1. Introduction

This Privacy and Data Protection Policy explains how World Think Tanks Council collects, uses, stores, and protects personal data when you interact with our website, services, research activities, publications, events, and professional engagements.
This policy applies to all users worldwide.

2. Who we are

World Think Tanks Council is an independent international organisation operating globally, with primary administration and legal oversight based in the United Kingdom.
For the purposes of data protection law, World Think Tanks Council acts as the data controller.

3. Legal framework

We process personal data in accordance with:
UK General Data Protection Regulation
Data Protection Act 2018
For users outside the United Kingdom, we apply equivalent data protection standards to ensure fair, lawful, and secure processing.

4. Scope of this policy

This policy applies to personal data collected through:
The website worldthinktanks.com
Membership and council applications
Research submissions and publications
Thesis related services and academic support activities
Books, reports, and editorial projects
Events, forums, and conferences
Paid professional and publishing services
Communications by email or other official channels

5. Personal data we collect

We may collect the following categories of data:
Identity data such as name, title, organisation, and professional role
Contact data such as email address and phone number
Application and membership data
Research, manuscript, or publication related data
Payment and billing information for paid services
Technical data such as IP address, browser type, and usage patterns
Communications and correspondence

6. Purpose of processing

We process personal data to:
Operate and manage our organisation and website
Evaluate applications and affiliations
Deliver research, publishing, and professional services
Manage books, reports, and editorial projects
Communicate with members, partners, and stakeholders
Organise events and policy forums
Maintain security and prevent misuse
Comply with legal and regulatory obligations

7. Lawful basis for processing

Processing is carried out based on one or more of the following:
Consent provided by the individual
Performance of a contract or service
Legitimate organisational interests
Legal or regulatory obligations

8. International data transfers

Where personal data is processed or accessed outside the United Kingdom, appropriate safeguards are applied to ensure adequate protection.

9. Data retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by law or professional standards.

10. Your rights

You have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion where appropriate
Restrict or object to processing
Withdraw consent where applicable
Request data portability
Lodge a complaint with the UK Information Commissioner Office

11. Data security

We apply reasonable technical and organisational measures to protect personal data. While we take security seriously, no system can guarantee absolute protection.

12. Children

Our services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children.

13. Updates

This policy may be updated periodically. The latest version will always be published on the website.