Privacy Policy

Scope

This Privacy Policy describes how The Safe Builders Alliance (the “Alliance,” “we,” “us” or “our”) handles personal information when you visit safebuilders.com, submit a membership application or inquiry, propose a partnership, subscribe to Safe Builders Insights, communicate with us or otherwise interact with a service that links to this Policy (collectively, the “Services”).

This Policy does not replace a privacy notice that accompanies a specific membership, partner, insurance, risk-financing or other program. If another notice is provided for a particular relationship, that notice governs that context.

Information we collect

We collect information you choose to provide, limited technical information needed to operate the Services and business information received from appropriate sources.

Identity and contact information. Your name, work email address, telephone number, role and organization.
Organization and application information. Legal and trade names, website, headquarters, service regions, company type and information relevant to membership eligibility.
Certification information. The independent certification body, certificate number, scope, issue and expiry dates, and a certificate file submitted through the approved secure upload process.
Inquiry and partnership information. Your subject, message, stakeholder category, geography, proposed contribution and requested conversation.
Consent and communications. Newsletter choices, confirmation and withdrawal records, messages, feedback and correspondence.
Technical and activity information. IP address, browser and device type, operating system, requested pages, date and time, referring page, diagnostic, delivery and security logs.

Browser storage and other sources

The membership application uses session storage in your browser to restore organization and application fields during the same browser session. That draft is removed after a successful submission and can also be removed by closing the browser session or clearing site data. Certificate files are not stored in session storage.

We may receive business contact information from your organization, a referral partner, professional advisers, public business sources or another person who believes the Alliance may be relevant to you. We handle that information under this Policy and any restrictions imposed by the source.

How we use information

We use personal information to:

receive, review and respond to inquiries and partnership proposals;
review membership applications and verify stated eligibility information;
administer requested services, relationships, events and communications;
send Safe Builders Insights only after separate, confirmed consent;
operate, maintain, secure, troubleshoot and improve the Services;
detect spam, fraud, abuse, security incidents and harmful activity;
comply with law, enforce agreements and establish, exercise or defend legal claims; and
carry out another purpose disclosed when information is collected or with your consent.

How we disclose information

We disclose personal information only as reasonably necessary for the purposes described in this Policy.

Service providers. Providers supporting cloud infrastructure, secure storage, website hosting, email delivery, security, technical support and professional services, including Microsoft Azure and our approved email provider.
Alliance personnel. Authorized team members who need the information to review a submission, respond to you or administer the relevant relationship.
Professional advisers and program partners. Lawyers, auditors, consultants, insurers, brokers, underwriters, certification professionals or other partners when appropriate to evaluate or provide a service you request and subject to required permissions.
Authorities and protection of rights. Authorities, courts, counterparties or others when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security or the integrity of the Services.
Organizational transactions. Relevant parties and advisers in a financing, reorganization, transfer of assets or similar transaction, subject to appropriate safeguards.
At your direction. Other recipients when you direct us to disclose information or otherwise consent.

Important data boundaries

The Alliance does not sell personal information for money and does not share personal information for cross-context behavioral advertising. Operational data is not sold as an unrelated commercial product.

Certificate files are kept in restricted storage. We do not make certificate files public or attach them to email. If approved AI-supported workflows are used, they may receive only specifically allow-listed business metadata; they are not permitted to receive certificate files or unrestricted application contents, and their output cannot decide recipients, consent, approvals or send policy.

Cookies and tracking technologies

The public website does not currently use advertising cookies or third-party analytics cookies. Hosting and security providers may process standard server logs and use technologies strictly necessary to deliver and protect the Services.

Because we do not currently use tracking for cross-context behavioral advertising, the Services do not respond differently to browser “Do Not Track” signals. Where required, we will honor legally recognized opt-out preference signals for processing to which they apply. If our practices materially change, we will update this Policy and provide any controls required by law.

Retention

We keep personal information only as long as reasonably necessary for its defined purpose, legal and recordkeeping obligations, disputes and enforcement. Current operational defaults include deletion of incomplete certificate uploads after 24 hours; keeping closed applications and inquiries for up to 24 months; keeping pending newsletter consent for up to 30 days; keeping operational telemetry for up to 90 days; and keeping security and audit records for up to 12 months.

Consent, suppression, legal-hold and dispute records may be retained longer where necessary to document compliance, prevent unwanted contact or protect legal rights. At the end of the applicable period, information is deleted, de-identified or securely archived as appropriate.

Security

We use administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration and disclosure. Access is restricted by role, certificate uploads use a short-lived authorized channel and files are held for security scanning before reviewer access.

No Internet transmission or storage system can be guaranteed completely secure, so we cannot promise absolute security. Please do not send certificate files or sensitive personal information through ordinary email or the general contact form.

Your rights and choices

Depending on where you live and subject to applicable exceptions, you may have rights concerning the personal information we hold about you.

request access, confirmation or a portable copy;
request correction or deletion;
object to or request restriction of certain processing;
withdraw consent where processing is based on consent;
opt out of marketing communications; and
appeal a decision or complain to your local data-protection authority.

To submit a request, email privacy@safebuilders.com with the subject “Privacy Request.” We may request information reasonably necessary to verify identity and authority. You may use an authorized agent where permitted by law, and we will not discriminate against you for exercising an applicable privacy right.

Supplemental U.S. state notice

For residents of U.S. states with comprehensive privacy laws, the categories we may collect include identifiers; professional or employment information; application, commercial and inquiry information; Internet or network activity; and communications. We collect these categories from you, your device, your organization, referral sources and public business sources for the purposes described above.

We have not sold these categories or shared them for cross-context behavioral advertising. We do not knowingly collect sensitive personal information through the public website for purposes requiring a right to limit its use. Applicable state law may provide rights to know, access, correct, delete and obtain a portable copy. You may exercise those rights through the contact method above.

International visitors

The Alliance is building an international community and uses providers that may operate in the United States, Israel and other countries. Personal information may therefore be transferred to, stored in and processed in countries with different data-protection laws. Where required, we use appropriate safeguards for international transfers.

Children’s privacy

The Services are business-to-business services and are not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and delete it as appropriate.

Changes to this Policy

We may update this Policy to reflect changes in our Services, practices or legal obligations. We will post the revised version on this page and change the “Last updated” date. If a change is material, we will provide additional notice when required by law.

Contact us

For questions, concerns or privacy requests, contact The Safe Builders Alliance, United States, at privacy@safebuilders.com. Please do not include certificate files or sensitive personal information in ordinary email.

Privacy Policy.