Privacy Policy

Global Council for Business Resilience (GCBR) is a nonprofit association.

France, Saint-Germain-en-Laye
Registration number: W783013613
Email: info@gcbr-org.com

The world is changing faster than ever. Businesses that build resilience today will be the leaders of tomorrow. Be part of the resilience revolution. The future belongs to the resilient.

Depending on how you use GCBR services, we may process:

• Identity and contact details (name, email, organisation, phone)
• Expert profile information you submit (bio, expertise, photo)
• Account, membership, and messaging data in the Experts cabinet
• Technical data such as IP address, device, and cookie preferences
• Communications you send to us (forms, email, introduction requests)

• To operate the GCBR website, Experts network, and SME tools
• To review expert applications, memberships, and content submissions
• To respond to contact and introduction requests
• To send service messages and, with consent, relevant updates
• To keep the platform secure and improve the experience

We rely on contract performance (providing your account and membership), legitimate interests (network operations and security), legal obligations where applicable, and consent (for optional cookies and certain communications).

We do not sell personal data. We use processors to host and operate the platform, including Supabase (authentication and database). Data is processed in the EU/EEA where Supabase project regions are configured for that purpose, or under appropriate safeguards for any transfer outside the EEA. We may also share data with partners only when needed to fulfil a request you initiate, or when required by law.

We keep personal data only as long as needed for the purposes above and legal requirements. As a working baseline (subject to counsel review): account and profile data while your account is active and for up to 24 months after last sign-in; SME assessment evidence for the duration of an active certification pathway and aligned to certificate validity; awarded certificates for their three-year validity period plus up to two years of archive for verification; technical and security logs typically up to 12 months. You may request erasure subject to those obligations.

Under GDPR you may request access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent where processing is consent-based. We aim to respond to access and erasure requests within 30 days. See our GDPR page or email info@gcbr-org.com.

Global Council for Business Resilience
France, Saint-Germain-en-Laye
Registration number: W783013613
Email: info@gcbr-org.com

We may update this policy as our services evolve. The version published on this page is the current one.