Privacy Policy – International Network of Research Project Managers (INRPM)

Who we are

This website is operated on behalf of the International Network of Research Project Managers (INRPM), a global community for people working with project and programme management in research.
Our website address is: https://internationalrpm.org/.

If you have any questions about this policy or how we handle personal data, you can contact us at:
contact@internationalrpm.org.


What personal data we collect and why we collect itWhat personal data we collect and why we collect it

We collect and process personal data in the following situations:

  1. Newsletter subscriptions and mailing lists
    When you subscribe to INRPM updates or register interest in INRPM activities, we collect the information you provide, typically:
    • name
    • email address
    • organisation and/or role
    • country or region (if provided)
    We use this information to:
    • send you occasional emails about INRPM activities, events, resources, and opportunities
    • manage mailing lists and event communications
    • understand, in aggregate, who we are reaching (for example by country or type of organisation)
  2. Contact forms and email
    If you contact us via a form on the website or by email, we collect the information you provide (such as name, email address, organisation, and the contents of your message) in order to respond and follow up.
  3. Certificates and participation records
    For selected INRPM activities we may issue participation certificates. To do this, we store basic information such as:
    • your name
    • your email address
    • the activity you attended
    • the date of participation
    • a unique certificate or verification ID
    This allows you to receive and share certificates, and allows institutions or employers to verify the validity of a certificate online. When a certificate is validated (for example by following a verification link or entering a certificate ID), only limited information is shown, such as your name, the activity, and the date of participation.
  4. Comments
    When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
    An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
  5. Media
    If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

We may also collect limited technical information (such as IP address, browser type, and pages visited) through our hosting provider or analytics tools, to maintain the security and performance of the website and understand general usage patterns in aggregate.


Cookies

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Depending on how the site is configured, we may also use cookies or similar technologies for basic analytics (to understand, in aggregate, how visitors use the site). Where required, we will present a cookie notice or consent banner.


Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). For example, our video archive may embed recordings from external platforms such as YouTube or similar services, and our tools/resources pages may include embedded content or links to external websites.

Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third‑party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website. Please refer to the privacy policies of those services for more information.


Who we share your data with

We do not sell your personal data or share it with third parties for their own marketing purposes.

We may use third‑party service providers to host the website, send email, provide analytics, or support other INRPM activities. These service providers may process personal data on our behalf under appropriate data protection safeguards and only in accordance with our instructions.

If you request a password reset, your IP address may be included in the reset email as part of standard WordPress functionality.


How long we retain your data

  • If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow‑up comments automatically instead of holding them in a moderation queue.
  • For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
  • For newsletter subscribers, we retain your data for as long as you remain subscribed. If you unsubscribe, we stop sending you emails and we periodically remove unsubscribed addresses from our active mailing lists, unless there is a specific reason to keep aggregate, anonymised statistics longer.
  • For certificates and participation records, we may retain data for as long as certificates are valid and may reasonably need to be verified by you or third parties (for example, institutions or employers), unless you ask us to delete it and there is no overriding reason to retain it.
  • For contact form submissions and email correspondence, we retain data as long as needed to handle your enquiry and for a reasonable period afterwards, unless a longer retention is required for administrative, legal, or security purposes.

What rights you have over your data

If you have an account on this site, have left comments, are subscribed to our mailing list, or have received certificates from INRPM activities, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.

You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

You can unsubscribe from our mailing list at any time using the link in any email you receive from us.

To exercise your rights, please contact us at:
[contact@internationalrpm.org].

Depending on where you are based, you may have additional rights under data protection laws (such as GDPR), including the right to object to certain types of processing and the right to lodge a complaint with a supervisory authority.


Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Data processed by third‑party providers (such as website hosting, email delivery, or analytics services) may be transferred and processed outside your country of residence. Where this happens, we aim to ensure appropriate safeguards are in place in line with applicable data protection laws (such as GDPR for EU/EEA residents).


Legal basis

Where GDPR or similar data protection laws apply, our main legal bases for processing your data are:

  • your consent (for example, when you subscribe to our mailing list or agree to receive a certificate), and
  • legitimate interest (for example, to maintain a secure website, respond to enquiries, document participation in INRPM activities, and run INRPM in a reasonable way).

You can withdraw your consent to receive emails at any time by unsubscribing.


Updates to this policy

We may update this privacy policy from time to time. The latest version will always be available on this page, and we will adjust the “last updated” date accordingly.

Last updated: 30 April 2026

Scroll to Top