Privacy Policy

This Privacy Policy describes how THE BOARD (“we”, “us”, “our”, or the “Firm”) collects, uses, stores, and discloses personal information when you visit members.theboard.consulting (the “Site”), sign in to your member account, or engage with our paid services.

By signing in or otherwise using the Site, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, please do not use the Site or submit any information to us.

THE BOARD is the data controller responsible for the personal information collected through this Site. Our principal place of operation is Dubai, United Arab Emirates.

For any privacy-related queries, contact us at hello@theboard.consulting.

We collect the following categories of personal information, depending on how you interact with the Site:

From your member profile

• ·Email address (your sign-in identity)
• ·Full name
• ·Phone number
• ·Company name
• ·An avatar image you choose to upload

From your sign-in sessions

• ·Device type (desktop, mobile, or tablet), browser, and operating system
• ·Approximate geographic location (country, region, and city) derived from your IP address at the time of the request
• ·A salted, irreversible hash of your IP address used to recognise the same device returning to the Site. The raw IP is not retained.
• ·Aggregated active time on the Site — how long your tab has been open and visible — captured by periodic pings from your browser while you are signed in

From your activity

• ·Records of the Playbooks, courses, or other materials you download or access, including the time of the download and your country at that time
• ·Records of any application, enquiry, or subscription form you complete on the Site

Payment information

When you purchase a Playbook or subscribe to a programme, you provide payment information directly to our payment processor. We do not store your full card number or other sensitive payment credentials; we retain only a reference to the transaction (such as a transaction identifier and the amount paid).

We process personal information for the following purposes:

• ·Operating the Site. Signing you in, granting access to your purchased Playbooks and programmes, generating download links, and keeping your account secure.
• ·Delivering our services. Reviewing applications, preparing for sessions, and producing the deliverables described in our engagement terms.
• ·Member support. Responding to your requests, resolving issues, and keeping you informed about your subscription or grant status.
• ·Improving the Site. Understanding which Playbooks and programmes are used most, where our members are based, and how members navigate the Site, so we can refine the offering.
• ·Security and fraud prevention. Detecting unusual sign-in patterns and protecting member accounts from misuse.
• ·Complying with legal obligations applicable to the Firm.

Where applicable data protection law (including the EU and UK GDPR for visitors from those regions) requires a legal basis, we rely on:

• ·Your consent — when you submit profile fields, upload documents, or subscribe to communications.
• ·Contract performance — when we are preparing to enter, or are performing, a paid engagement with you (Playbook purchases, subscriptions, or advisory mandates).
• ·Legitimate interests — for operating the Site, securing accounts, and maintaining the integrity of our services.
• ·Legal obligation — when we must retain or disclose information to comply with the law.

We do not sell your personal information. We share it only with:

• ·Founding partners and authorised personnel of the Firm who require access to deliver services, review applications, or respond to your enquiry.
• ·Service providers that we engage to operate the Firm — including providers for hosting and infrastructure, database services, transactional email, payment processing, and analytics — under contractual safeguards limiting their use of your information to providing services to us.
• ·Professional advisers such as legal counsel or auditors, on a confidential basis.
• ·Regulators, courts, or law enforcement when required by applicable law.

We do not transfer your information to any third party for their independent marketing purposes.

Because we use cloud services to operate the Site, your information may be processed on servers located outside the United Arab Emirates, including in the European Union, the United States, India, and other jurisdictions where our providers operate. We take reasonable steps to ensure such transfers are subject to appropriate contractual and technical safeguards.

We retain personal information only as long as necessary:

• ·Active member accounts and engagement records are kept for the duration of our relationship and for a reasonable period after, to satisfy legal, accounting, or reporting requirements.
• ·Session and activity records (devices, sign-in metadata, active time, download history) are retained while you are an active member and removed on account closure.
• ·Administrative audit records of actions taken by Firm personnel are retained indefinitely as an immutable record of operational activity. They do not contain raw member data beyond your email.
• ·Payment and tax records are retained as required by applicable accounting and tax laws.

Subject to applicable law, you have the right to ask us to:

• ·Access the personal information we hold about you
• ·Correct inaccurate or incomplete information
• ·Delete information we no longer need
• ·Restrict certain processing
• ·Receive a portable copy of information you provided to us
• ·Object to processing based on our legitimate interests
• ·Withdraw any consent you previously gave, without affecting the lawfulness of processing before withdrawal

Many of these can be done yourself in the Site — visit /dashboard/account to update or remove profile fields. For everything else, contact hello@theboard.consulting. We will respond within a reasonable period and may need to verify your identity before acting on the request.

We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction. IP addresses are stored only in salted-hash form; raw IP addresses are not retained. No method of transmission over the internet is fully secure; we cannot guarantee absolute security but commit to acting promptly on any incident we become aware of.

The Site uses cookies and similar technologies only to the extent required to keep you signed in and to operate essential Site functionality. Authentication cookies are strictly necessary — without them you could not stay signed in across page loads.

We do not run third-party analytics, advertising, or session-recording tools inside the members area. Anonymised usage signals (active time, downloads) are recorded server-side by the Site itself, as described above in “Information we collect.”

The Site and our services are not directed to individuals under the age of 18. We do not knowingly collect information from children. If you believe we have inadvertently collected information from a minor, please contact us so we can delete it.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through the Site or via direct notice to active members where practicable.

Questions about this Privacy Policy or how we handle your information should be sent to hello@theboard.consulting.