share, and may sell, Personal Information about Members and other participants, including name, employer, job title, email address and other contact information, LinkedIn profile URL, Membership status, survey responses, and Engagement Information (such as the content, reports, and vendor materials you view, download, or watch; the Events you register for and attend; and interest or intent signals derived from your activity, including from your inputs to AI Features) to Event Sponsors, exhibitors, research partners, and other business partners. Recipients may use this information for their own marketing, sales, research, and other business purposes, subject to Applicable Laws.
Service Providers	Vendors, contractors, and service providers that help us operate and support the Services, such as cloud hosting providers, membership and CRM platforms, analytics services, payment processors, and customer support tools. These providers process Personal Information on our behalf.
Third-Party Integrations	Third-party platforms and applications that you or we connect to the Services, such as CRM systems, marketing tools, analytics platforms, or other integrations that support the functionality of the Services.
Affiliates	Our subsidiaries or affiliated companies, including for marketing and promotional purposes, consistent with this Privacy Policy and to support the operation and administration of the Services.
Legal and Regulatory Authorities	Government agencies, law enforcement, courts, or regulators when disclosure is required to comply with Applicable Laws, legal processes, or governmental requests.
Corporate Transaction Participants	Parties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, in which Personal Information may be among the transferred assets. Any acquirer may continue to use Personal Information as set forth in this Privacy Policy.

We also share aggregated and de-identified information—such as published benchmark research and community statistics—that does not reasonably identify you. For clarity, this does not limit the individual-level disclosures described above.

8. Where Your Information Is Stored

We store and process Personal Information using secure infrastructure operated by trusted service providers. Personal Information may be stored and processed in the following ways:

Cloud hosting and platform infrastructure. Personal Information, including account information, contact details, communications data, and system activity data, may be stored using secure cloud hosting providers and other infrastructure that support the operation of the Services. These providers help us operate the platform, maintain system reliability, and deliver features such as member and community features, analytics, and support.
Third-Party Applications. Certain Personal Information may be processed by Third-Party Applications that support the Services, including payment processors, messaging infrastructure providers, analytics tools, marketing platforms, and customer support systems. These providers process Personal Information as necessary to perform services on our behalf or to support integrations that you or we enable through the Services.
Data Location. To provide the Services, Personal Information may be stored and processed in the United States, where SDRL operates its business.

By using the Services or otherwise providing information to us, you acknowledge that your Personal Information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we transfer Personal Information in accordance with applicable data protection laws and recognized transfer mechanisms, such as standard contractual clauses where required. You understand that the United States may not provide the same level of data protection as the laws of your country of residence. Additional information for individuals located in the European Economic Area, the United Kingdom, and Switzerland is provided in the “Additional Information for Individuals in the European Economic Area, the United Kingdom, and Switzerland” section below.

9. Personal Information and Marketing

As part of operating a sponsorship-funded community, we share, and may sell, Personal Information—including Engagement Information—to Event Sponsors and business partners, as described in the “How We Share and Sell Personal Information” section above. Under some Applicable Laws, certain of these disclosures may be considered a “sale” of Personal Information or “sharing” for purposes of targeted advertising. Where required by Applicable Laws, you may opt out of such sale or sharing as described in the “Your Choices” section below, including by using the “Do Not Sell or Share My Personal Information” mechanism and, where legally required, by sending an opt-out preference signal such as the Global Privacy Control. We may also use Personal Information to market our Services and the offerings of our sponsors and partners, consistent with Applicable Laws and the choices described in this Privacy Policy.

10. Artificial Intelligence and Machine Learning

We use information and content collected through the Services—including survey and research responses, Member Contributions (including the questions, prompts, and other inputs you submit to AI Features), Event Recordings and other recorded sessions, Engagement Information, and other information described in this Privacy Policy—to develop, train, fine-tune, test, evaluate, and operate artificial intelligence and machine learning models, features, and products (collectively, “AI Features”), including AI-powered tools we may make available to Members or to third parties. Where appropriate, we may aggregate or de-identify information used for these purposes; however, you should assume that content you contribute through the Services may inform AI Features and be reflected in their outputs. Personal Information used in connection with AI Features is processed in accordance with this Privacy Policy and Applicable Laws, and your use of any AI Feature is subject to the Terms of Service. Where we make AI-derived insights available to Event Sponsors or business partners, we generally provide derived signals, summaries, benchmarks, or aggregated outputs rather than raw Event Recordings or verbatim individual survey responses. Private or expressly off-the-record sessions are not recorded. If you are located in the European Economic Area, the United Kingdom, or Switzerland, we do not use your individual or pseudonymized responses to train or develop AI Features, as described in the “Additional Information for Individuals in the European Economic Area, the United Kingdom, and Switzerland” section below.

For Event Recordings and transcripts created before the effective date of this Privacy Policy, we may use such materials to develop, improve, and operate AI Features where they have been effectively de-identified. We limit any use of identifiable pre-existing Event Recordings for these purposes to individuals who accept the updated Terms of Service and acknowledge this Privacy Policy, except where a prior release or another legal basis already permits such use.

11. Third-Party Links and Websites

The Services may contain links to or integrations with websites, platforms, or services operated by third parties (collectively, “Third-Party Services”). We do not control the content, policies, or practices of these Third-Party Services. Any information you provide to those services is governed by their own privacy policies and terms. Your interactions with Third-Party Services are at your own risk, and we encourage you to review the privacy policies of any third-party services you use.

12. Our Content on Third-Party Services

Our Services or marketing content may appear on or be distributed through third-party platforms such as social media sites, advertising networks, or other online services. These third parties may use cookies, pixels, or similar tracking technologies to collect information about interactions with our content or advertisements. This information may be used to measure the effectiveness of advertising campaigns or to deliver advertisements that may be more relevant to your interests. The data practices of those third parties are governed by their own privacy policies.

13. Your Choices

You have certain choices regarding how we collect, use, and share your Personal Information, as described below:

Modifications to Personal Information. You may review and request modifications to certain Personal Information by contacting us at info@sdrleader.com. Please note that we will retain Personal Information for as long as reasonably necessary to fulfill the purposes for which it has been collected or as required or permitted by Applicable Laws. If you provide us with updated information, we will make reasonable efforts to keep your information accurate and up to date and to implement requested changes in active systems as soon as practicable.
Marketing communications. You may opt out of promotional marketing communications by using the unsubscribe mechanism included in our emails or by contacting us at info@sdrleader.com. If you opt out, we may still send you non-promotional communications, such as transactional messages related to your orders, account, or our ongoing business relationship.
Do Not Sell or Share My Personal Information. You may opt out of the “sale” of your Personal Information and of “sharing” for purposes of cross-context behavioral or targeted advertising at any time by using the “Do Not Sell or Share My Personal Information” link on the Sites or by emailing us at info@sdrleader.com with the subject line “Do Not Sell or Share.” Where required by Applicable Laws, we also honor opt-out preference signals, such as the Global Privacy Control, sent by your browser or device.
Ad choices. Some advertisements and other content may be delivered by third-party advertising networks, attribution partners, and advertisers that may use cookies, pixels, SDKs, or similar technologies to collect and use information such as inferred interests, aggregated information, and activity across websites and applications in order to deliver advertising that is more relevant to your interests. To learn more about interest-based advertising and available opt-out mechanisms, please visit www.aboutads.info. You may opt out of certain interest-based advertising in desktop and mobile browsers at www.aboutads.info/choices, or in mobile applications by downloading the AppChoices app at www.aboutads.info/appchoices.
Tracking technology. You may disable or limit certain tracking technologies through your browser or device settings. On mobile devices, you may also be able to limit ad tracking through your device settings. Please note that disabling tracking technologies may limit the functionality of certain features of the Services.

Location and analytics. If we use Third-Party Applications or services to automatically collect information about your interactions with the Services, those third parties may offer you choices to limit or opt out of certain data collection. Please refer to Section 4 (How We Collect Information), Sections 4(b) and 4(c), above for additional information regarding our use of tracking technologies. You can learn about Google Analytics’ practices and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.

Cookies. Most web browsers accept cookies by default. You may adjust your browser settings to remove or reject cookies. Please note that disabling cookies may affect the availability or functionality of certain features of the Services.

Not providing Personal Information. You may choose not to provide certain Personal Information to us; however, doing so may limit your ability to access or use some or all features of the Services.

14. Information Security

We use commercially reasonable organizational, technical, and administrative security measures designed to protect your Personal Information from unauthorized access, use, or disclosure, including encryption in transit (such as Transport Layer Security (TLS)) and access controls that limit access to Personal Information to personnel who need it. However, no method of transmission or storage is completely secure, and we cannot guarantee the complete safety of your information. It is your responsibility to keep your account credentials confidential.

In the event of a breach of security leading to the unauthorized access, use, or disclosure of your Personal Information, we will notify you and applicable authorities as required by, and within the timeframes mandated by, Applicable Laws, including applicable state breach-notification statutes. If you believe your interaction with us is no longer secure, please contact us promptly at info@sdrleader.com.

15. How Long We Keep Your Information

We retain, store, and use your information for as long as reasonably necessary to support our relationship with you, provide the Services, and maintain Memberships and community history, and as necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements, in accordance with our data retention policies and Applicable Laws. Because our community is designed to follow Members across employers over time, Member profiles and Engagement Information are retained for the duration of Membership and a reasonable period thereafter unless deletion is requested as described in this Privacy Policy and no exception applies. Payment information is retained by our payment processor in accordance with its own policy, and aggregated or de-identified information may be retained for as long as it remains aggregated or de-identified.

16. Our Services are Not Intended for Children

The Services are intended for adults and are not directed to individuals under the age of 18, and we do not knowingly collect Personal Information from anyone under 18. We do not knowingly sell or share the Personal Information of individuals under 18. If you believe that an individual under 18 has provided us with Personal Information, please contact us at info@sdrleader.com, and we will take appropriate steps to delete such information.

17. U.S. State-Specific Privacy Information

If you reside in any of the following states, you may be entitled to certain rights under applicable state data privacy laws: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Information. This Privacy Policy describes the categories of Personal Information we collect and process, the sources from which that information is obtained, and the purposes for which it is used. These disclosures are described in the sections titled “Information We Collect,” “How We Use Personal Information,” “How We Collect Information,” and “How We Share and Sell Personal Information.”
Access. You may request access to, or a copy of, the Personal Information we maintain about you.
Deletion. You may request that we delete Personal Information we have collected from or about you, subject to certain exceptions permitted by Applicable Laws.
Correction. You may request that we correct inaccuracies in Personal Information we maintain about you.
Opt-out of sale and sharing / targeted advertising. You may direct us not to sell or share your Personal Information, or to stop processing it for purposes of targeted advertising or profiling that produces legal or similarly significant effects, where applicable. Instructions for exercising these choices are provided in the “Your Choices” and “Personal Information and Marketing” sections of this Privacy Policy.
Appeal. If we deny a request you submit, you may have the right to appeal our decision, as permitted by Applicable Laws.

California law requires that we disclose the categories of Personal Information we have disclosed for a business purpose, and the categories we have “sold” or “shared,” as those terms are defined under California law, during the 12 months preceding the date of this Privacy Policy. During that period: (i) we collected the categories of Personal Information described in the “Information We Collect” section; (ii) we disclosed Personal Information for business purposes to the categories of recipients described in the “How We Share and Sell Personal Information” section (such as our service providers); and (iii) we sold or shared the following categories with Event Sponsors and business partners: identifiers and professional or employment-related information (for example, attendee lists containing name, employer, and job title). We did not sell or share internet or other electronic network activity information (including Engagement Information) or inferences drawn from that information during that period. The expanded sharing and sale of Engagement Information and inferred-intent signals described in this Privacy Policy is a new practice that we had not undertaken during the preceding 12-month period. We do not knowingly sell or share the Personal Information of individuals under 18. Nevada residents may submit a request to opt out of the sale of certain covered information under Nevada law (NRS Chapter 603A) by emailing us at info@sdrleader.com. You have the right to exercise the rights described above without being subject to unlawful discrimination.

18. Exercising Your Rights (if applicable)

To exercise the rights described in the “U.S. State-Specific Privacy Information” section above, you may submit a request as follows:

Access, correction, or deletion requests. To request access to, correction of, or deletion of Personal Information collected through your use of the Services, please email us at info@sdrleader.com.
Opt-out of interest-based advertising and tracking. To learn how to opt out of interest-based advertising and certain online tracking, please see the “Your Choices” section of this Privacy Policy.
Identity verification. To protect your privacy and security, we may need to verify your identity before responding to your request. Where we request additional information for verification purposes, we will use it solely to verify your identity or your authority to make the request on behalf of another individual.
Authorized agents. You may designate an authorized agent to submit a request on your behalf. Authorized agents may submit requests using the same methods described above; however, we may require proof of the agent’s authority and may also require you to independently verify your identity.

Please note that, where permitted by Applicable Laws, we may limit the number of requests we are required to fulfill within a 12-month period. We will respond to verified requests within the time period required by Applicable Laws (generally 45 days). If we require additional time, we will notify you of the extension and the reason for the delay within the initial response period, as permitted by Applicable Laws.

19. California Shine the Light

This Privacy Policy describes how we may share your Personal Information for marketing purposes. If you are a California resident, the Shine the Light law permits you to request and obtain from us once per calendar year information about any of your Personal Information shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us at info@sdrleader.com.

20. “Do Not Track” Policy as Required by California Online Privacy Protection Act (“CalOPPA”)

Our Services do not respond to Do Not Track (“DNT”) signals. However, some third-party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser. We also honor the Global Privacy Control (“GPC”) opt-out preference signal. If you broadcast a GPC signal from a browser or extension that supports it, we will treat it as a valid request to opt out of the sale or sharing of your Personal Information for that browser, to the extent required by Applicable Laws. If you are not logged in to your account, we may only be able to associate your opt-out preference with your browser and not your account.

21. Usage and Deletion of Personal Information

You may request what Personal Information we have collected, used and disclosed about you as well as the identity of the third parties to which we have disclosed your Personal Information. You may also request deletion of your Personal Information. Please note that we may not delete all of your information if: (1) we need it to complete a service as requested by you or perform under a contract we have with you; (2) we need such information to repair any errors to our Services or detect data security violations; or (3) we need such information to protect against fraud or illegal activity or to comply with Applicable Laws. Please note that if we delete your Personal Information, we may not be able to provide you the Services with the same functionality.

To make any request for Personal Information or deletion, please send an email to info@sdrleader.com.

22. Additional Information for Individuals in the European Economic Area, the United Kingdom, and Switzerland

This section provides additional information for individuals located in the European Economic Area (“EEA”), the United Kingdom, and Switzerland (“European Users”) and applies in addition to the other sections of this Privacy Policy. To the extent this section conflicts with another section, this section controls for European Users. We determine whether you are a European User based on your stated country of residence and, where you have not stated a country of residence, based on the location of your employer. We do not treat you as a European User solely because you attend an Event held in Europe, such as a European conference. Where your status remains uncertain after applying these signals, we default to European treatment for the individual-level sponsor products and identifiable AI uses described in this Privacy Policy.

For the processing described in this section, SDRL Inc. is the controller of your Personal Information, and you may contact us using the details in the “You Can Contact Us” section.

We process your Personal Information on the following legal bases: (a) the performance of a contract, to provide the Services, administer your Membership or account, and organize and deliver Events you register for; (b) our legitimate interests or those of a third party, including operating, securing, and improving the community, conducting research and benchmarking using aggregated or anonymized outputs, and, in connection with Events, providing limited professional information about attendees to Event Sponsors as described below, in each case where those interests are not overridden by your interests or fundamental rights and freedoms; (c) your consent, where we rely on it, which you may withdraw at any time; and (d) compliance with our legal obligations. Where we rely on legitimate interests, you may contact us for further information about the balancing we have carried out.

Except as described in this section, we do not apply certain practices described elsewhere in this Privacy Policy to European Users. In particular, we do not include European Users’ individual-level Personal Information in the person-level engagement or inferred-intent data products we make available to Event Sponsors and business partners, and we do not use European Users’ individual or pseudonymized survey responses, Member Contributions, Event Recordings, or Engagement Information to train, fine-tune, or develop AI Features. This exclusion from our person-level and inferred-intent products also covers company-level signals and other outputs that, given the small number of members typically associated with a given employer, could reasonably identify a European User. We may continue to use genuinely aggregated or anonymized information that does not identify, and cannot reasonably be used to identify, any individual, including for research, benchmarking, and the development and operation of AI Features.

We may extend one or more of these uses to European Users in the future—including with respect to Personal Information collected before any such change—only where we have established a valid legal basis to do so (such as your consent) and have provided any legally required notice. Nothing in this Privacy Policy is intended to foreclose that future option, and we will not undertake any such extended use of European Users’ individual-level Personal Information unless and until an appropriate legal basis is in place.

In connection with our in-person and virtual Events, we may provide Event Sponsors with limited professional information about attendees, such as name, employer, and job title, so that sponsors can understand who attended and follow up appropriately. For European Users, we rely on our and our sponsors’ legitimate interests for this limited sharing, and we describe the sharing, and how to object to it, in the registration materials and the event privacy notice for the relevant Event. You have the right to object to this sharing, and an absolute right to object to any processing of your Personal Information for direct marketing purposes, and we will honor such objections.

Subject to the conditions and exceptions provided under Applicable Laws, European Users have the following rights with respect to their Personal Information:

Access. The right to obtain confirmation of whether we process your Personal Information and to request access to, or a copy of, that information.
Rectification. The right to have inaccurate Personal Information corrected and incomplete Personal Information completed.
Erasure. The right to request that we delete your Personal Information in certain circumstances.
Restriction. The right to request that we restrict the processing of your Personal Information in certain circumstances.
Portability. The right to receive certain Personal Information in a structured, commonly used, and machine-readable format and to have it transmitted to another controller where technically feasible.
Objection. The right to object, on grounds relating to your particular situation, to processing based on our legitimate interests, and an absolute right to object to the processing of your Personal Information for direct marketing purposes.
Withdrawal of consent. Where we rely on your consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Automated decision-making. The right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, except as permitted by Applicable Laws. We do not currently make such decisions about European Users.
Complaint. The right to lodge a complaint with your local supervisory authority (in the United Kingdom, the Information Commissioner’s Office).

To exercise any of these rights, please contact us at info@sdrleader.com. We will respond within the timeframes required by Applicable Laws, and we may need to verify your identity before responding.

When we transfer your Personal Information from the EEA, the United Kingdom, or Switzerland to the United States or to other countries that may not provide an equivalent level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (together with the UK International Data Transfer Addendum or the Swiss addendum, as applicable) or another lawful transfer mechanism. You may contact us for more information about these safeguards. See also the “Where Your Information Is Stored” section.

We retain your Personal Information for the periods described in the “How Long We Keep Your Information” section and for no longer than is necessary for the purposes for which it was collected, except as otherwise required or permitted by Applicable Laws.

23. Changes to this Privacy Policy

We have the discretion to update this Privacy Policy at any time. We encourage you to frequently check this page for any changes. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications. Subject to Applicable Laws, your continued use of our Services shall be deemed an acceptance of our revised policy. If we make material changes to this Privacy Policy, we will notify you by posting the updated Privacy Policy on the Sites and, where required by Applicable Laws, by other means such as email prior to the change becoming effective.

24. You Can Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our privacy practices, you can contact us at: SDRL Inc., Attn: Legal/Privacy, 1448 NW Market Street, STE 500, Seattle, WA 98107, or by email at info@sdrleader.com.