Privacy Policy

Effective Date: 21^st September 2026

I. Name and address of the data controller and contact details of the data protection officer

The controller responsible for the processing of personal data through this website is the legal entity identified in the footer of the relevant website.

Depending on the website you are using, the controller may be one of the following entities:

The Channel Company EMEA Ltd
180 Borough High Street
London SE1 1LB
United Kingdom

The Channel Company, Inc.
117 Kendrick Street, Suite 300
Needham, MA 02494
United States of America
Tel: +1 508 416 1175

bChannels Pty Ltd
The Commons Mezzanine
388 George Street
Sydney NSW 2000
Australia

The applicable controller is the entity identified in the footer, legal notice, Impressum, contact page, registration page or other relevant documentation for the website or service you are using.

We may share personal data within The Channel Company group of companies where this is necessary for the purposes described in this Privacy Notice and where permitted by applicable law.

You can contact our Data Protection Officer, Avita Delerme, by email at: compliance@thechannelcompany.com

or by post at:

Data Protection Office
The Channel Company
117 Kendrick Street, Suite 300
Needham, MA 02494
United States of America

Where required by applicable law, we also maintain appropriate local contact or representative arrangements for data protection matters.

Our current representative for data subject rights requests is Avita Delerme. She can be contacted at compliance@thechannelcompany.com.

Scope of applicability

This Privacy Notice applies to the processing of personal data of individuals worldwide who register for our events, webinars, content downloads, newsletters, site memberships, or who otherwise interact with our websites and digital services.

Where individuals are located in the European Union or European Economic Area, processing is carried out in accordance with the General Data Protection Regulation, the German Federal Data Protection Act where applicable, and the Telecommunications Digital Services Data Protection Act where applicable.

Where individuals are located in the United Kingdom, processing is carried out in accordance with the UK GDPR and the Data Protection Act 2018.

Where individuals are located in other jurisdictions, we comply with applicable local data protection and privacy laws, including, where relevant, U.S. state privacy laws and data protection laws in Australia, Singapore, and other Asia-Pacific jurisdictions.

II. Provision of the website and creation of log files

1. Description and Scope of Data Processing

Each time you visit our website, our systems automatically collect data and information from the computer system of the accessing device.

The following data may be collected:

1. Browser type and version used
2. Operating system of the user
3. IP address of the user
4. Date and time of access
5. Websites or pages accessed through our website

This data may also be stored in log files. This data is not stored together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

Our legitimate interest is to ensure the functionality, security, stability and technical performance of our websites.

3. Purpose of Data Processing

Temporary storage of the IP address is necessary to deliver the website to the user’s device.

Storage in log files is carried out to:

• ensure website functionality;
• maintain website security;
• prevent misuse, fraud, malicious bot activity, automated attacks or spam responses;
• optimise the technical performance of the website;
• protect our information technology systems.

Log file data is not used for marketing purposes.

4. Duration of Storage

Data collected for the provision of the website is deleted when the relevant session ends.

Log file data is generally deleted after seven days at the latest, unless longer storage is required for security, investigation or legal reasons. Where storage beyond this period is necessary, IP addresses are deleted or anonymised so that the accessing device can no longer be identified.

5. Right to Object

Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims.

III. Use of Google Tag Manager, Google Analytics, Google Ads and Customer Match

1. Google Tag Manager

We use Google Tag Manager, a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

Google Tag Manager allows us to manage and deploy website tags and scripts through a single interface.

Google Tag Manager itself does not create user profiles or set analytics or marketing cookies. However, when Google Tag Manager is loaded, technical information such as IP address, browser type, device information and interactions with our website may be transmitted to Google.

For users in jurisdictions where consent is required, including Germany and the European Union, Google Tag Manager and any Google tracking scripts managed through it are loaded only after the user has provided consent through our consent management tool, unless a specific script is strictly necessary for the operation of the website.

The legal basis for the use of Google Tag Manager is:

• Article 6(1)(f) GDPR where the use is strictly necessary for technical administration and does not involve analytics or marketing tracking; and
• Article 6(1)(a) GDPR and Section 25(1) TDDDG where Google Tag Manager is used to deploy analytics, advertising or other non-essential technologies.

Google Tag Manager is configured to respect user consent choices, including Google Consent Mode v2 where applicable.

For more information on Google’s data handling practices, please visit:

https://policies.google.com/privacy
https://business.safety.google/privacy/

2. Google Analytics

Where enabled on our websites, we use Google Analytics to understand how visitors interact with our websites, measure website performance, improve content and analyse audience engagement.

Google Analytics may process information such as:

• IP address;
• device and browser information;
• pages visited;
• referral source;
• session duration;
• interactions with website content;
• approximate location information.

Google Analytics is used only where the user has provided consent through our consent management tool, unless a specific analytics function is strictly necessary and legally permitted without consent.

The legal basis for the use of Google Analytics is Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Users may withdraw consent at any time through the Cookie Preferences tool available on the website.

3. Google Ads and Conversion Tracking

We use Google Ads to deliver advertising, measure campaign performance, track conversions and improve the relevance of our marketing campaigns.

Google Ads may process information such as:

• IP address;
• browser and device information;
• website interactions;
• advertising identifiers;
• conversion events;
• cookie or similar technology identifiers.

Google Ads and related advertising technologies are used only where the user has provided consent through our consent management tool, where such consent is required by applicable law.

The legal basis for the use of Google Ads and conversion tracking is Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Users may withdraw consent at any time through the Cookie Preferences tool.

4. Google Ads Customer Match

We may use Google Ads Customer Match to deliver advertising to users who have registered for our events, webinars, newsletters, content downloads or other services.

Customer Match may involve sharing certain personal data with Google, such as:

1. First name
2. Surname
3. Business email address

This data is hashed using SHA-256 during upload and transmission. However, hashed data remains personal data under applicable data protection laws where it can be linked to an individual.

Customer Match is used only where we have obtained explicit, granular consent from the user to share their data with Google for targeted advertising purposes.

The legal basis for Customer Match is Article 6(1)(a) GDPR or equivalent consent requirements under applicable local law.

Google acts as an independent controller for the personal data it receives for Customer Match and processes such data in accordance with its own privacy policies.

Users may withdraw their consent at any time by contacting our Data Protection Officer or by using available privacy choices tools.

For users in the United States, sharing personal information with Google for targeted advertising may constitute “sharing” for cross-context behavioural advertising under applicable U.S. state privacy laws. Users may opt out by using the “Do Not Sell or Share My Personal Information” link available on our websites.

IV. Cookies and Similar Technologies

1. Description and Scope of Data Processing

Our website uses cookies and similar technologies.

Cookies are small text files stored on your device by your browser. They allow websites to recognise your browser or device and support website functionality, analytics, personalisation and advertising.

When you visit our website, you are informed about the use of cookies and, where required, your consent is requested through our consent management tool.

2. Legal Basis for Cookies and Similar Technologies

The use of technically necessary cookies and similar technologies is based on Section 25(2) No. 2 TDDDG and Article 6(1)(f) GDPR.

The use of analytics, advertising, marketing or other non-essential cookies and similar technologies is based on your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.

3. Purpose of Cookies

We use cookies and similar technologies for the following purposes:

• enabling website functionality;
• maintaining security;
• remembering cookie preferences;
• managing user sessions;
• measuring website performance;
• analysing website usage;
• delivering advertising;
• measuring campaign performance;
• personalising content or advertising where permitted.

4. Cookie Preferences and Withdrawal of Consent

You can manage your cookie preferences at any time using the Cookie Preferences tool available on our website.

You can also disable or restrict cookies through your browser settings. If you disable certain cookies, some features of the website may not function properly.

5. Third-Party Technologies

We use third-party technologies to support analytics, marketing, advertising and campaign measurement.

Depending on the website and your consent choices, these technologies may include:

• Google Tag Manager;
• Google Analytics;
• Google Ads;
• Google Ads Customer Match;
• Adobe Analytics;
• Omeda;
• other analytics, advertising, marketing or campaign measurement tools listed in our consent management tool.

Non-essential third-party technologies are activated only where consent has been obtained, where required by applicable law.

6. Google Consent Mode v2

Where Google services are used, we may use Google Consent Mode v2 to communicate users’ consent choices to Google.

Consent Mode v2 allows us to signal whether a user has consented to:

• analytics storage;
• advertising storage;
• user data for advertising;
• personalised advertising.

For users in Germany and the European Union, Google tags are blocked until consent is provided, unless a tag is strictly necessary and legally permitted without consent.

7. Consent Management Tool

This website uses a consent management tool provided by Didomi SAS, 137 Boulevard Sébastopol, 75002 Paris, France.

The consent management tool enables users to give, refuse or withdraw consent for certain data processing activities.

Didomi may process the following data:

• IP address;
• unique consent ID;
• consent choices;
• device and browser information;
• date and time of consent;
• consent text shown to the user.

The legal basis for the use of the consent management tool is Article 6(1)(f) GDPR, based on our legitimate interest in managing consent in a transparent and legally compliant manner.

Where we process consent logs to demonstrate that consent was obtained, the legal basis is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR.

Further information on Didomi’s privacy practices is available at:

https://www.didomi.io/privacy-policy

V. Adobe Analytics

Where enabled on our websites, we use Adobe Analytics to analyse website usage, measure website performance and improve our digital services.

The service provider for users in the EU or EEA is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.

Adobe Analytics may process:

• IP address;
• browser and device information;
• pages visited;
• referral source;
• session information;
• interaction data.

Adobe Analytics is used only where the user has provided consent through our consent management tool, where such consent is required by applicable law.

The legal basis for the use of Adobe Analytics is Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Adobe Inc., 345 Park Avenue, San Jose, CA 95110-2704, United States, may process data in the United States.

Adobe Inc. is certified under the EU-U.S. Data Privacy Framework. Where applicable, transfers may also be protected by standard contractual clauses or other lawful transfer mechanisms.

Although the United States is considered a third country under the GDPR, data transfers to certified recipients may be covered by an adequacy decision under the EU-U.S. Data Privacy Framework. For non-certified entities, data protection levels may differ from those within the EU or EEA.

Further information is available at:

https://www.adobe.com/privacy.html
https://www.adobe.com/privacy/eudatatransfers.html

VI. Event Registration, Webinars and Content Downloads

1. Description and Scope of Data Processing

Our websites may allow users to register for events, webinars, content downloads, whitepapers or similar services.

When registering, the data entered into the relevant form is transmitted to us and stored.

This may include:

1. First name
2. Surname
3. Business email address
4. Company name
5. Job title
6. Job function
7. Phone number
8. Country
9. Event or content selection

The following technical data may also be collected:

1. IP address
2. Date and time of registration

2. Legal Basis for Data Processing

The legal basis for processing data required to provide an event, webinar or content download is Article 6(1)(b) GDPR.

Where we process technical data for security and fraud prevention, the legal basis is Article 6(1)(f) GDPR.

Where you opt in to receive newsletters or agree to sponsor data sharing, the legal basis is Article 6(1)(a) GDPR.

3. Purpose of Data Processing

We process registration data to:

• manage event, webinar or content registration;
• provide access to requested content;
• communicate service-related information;
• manage attendance;
• prevent misuse, spam or automated attacks;
• document user consent where required.

Consent for newsletters or sponsor data sharing is not a condition for participation in an event, webinar or content download.

Where an event, webinar or content download is sponsored by or produced in partnership with a third party, you may be given the option to consent to your registration data being shared with the relevant sponsor.

4. Duration of Storage

Registration data is retained only for as long as necessary for the relevant event, webinar, content download, legal obligation or consent-based purpose.

Technical data collected during registration is usually deleted after seven days unless longer retention is required for security, legal or operational reasons.

VII. Newsletters and Site Membership

1. Description and Scope of Data Processing

Our websites may allow users to subscribe to newsletters or register for site membership.

When registering for a newsletter or site membership, depending on the information actually requested and provided, we may process:

1. Business email address
2. First name
3. Surname
4. Company name
5. Country

Only the business email address should be mandatory for newsletter subscription unless additional information is strictly required for the specific service.

We may request additional information, such as job title, company revenue or industry vertical, to provide more relevant content and communications. Such additional information is voluntary unless clearly stated otherwise.

2. Legal Basis for Data Processing

The legal basis for sending newsletters is the user’s consent pursuant to Article 6(1)(a) GDPR or equivalent consent requirements under applicable local law.

Editorial newsletters and marketing communications are sent only where the user has actively opted in.

We do not rely on implied consent or pre-ticked boxes for newsletter subscriptions.

3. Purpose of Data Processing

We use newsletter and membership data to:

• deliver the requested newsletter;
• provide membership access;
• personalise relevant content where permitted;
• prevent misuse of the service;
• maintain subscription records;
• document consent.

4. Withdrawal of Consent and Unsubscribe

You may withdraw your consent and unsubscribe at any time by using the unsubscribe link included in each newsletter or by contacting our Data Protection Officer.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Use of Omeda

We use Omeda Holdings, LLC ("Omeda"), located at 125 Schelter Road, Chicago, Illinois 60069, USA, as our audience management, marketing automation, newsletter distribution and subscriber relationship management platform. Omeda acts as a service provider and processor on our behalf in connection with the delivery of our services and marketing communications.

Through Omeda, we may process personal information including contact details, business information, subscription and communication preferences, newsletter registration information, event participation information, website interaction data, engagement metrics, audience segmentation data, and other information that helps us manage subscriptions, deliver content, administer marketing campaigns, analyse audience engagement, and improve our services.

Omeda enables us to maintain audience and subscriber records, manage newsletter subscriptions and communications, administer preference management, analyse engagement with our communications and content, and develop audience insights that help us provide relevant content, products, services and events. Omeda also supports web interaction tracking, audience analytics, reporting and marketing automation activities.

For additional information regarding Omeda's privacy practices, please refer to the Omeda Privacy Policy.

VIII. Contact Forms and Contact by Email

1. Description and Scope of Data Processing

Our websites may contain contact forms or provide email addresses for electronic contact.

Depending on the form and the information provided, we may process:

1. First name
2. Surname
3. Business email address
4. Company name
5. Job title
6. Phone number
7. Country
8. Type of organisation
9. Message content

Not all fields are required on every form. All other information is voluntary unless clearly marked as mandatory.

The following technical data may also be collected:

1. IP address
2. Date and time of submission

2. Legal Basis for Data Processing

The legal basis for processing contact data is Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries.

Where the enquiry relates to a contract or pre-contractual request, the legal basis is Article 6(1)(b) GDPR.

Where consent is requested for additional processing, the legal basis is Article 6(1)(a) GDPR.

3. Purpose of Data Processing

We process contact data to:

• respond to enquiries;
• manage business communications;
• process requests;
• prevent misuse of contact forms;
• ensure system security.

4. Duration of Storage

Contact form data is deleted when the relevant matter has been conclusively resolved, unless further retention is required for legal, contractual or legitimate business reasons.

Technical data collected during submission is generally deleted after seven days unless longer retention is required for security reasons.

5. Right to Object or Withdraw Consent

Where processing is based on legitimate interest, you may object at any time.

Where processing is based on consent, you may withdraw consent at any time.

You may contact us at: compliance@thechannelcompany.com

IX. Recipients of Data and Data Transfers

1. Internal Recipients

Within The Channel Company group, access to personal data is granted only to teams and personnel who need the data to fulfil contractual, legal, technical, operational, marketing or business purposes described in this Privacy Notice.

This may include legally separate affiliated companies within The Channel Company group where such sharing is permitted by applicable law.

2. Service Providers

We use service providers to process personal data on our behalf pursuant to Article 28 GDPR or equivalent provisions under applicable law.

Service providers may include:

• CRM providers;
• marketing automation providers;
• analytics providers;
• customer management systems;
• content management systems;
• event management platforms;
• hosting providers;
• advertising platforms;
• campaign measurement providers.

We enter into appropriate data processing agreements with service providers where required.

3. Joint Responsibility with The Channel Company, Inc.

Where The Channel Company EMEA Ltd and The Channel Company, Inc. jointly determine the purposes and means of certain processing activities, they process personal data under joint responsibility pursuant to Article 26 GDPR.

The essential elements of any applicable joint controller arrangement will be made available to data subjects upon request where required by law.

Requests relating to the joint controller arrangement, including requests for further information regarding the allocation of responsibilities between the joint controllers, may be submitted to compliance@thechannelcompany.com.

4. Subprocessors and Service Providers

We may use the following service providers to process personal data:

5. International Data Transfers

Personal data may be processed or accessed in countries outside your country of residence, including outside the European Economic Area and the United Kingdom.

Where personal data is transferred outside the EEA, UK or another jurisdiction with comparable data protection laws, we implement appropriate safeguards in accordance with applicable law.

These safeguards may include:

• adequacy decisions;
• the EU-U.S. Data Privacy Framework;
• the UK Extension to the EU-U.S. Data Privacy Framework;
• standard contractual clauses;
• transfer impact assessments;
• other lawful transfer mechanisms.

For U.S.-based recipients certified under the EU-U.S. Data Privacy Framework, transfers may rely on the relevant adequacy decision.

For non-certified recipients, transfers may be protected by standard contractual clauses and supplementary measures where required.

Details of the applicable safeguards are available upon request.

X. Sharing of Data with Event Sponsors and Partners

Where you register for an event, webinar or content download that is sponsored by or produced in partnership with a third party, and you have provided explicit consent at the point of registration, we may share certain personal data with the relevant sponsor.

The data shared may include:

1. Name
2. Business email address
3. Company name
4. Job title
5. Job function
6. Country
7. Phone number

Sponsors receive this data as independent controllers and process it in accordance with their own privacy policies.

The identity of the sponsor and a link to the sponsor’s privacy policy will be made available at the point of registration.

The legal basis for sharing data with sponsors is consent pursuant to Article 6(1)(a) GDPR or equivalent consent requirements under applicable local law.

You may withdraw consent at any time by contacting our Data Protection Officer. Withdrawal does not affect data already shared with a sponsor before withdrawal. To exercise rights in respect of data already held by a sponsor, you should contact the sponsor directly.

Where an event, webinar or content download is not sponsored, or where you do not provide consent, your registration data will not be shared with sponsors for their own marketing purposes.

XI. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Notice.

Registration data is deleted or anonymised once the relevant purpose has been fulfilled, unless statutory retention obligations, contractual requirements, legitimate business purposes or valid consent justify further storage.

XII. Rights of the Data Subject

If the GDPR or equivalent data protection laws apply, you may have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object;
• right to withdraw consent;
• right to lodge a complaint with a supervisory authority.

If processing is based on consent, you may withdraw consent at any time with effect for the future.

If processing is based on Article 6(1)(f) GDPR, you may object to processing in accordance with Article 21 GDPR.

To exercise your rights, please contact:

compliance@thechannelcompany.com

You also have the right to lodge a complaint with a competent data protection supervisory authority.

XIII. Additional Information for Users in Certain Jurisdictions

1. Australia

If you are located in Australia, we handle your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

You may request access to, or correction of, personal information we hold about you.

If we collect personal information about you from a third party, we will take reasonable steps to notify you where required.

We will only use or disclose personal information for direct marketing where permitted by law. You may opt out of direct marketing at any time.

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner at: www.oaic.gov.au

2. Germany

If you are located in Germany, your personal data is processed in accordance with the GDPR, the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and, where applicable, the Telecommunications Digital Services Data Protection Act (TDDDG).

Consent for newsletters, analytics, advertising cookies, Google Ads Customer Match and sponsor data sharing is obtained through explicit opt-in where required.

Consent is not a condition for participation in events, webinars or content downloads unless the processing is strictly necessary to provide the requested service.

You may lodge a complaint with your competent German data protection supervisory authority.

3. Singapore

If you are located in Singapore, we process your personal data in accordance with the Personal Data Protection Act 2012 (PDPA).

You may withdraw consent, request access to personal data, and request correction of personal data in accordance with applicable law.

For unresolved concerns, you may contact the Personal Data Protection Commission at:

www.pdpc.gov.sg

4. United Kingdom

If you are located in the United Kingdom, your personal data is processed in accordance with the UK GDPR and the Data Protection Act 2018.

You may lodge a complaint with the Information Commissioner’s Office at: www.ico.org.uk

5. United States

If you are located in the United States, the following additional information applies.

Categories of Personal Information Collected

We may collect:

• identifiers, such as name, email address, company name and IP address;
• internet or electronic network activity information, such as browsing history and interactions with our websites;
• professional or employment-related information, such as job title, job function and company information;
• commercial information, such as event registrations, subscriptions or content downloads; and
• inferences used to provide relevant content or advertising where permitted.

Sharing of Personal Information for Targeted Advertising

We may share certain personal information with advertising partners, including Google, for targeted advertising.

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), this may constitute “sharing” of personal information for cross-context behavioural advertising. Similar rights may apply under other U.S. state privacy laws.

Right to Opt Out

If you are a resident of California or another U.S. state with an applicable privacy law, you may have the right to opt out of the sale or sharing of your personal information.

You may exercise this right by:

1. Clicking the “Do Not Sell or Share My Personal Information” link on our website;
2. Adjusting your Cookie Preferences; or
3. Contacting our Data Protection Officer.

We honour opt-out preference signals, including Global Privacy Control (GPC), where required by applicable law.

We will process opt-out requests within the timeframe required by applicable law.

Additional Rights

Depending on your state of residence, you may also have the right to request access to, correction of, deletion of, or portability of your personal information.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

6. Other Jurisdictions

For users in other jurisdictions, the rights and protections described in this Privacy Notice apply to the extent required by applicable local law.

If your local law provides greater protections than those described in this Privacy Notice, we will comply with those requirements.

To exercise any rights available under applicable law, please contact our Data Protection Officer.

XIV. Automated Decision-Making and Profiling

Personal data collected through event registration, webinar registration, content downloads, newsletter registration or site membership is not used for automated decision-making that produces legal effects or similarly significant effects within the meaning of Article 22 GDPR or equivalent provisions under applicable law.

Where we use analytics, segmentation or engagement scoring to improve content, communications or campaign relevance, such processing is carried out only where permitted by applicable law and, where required, based on consent.

XV. Changes to This Privacy Notice

This Privacy Notice is effective as of 21st September 2026.

We may update this Privacy Notice from time to time due to changes in our websites, services, technologies, legal requirements or regulatory guidance.

When we update this Privacy Notice, we will update the effective date above.