Privacy Policy

This Privacy Policy explains how IMADRI Global Mediation, LLC ("IMADRI," "we," "us," or "our") collects, uses, stores, protects, and shares information when you visit www.imadriglobal.com (the "Site"), purchase a product, register for an event, or submit an inquiry or intake form. Please read this policy carefully. By using the Site, you consent to the practices described here.

IMADRI serves users globally, including users in the United States, South Africa, the European Union and European Economic Area, the United Kingdom, and the Middle East and Asia-Pacific regions. We are committed to compliance with applicable data protection law, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the South African Protection of Personal Information Act (POPIA), and the California Consumer Privacy Act (CCPA) where applicable.

1. What Information We Collect

1.1 Information You Provide Directly

IMADRI collects information you voluntarily provide when you interact with the Site. This includes:

• When you purchase a product: your name, email address, and payment information (processed by Stripe — see Section 4). IMADRI does not receive or store your full card number, expiration date, or CVV.
• When you register for a webinar or event: your name, email address, organization, professional role, and country. You may also provide optional demographic information.
• When you submit a general inquiry or book a consultation: your name, email address, phone number, and the subject matter of your inquiry.
• When you submit a conflict-affected family intake form: your name, contact information, current location, the region of conflict, the nature of your claim, and a description of your situation. This information is treated as sensitive personal data and is subject to heightened protections described in Section 5.
• When you subscribe to our newsletter: your email address and any preferences you indicate.

1.2 Information Collected Automatically

When you visit the Site, certain technical information is collected automatically through cookies and similar technologies. This may include your IP address, browser type and version, operating system, referring URL, pages visited, and the time and duration of your visit. This information is used to operate and improve the Site, to analyze usage patterns, and to diagnose technical issues.

IMADRI uses Umami Analytics, a privacy-focused, cookie-free analytics tool that does not track individual visitors across sessions and does not share data with third parties. No cookie consent banner is required for Umami Analytics.

1.3 Information from Third Parties

IMADRI may receive information about you from Stripe (payment confirmation data), from email service providers (delivery and engagement data), and from referral sources such as other websites that link to the Site. We use this information only to provide and improve our services.

2. How We Use Your Information

IMADRI uses the information we collect for the following purposes:

• To fulfill purchases and deliver products. When you purchase the Field Guide or register for a Webinar, we use your name and email address to deliver the product, send confirmation and receipt emails, and issue your certificate of attendance.
• To provide mediation and professional services. When you submit an intake form or inquiry, we use your information to assess your matter, respond to your inquiry, and, if an engagement proceeds, to conduct the mediation process.
• To send communications you have requested. If you subscribe to our newsletter or request updates, we will send you IMADRI Journal articles, event announcements, and relevant resources. You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.
• To operate and improve the Site. We use automatically collected technical data to maintain the Site's security and functionality, to understand how visitors use the Site, and to improve its content and user experience.
• To comply with legal obligations. We may process your information where required by applicable law, court order, or regulatory requirement.

IMADRI does not sell your personal information to any third party. IMADRI does not use your personal information for advertising or remarketing purposes, and does not share it with advertising networks or data brokers.

3. Legal Bases for Processing (GDPR and UK GDPR)

For users in the European Union and United Kingdom, IMADRI processes personal data on the following legal bases:

• Contractual necessity: Processing your name, email address, and payment information to fulfill a purchase or deliver a service you have requested.
• Legitimate interests: Processing automatically collected technical data to operate and secure the Site, and processing inquiry data to respond to your messages. IMADRI's legitimate interests in these cases do not override your rights and interests.
• Consent: Sending newsletter communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Legal obligation: Processing data where required by applicable law.

4. Payment Processing and Stripe

All payment transactions on the Site are processed by Stripe, Inc. When you make a purchase, you are providing your payment information directly to Stripe through a secure connection. IMADRI receives only a confirmation of successful payment and the information you provide in the checkout form (name and email address). IMADRI does not receive, store, or have access to your credit or debit card number, expiration date, security code, or bank account details.

Stripe's privacy practices are governed by Stripe's Privacy Policy, available at stripe.com/privacy. Stripe is certified as a PCI DSS Level 1 service provider, the highest level of payment security certification.

5. Sensitive Information — Conflict-Affected Family Intake

Information submitted through IMADRI's conflict-affected family intake form may include details about personal circumstances, family situations, property loss, displacement, and experiences of armed conflict. This information is treated as sensitive personal data and is subject to the following heightened protections:

• This information is accessible only to IMADRI's principal mediator and essential IMADRI personnel directly involved in reviewing and responding to your matter. It is not shared with any third party without your explicit consent, except as required by applicable law.
• This information is stored in encrypted form and is not used for any purpose other than the assessment and conduct of your specific matter.
• If your matter does not proceed to a formal IMADRI engagement, your intake information will be retained for a period of 12 months and then securely deleted, unless you request earlier deletion.

We understand that the information you share in this context is personal and often painful. It will be treated with the seriousness and discretion it deserves.

6. Data Retention

IMADRI retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following specific retention periods:

• Purchase records (name, email, transaction confirmation): retained for 7 years for tax, accounting, and legal compliance purposes.
• Webinar and event registration data: retained for 3 years following the event, or for as long as required to support CLE credit verification.
• Newsletter subscriber data: retained until you unsubscribe, after which your data is deleted within 30 days.
• General inquiry and consultation request data: retained for 24 months from the date of your last contact with IMADRI, unless an engagement proceeds, in which case engagement records are retained for 7 years from the close of the engagement.
• Conflict-affected family intake data: retained for 12 months if no engagement proceeds, or for 7 years from the close of the engagement if one does.
• Automatically collected technical data (including analytics): retained for up to 26 months, consistent with standard analytics data retention practices.

7. Cookies

IMADRI's Site uses cookies and similar tracking technologies to operate the Site and improve user experience. We use the following types of cookies:

• Strictly necessary cookies, which are required for the Site to function and cannot be disabled. These include session cookies and security cookies.
• Analytics cookies, which help us understand how visitors use the Site. IMADRI uses Umami Analytics, which operates without cookies and does not collect personally identifiable information.
• Functional cookies, which remember your preferences (such as language selection) to improve your experience.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain Site features.

8. Your Rights

Depending on your location, you may have the following rights with respect to your personal data:

• The right to access the personal data IMADRI holds about you.
• The right to correct inaccurate or incomplete personal data.
• The right to request deletion of your personal data, subject to IMADRI's legal obligations to retain certain records.
• The right to object to or restrict certain processing activities.
• The right to data portability — to receive your data in a structured, machine-readable format.
• The right to withdraw consent to processing based on consent, at any time, without affecting the lawfulness of processing prior to withdrawal.

For users in the EU and UK (under GDPR and UK GDPR), US residents in California (under CCPA), and South African residents (under POPIA), these rights are enforceable under applicable law. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request." We will respond within 30 days.

If you are located in the EU or UK and believe IMADRI has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

IMADRI is based in the United States and processes data on servers located in the United States. If you are located outside the United States — including in the European Union, United Kingdom, South Africa, or the Middle East and Asia-Pacific regions — your personal data will be transferred to and processed in the United States.

The United States does not have an adequacy decision from the European Commission for all transfers, and different legal protections apply than in your home jurisdiction. IMADRI implements appropriate safeguards for international transfers, including standard contractual clauses where required by applicable law.

For South African users, data is processed in accordance with POPIA's requirements for cross-border data transfers.

10. Third-Party Service Providers

IMADRI works with a limited number of third-party service providers who may process your personal data on our behalf. These include:

• Stripe, Inc. — payment processing. Governed by Stripe's Privacy Policy.
• Email service providers — for transactional emails (purchase confirmations, certificates of attendance) and newsletter delivery.
• Website hosting and infrastructure providers — for Site operation and security.
• Umami Analytics — privacy-first, cookieless website analytics.

All third-party service providers are required to process personal data only on IMADRI's instructions, to implement appropriate security measures, and not to use your data for their own purposes.

11. Security

IMADRI implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted transmission of data (HTTPS), restricted access to personal data on a need-to-know basis, and secure storage of sensitive information.

No method of transmission over the internet or electronic storage is completely secure. While we take data security seriously and work to protect your information, we cannot guarantee absolute security.

12. Children

The Site is not directed to children under the age of 13, and IMADRI does not knowingly collect personal data from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [email protected] and we will delete it promptly.

13. Changes to This Policy

IMADRI reserves the right to update this Privacy Policy at any time. Changes will be effective upon posting to the Site with an updated "Last Updated" date. Where changes are material, we will make reasonable efforts to notify registered users and newsletter subscribers by email before the changes take effect.

14. Contact and Data Controller Information

IMADRI Global Mediation, LLC is the data controller for personal data processed through this Site.

For privacy-specific requests, use the subject line "Privacy Request" in your email. We will respond within 30 days.