In short: if you are listed in our member directory, the details you chose to publish are visible to anyone. Your email address is never published. We do not use advertising or analytics trackers. You can change or remove your listing at any time, yourself.
Last updated 17 October 2026.
Who we are
The International Association of Clinical Research Translators (IACRT) is a non-profit registered in Texas, United States. We are the controller of the personal data described in this policy.
For any question about this policy or your data, contact info@iacrt.org.
Because we offer membership to people in the European Union and the United Kingdom, we handle their personal data in line with the GDPR and UK GDPR alongside applicable US law.
What we collect, and why
Member directory listings
When you submit a listing we collect your name, email address, membership category, language pairs, region, roles or services, specialisation, website or profile link, and a short biography.
We use this to review your submission, publish your listing, and contact you about it.
What is published: your name, membership category, roles, language pairs, region, specialisation, biography and website link. These are visible to anyone on the internet and may be indexed by search engines.
What is not published: your email address. It is visible only to IACRT administrators, and is used to confirm your listing and to send you a link if you ask to edit it.
Messages you send us
If you use our contact form we collect your name, email address, chosen topic and message, so that we can reply. Messages are stored in our admin area and may also be forwarded to an IACRT email address.
Administrator accounts
For the small number of people who administer this site we store a name, username and a cryptographic hash of their password. We never store administrator passwords in readable form.
Technical data
Our web server records standard access logs, which include IP addresses, for security and troubleshooting. We also count requests per IP address temporarily, in memory, to limit spam and abuse of our forms. We set one cookie, described under Cookies below.
Our legal bases
- Consent — for publishing your directory listing. You give it when you submit the form, and you can withdraw it at any time by removing your listing or asking us to.
- Legitimate interests — for administering membership, reviewing submissions, keeping the site secure, and preventing spam.
- Taking steps at your request — for replying to enquiries you send us.
How long we keep it
- Published listings — until you remove them, ask us to remove them, or your membership ends.
- Submissions we decline — kept so we can explain the decision and recognise duplicate submissions; removed on request.
- Contact messages — kept while the matter is open and for our records afterwards; removed on request.
- Edit links — expire after 24 hours and can be used once. We store only a one-way hash of the link, never the link itself.
- Server access logs — kept short-term for security purposes.
Who else is involved
We do not sell personal data and we do not share it for advertising. A small number of providers process data on our behalf:
- Hosting. Our site and database run on a server hosted in Germany by Hetzner Online GmbH, inside the EU.
- Email. When outgoing email is enabled, our email provider processes the messages we send you.
Everything else the site needs — fonts, images, stylesheets and scripts — is served from this domain, so loading a page does not disclose your IP address to any third party.
We do not use Google Analytics or any other analytics or advertising tracker.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can withdraw consent for publication at any time.
The quickest route for a listed member is to request an edit link and change your own details. For anything else, email info@iacrt.org and we will respond within one month.
If you are in the EU or UK and believe we have handled your data improperly, you may complain to your national data protection authority.
Cookies
We set a single cookie, iacrt.sid, which keeps an administrator signed in. It is strictly necessary for that purpose, lasts up to eight hours, and is not used to track you. Ordinary visitors browsing the site are not given a tracking cookie, and we use no advertising or analytics cookies.
How we protect your data
The site is served over HTTPS. Administrator passwords are hashed with bcrypt. Edit links are random, single-use, time-limited and stored only as hashes. Administrative access is limited to named IACRT accounts, and our forms are rate-limited against abuse.
No system is perfectly secure. Please do not send sensitive personal information, such as health or identity document details, through our forms.
Children
This site is intended for working language professionals and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If we change how we handle personal data we will update this page and its revision date. Significant changes affecting listed members will be notified by email where we have an address.