International Council of Religions (ICR)

Document Details

• Organization: International Council of Religions (ICR)
• Official Website: www.icr-int.org
• Effective Date: September 12, 2026
• Last Updated: September 12, 2026
• Applicability: Global website visitors, donors, event attendees, members, and subscribers
• Data Protection Contact: privacy@icreligions.org / dpo@icreligions.org

1. Introduction & Purpose

The International Council of Religions (ICR) is an international non-governmental organization dedicated to fostering interfaith dialogue, cross-cultural peacebuilding, freedom of religion or belief, and global religious cooperation. We are deeply committed to protecting the privacy, dignity, and personal data of our global community, website visitors, delegates, donors, and partners.

This Privacy Policy outlines how ICR collects, uses, stores, shares, and protects personal information obtained through our official website, digital platforms, conference registration portals, newsletters, and associated online services. We process personal data in compliance with international data privacy standards, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and relevant national privacy legislation.

2. Scope of this Policy

This Privacy Policy applies to all personal information collected through:

• Our primary website (www.icreligions.org) and associated subdomains.
• Online event registration, interfaith summits, and webinar portals.
• Donation and philanthropic contribution processing systems.
• Newsletter subscriptions, press releases, and publication download requests.
• Membership applications, volunteer registrations, and working committee portals.

This policy does not cover third-party websites, external platforms, or partner organizations that may be linked from our website.

3. Information We Collect

We collect information directly from you when you interact with our website, as well as automatically through digital technologies.

3.1 Information You Provide Directly

• Contact Information: Full name, prefix/title, email address, mailing address, telephone number, and country of residence.
• Organizational & Religious Affiliation: Organization, academic institution, faith tradition/community, official title, and role within religious bodies (collected on an optional or event-specific basis).
• Event & Summit Registration Data: Dietary requirements, accessibility accommodations, passport/visa details (only for accredited international summit delegates), and session preferences.
• Donations & Financial Information: Payment amount, billing address, and transaction identifiers. Credit/debit card numbers are securely processed by PCI-DSS compliant third-party payment gateways and are never stored on ICR servers.
• Communications & Inquiries: Records of correspondence, feedback, survey responses, and contact form submissions.

3.2 Information Collected Automatically

• Technical Identifiers: IP address, browser type and version, operating system, and language preferences.
• Usage Metrics: Pages viewed, navigation paths, duration of visits, referring URLs, and download history.
• Cookies and Similar Technologies: Essential session cookies, analytical cookies, and preference cookies (see Section 8).

4. Processing of Special Category / Sensitive Personal Data

Given the nature of ICR's interfaith mission, certain interactions may involve the processing of data revealing religious or philosophical beliefs, such as representation in faith-based councils, interfaith dialogues, or working groups.

ICR treats all sensitive data with heightened security and strictly processes such information under one or more of the following lawful bases:

• Explicit Consent: Where you have provided clear, affirmative consent for specific initiatives or publications.
• Legitimate Activities of a Not-for-Profit Body: Processing carried out in the course of legitimate activities by an entity with a religious, philosophical, or peacebuilding aim, with appropriate safeguards and limited solely to members, delegates, or regular contacts (e.g., GDPR Article 9(2)(d)).
• Publicly Disclosed Data: Where you have chosen to manifestly make your affiliation public as an official representative.

5. Purpose and Legal Basis for Processing

• Facilitating interfaith dialogue, summits, and conferences: Contact data, delegate credentials, and event choices. Lawful basis may include performance of contract or legitimate interest.
• Processing voluntary donations and providing tax receipts: Name, billing address, and payment metadata. Lawful basis may include legal obligation or performance of contract.
• Distributing newsletters, statements, and policy briefs: Name, email address, and topic preferences. Lawful basis is consent through opt-in.
• Managing membership and consultative committees: Professional profile, faith affiliation, and contact information. Lawful basis may include legitimate activities of an NGO or consent.
• Website security, fraud prevention, and system maintenance: IP addresses, system logs, and diagnostic telemetry. Lawful basis may include legitimate interests relating to security and reliability.
• Responding to public, media, and academic inquiries: Contact information and message content. Lawful basis may include legitimate interests or consent.

6. Sharing and Disclosure of Information

ICR adheres to a strict principle: We never sell, rent, or trade your personal data to commercial third parties.

We may disclose personal data only in the following limited circumstances:

• Authorized Service Providers: Trusted cloud hosting vendors, email delivery systems, secure payment processors, and event logistics coordinators bound by strict data processing and confidentiality agreements.
• Interfaith Event Collaborators & Co-hosts: Where an international summit is co-organized with partner institutions, delegate lists may be shared strictly for accreditation and safety logistics.
• Legal & Regulatory Compliance: When required by applicable law, court order, or governmental authorities, or to protect the safety and legal rights of our community and the public.

7. International Data Transfers

As a global organization, ICR operates internationally. Personal information collected through our website may be stored and processed in countries outside your country of residence, including jurisdictions that may have different data protection laws.

When transferring personal data internationally, ICR implements robust safeguards to ensure adequate protection, including the European Commission's Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTA), and data processing agreements with certified vendors.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience, ensure system security, and analyze web traffic. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for navigating the site, secure login areas, and donation transactions.
• Functional Cookies: Remember your preferences, such as language selection and display settings.
• Performance & Analytical Cookies: Help us understand how visitors interact with our content, enabling us to improve site navigation and educational resources.

You can manage or disable non-essential cookies at any time via our Cookie Preference Center on the website banner or through your web browser settings.

9. Data Security and Retention

ICR employs technical, administrative, and physical security measures designed to protect personal data from unauthorized access, loss, misuse, alteration, or destruction. These measures include SSL/TLS encryption for all website communications, restricted role-based access control, firewall architectures, and periodic security evaluations.

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal and financial auditing obligations (such as statutory donation record retention), or resolve disputes. When data is no longer required, it is securely deleted or anonymized.

10. Your Data Protection Rights

Depending on your jurisdiction, including the European Economic Area, the United Kingdom, California, Canada, and other regions, you may have the following statutory rights regarding your personal data:

• Right of Access: Request confirmation of whether we process your data and obtain a copy of your personal records.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal information.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data, subject to legal retention duties.
• Right to Restriction of Processing: Request that we temporarily limit the processing of your personal data.
• Right to Data Portability: Receive your personal information in a structured, commonly used, and machine-readable format.
• Right to Object: Object to data processing based on legitimate interests or direct informational outreach.
• Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority.

11. Protection of Minors & Youth Programs

Our website is directed toward a general audience and is not intended for children under the age of 16 without parental or guardian oversight. Where ICR conducts dedicated Youth Interfaith Leadership initiatives, we obtain verifiable parental or guardian consent before collecting or processing any personal information from minors.

12. Changes to this Privacy Policy

ICR may update this Privacy Policy periodically to reflect changes in our institutional practices, emerging technologies, or evolving legal frameworks. Any revisions will be posted on this page with an updated 'Effective Date'. We encourage users to review this policy periodically.