Privacy Policy

Information we collect

Information you provide

Depending on how you interact with MWI, we may collect information such as:

• Your name and contact information, including email address, telephone number, and mailing address;
• Professional or organizational information, such as employer, job title, department, or tenure;
• Demographic information that you choose or are asked to provide, such as age range, gender, race or ethnicity, or general location;
• Account, registration, scheduling, payment, transaction, and service-related information;
• Communications, inquiries, form responses, documents, and other content you submit to us; and
• Any other information you choose to provide in connection with our services.

Information collected automatically

When you visit our website or use our online services, we may automatically collect limited technical and usage information, including your Internet Protocol address, browser and device type, operating system, referring pages, pages viewed, approximate location derived from an IP address, and dates and times of access.

Information from other sources

We may receive personal information from clients, business partners, service providers, public sources, or other third parties and combine it with information we already hold. We handle that information in accordance with this policy, applicable law, and any additional notice provided when the information is collected. MWI is not responsible for the accuracy of information supplied by third parties.

Sensitive personal information

Some MWI services or research and reporting activities may involve information that is considered sensitive under applicable law. Depending on the context, this may include racial or ethnic origin, health information, information about criminal allegations or convictions, or other information afforded heightened protection by law.

We collect and process sensitive personal information only when it is reasonably necessary for a disclosed purpose and when permitted by applicable law. Where the law requires consent, we will request it separately and clearly at or before the time of collection. When processing relies on consent, you may withdraw that consent by contacting us, subject to applicable legal and contractual limitations.

Depending on the circumstances and applicable law, sensitive information may also be processed when necessary to carry out obligations or exercise rights in employment or social-protection law; protect vital interests; establish, exercise, or defend legal claims; serve a substantial public interest; provide health or social care under an appropriate legal basis; or process information that the individual has manifestly made public.

Criminal-conviction and offense information

We process personal information relating to criminal convictions, alleged offenses, proceedings, outcomes, or related security measures only when authorized by applicable law and when appropriate safeguards are in place.

How we use personal information

We may use personal information for the following purposes:

• Service delivery: To respond to requests and schedule, administer, facilitate, and provide requested services.
• Communication: To respond to inquiries and send transactional messages, service notices, administrative updates, newsletters, or other communications permitted by law.
• Account and registration management: To create, verify, secure, maintain, and support registrations or accounts.
• Client and customer support: To answer questions, troubleshoot issues, resolve complaints, and provide assistance.
• Service improvement: To understand how our services are used, evaluate effectiveness, improve accessibility and user experience, develop offerings, and maintain performance.
• Contracts and business operations: To administer agreements, manage client and partner relationships, process payments, invoice, maintain records, and carry out ordinary business operations.
• Security and fraud prevention: To protect MWI, our clients, users, systems, and services from fraud, misuse, unauthorized access, and other security risks.
• Legal compliance: To comply with applicable law, valid legal process, regulatory requirements, tax and accounting obligations, or lawful requests from public authorities.
• Aggregated or de-identified information: To prepare research, statistical, operational, or business reports that do not reasonably identify an individual.
• Other compatible purposes: To carry out another purpose disclosed when information is collected or otherwise permitted by applicable law.

Where required, MWI relies on an appropriate legal basis for processing, which may include performance of a contract, compliance with a legal obligation, consent, protection of vital interests, performance of a task in the public interest, or MWI’s or another party’s legitimate interests when those interests are not overridden by an individual’s rights.

How we disclose personal information

MWI does not sell personal information. We may disclose personal information only as described in this policy, as disclosed when the information is collected, at your direction or with your consent, or as otherwise permitted or required by law. Recipients may include:

• Service providers: Vendors that support functions such as website hosting, communications, scheduling, payment processing, information technology, security, analytics, and customer relationship management. They receive only the information reasonably necessary to perform services for MWI and are expected to protect it.
• Clients, authorized partners, and affiliates: Organizations involved in delivering or administering a service, program, event, or contractual engagement, when disclosure is consistent with the applicable terms and law.
• Professional advisers: Attorneys, accountants, auditors, insurers, and other advisers when reasonably necessary for their services and subject to appropriate duties of confidentiality.
• Legal and public authorities: Courts, regulators, law-enforcement agencies, or other authorities when disclosure is required by law, valid legal process, or a lawful request, or when reasonably necessary to protect rights, safety, or security.
• Parties to a business transaction: Potential or actual purchasers, successors, advisers, or other participants in a merger, financing, reorganization, sale, or transfer of all or part of MWI’s operations, subject to appropriate safeguards.
• Other parties you authorize: A third party when you direct us to disclose information or provide consent for a stated purpose.

Information held by a third party may be governed by that third party’s own privacy policy and practices. MWI may also use and disclose aggregated or de-identified information that does not reasonably identify an individual.

Location and international transfer of information

MWI is based in the United States, and our services are hosted in the United States. Personal information may therefore be stored and processed in the United States or in another country where MWI or its service providers operate. Privacy and data-protection laws in those countries may differ from those in your country of residence.

When applicable law requires safeguards for a transfer of personal information across borders, MWI will use an approved transfer mechanism or another legally recognized safeguard. Depending on the circumstances, these measures may include an adequacy decision, approved standard contractual clauses, a valid data-privacy framework certification, or contractual and technical protections appropriate to the transfer.

To ask about an international transfer or the safeguards that apply, contact dataprotection@mwi.org.

Your privacy rights and choices

Depending on where you live, the nature of your relationship with MWI, and applicable law, you may have some or all of the following rights:

Submitting a request

To exercise a privacy right, email dataprotection@mwi.org. Please describe your request and the information or interaction involved. We may need to verify your identity and authority before acting on a request. Rights are subject to exceptions and limitations under applicable law.

If MWI processes information solely on behalf of a client, we may direct your request to that client or assist the client in responding. You may also have the right to lodge a complaint with the data-protection or privacy authority responsible for your location.

Data security, retention, and disposal

Security

MWI uses reasonable and appropriate administrative, technical, physical, and electronic safeguards designed to protect personal information from accidental or unlawful loss, misuse, unauthorized access, disclosure, alteration, or destruction. No transmission or storage system can be guaranteed to be completely secure.

If MWI becomes aware of a security incident involving personal information, we will investigate, contain, and address the incident and provide notice to affected individuals or authorities when required by applicable law.

Retention and disposal

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to deliver services, maintain business and transaction records, satisfy contractual obligations, resolve disputes, enforce agreements, and comply with legal, accounting, and reporting requirements.

Retention periods may vary based on the amount, nature, and sensitivity of the information; the purposes of processing; the potential risk of harm from unauthorized use or disclosure; and applicable requirements. At the end of an applicable retention period, we securely delete, destroy, or de-identify the information in accordance with applicable law and our procedures.

Cookies and similar technologies

Our website may use cookies, pixels, and similar technologies to operate the site, remember preferences, understand usage, improve performance, and support security. Cookies are small data files stored on or accessed through your browser or device.

Where required by law, we will request consent before using non-essential cookies. You can manage cookies through any controls we make available and through your browser or device settings. Blocking certain cookies may affect the functionality or availability of parts of the website.

Some website features may use third-party technologies. Information collected by those third parties is subject to their privacy policies and practices. We encourage you to review those policies.

Children’s privacy

MWI’s websites and services are not directed to children under 16, and we do not knowingly collect personal information online from children under 16 without authorization from a parent or legal guardian when such authorization is required. If we learn that we collected personal information from a child in a manner not permitted by law, we will take reasonable steps to delete it.

A parent or guardian who believes a child has provided personal information to MWI may contact mailbox@mwi.org.

Updates to this policy

We may update this Privacy Policy to reflect changes in our practices, services, technology, or legal obligations. When we make changes, we will revise the “Last updated” date at the top of the policy. If required by law, we will provide additional notice or request consent before a material change takes effect.