This Privacy Policy describes how Dairy Business Association (“we,” “us,” or “our”) collects, uses, discloses, and protects personal information obtained through our website www.dairyforward.com and related online services.

This policy applies to users located in the United States and internationally, including the European Economic Area (EEA) and the United Kingdom, and is intended to comply with applicable U.S. state privacy laws, the EU General Data Protection Regulation (GDPR), and the UK GDPR.

---

1. Information We Collect

We may collect the following categories of personal information:

a. Information You Provide Directly

• Name
• Email address
• Organization or affiliation
• Contact details
• Information submitted through forms (e.g., event registration, membership inquiries, advocacy sign-ups, surveys)

b. Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and device information
• Pages visited and time spent on the site
• Referring URLs

This information is collected using cookies and similar technologies, as described in our Cookie Policy.

c. Information from Third Parties

We may receive limited information from third-party service providers (e.g., event platforms, analytics providers) when you interact with our content or services.

---

2. How We Use Personal Information

We use personal information for the following purposes:

• To operate and maintain our website
• To respond to inquiries and communicate with you
• To manage membership, events, and advocacy initiatives
• To distribute newsletters, updates, or policy communications
• To analyze website usage and improve functionality
• To comply with legal and regulatory obligations

---

3. Legal Bases for Processing (GDPR / UK GDPR)

Where required under GDPR or UK GDPR, we process personal information on the following legal bases:

• Consent – for newsletters, communications, and non-essential cookies
• Legitimate interests – for website operation, analytics, and organizational communications
• Legal obligation – to comply with applicable laws and regulations

You may withdraw consent at any time where processing is based on consent.

---

4. How We Share Information

We do not sell personal information.

We may share personal information with:

• Service providers who perform services on our behalf (e.g., website hosting, analytics, communications tools)
• Event or program partners where relevant and disclosed
• Legal or regulatory authorities when required by law

All service providers are required to protect personal information and use it only for authorized purposes.

---

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, analyze performance, and support communications and outreach efforts.

Where required by law, non-essential cookies are used only with your consent.

For more information about cookies and how to manage your preferences, please review our Cookie Policy.

---

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

---

7. Your Privacy Rights

a. U.S. State Privacy Rights

Depending on your state of residence, you may have the right to:

• Access personal information we hold about you
• Request correction or deletion of personal information
• Opt out of certain data uses, such as targeted communications

We do not discriminate against individuals for exercising privacy rights.

b. GDPR and UK GDPR Rights

If you are located in the EEA or the United Kingdom, you have the right to:

• Access your personal data
• Request correction or erasure
• Restrict or object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

---

8. Data Security

We implement reasonable administrative, technical, and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction.

---

9. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States or other jurisdictions. Where required, appropriate safeguards are used to protect personal information.

---

10. Children’s Privacy

Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children.

---

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised effective date.

---

12. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact:

Dairy Business Association

Email: info@voiceofmilk.com