IFFS Lens Privacy Policy

This policy explains how the International Federation of Fertility Societies (IFFS, we, us) handles personal information when you use IFFS Lens at www.iffslens.com. It also contains our cookie notice.

It applies when you visit IFFS Lens, and when you sign in to IFFS Lens with your IFFS Hub login and use it as an IFFS member.

IFFS Lens is a service for members of IFFS. You join IFFS, and pay for and manage your membership, on the IFFS Hub, IFFS's membership platform. The IFFS Hub's own membership terms, and any privacy information IFFS publishes for the IFFS Hub, also apply to your membership itself. For anything to do with IFFS Lens, this policy applies.

Please read it together with our Terms of Use and Refund and Cancellation Policy.

• IFFS is responsible for your personal information on IFFS Lens.
• Much of IFFS Lens is open to anyone without an account. Only IFFS members can sign in, with their IFFS Hub login, on IFFS's own sign-in page. IFFS Lens never receives your IFFS Hub password. It receives your IFFS Hub contact number, name, email address and membership details from the IFFS Hub. The three questions we ask after your first sign-in are optional.
• IFFS Lens sets two cookies, only to sign you in and keep you signed in. We do not use analytics, advertising or tracking tools of our own.
• Interactive maps can come from Mapbox. If you are in the EU, the EEA, the UK or Switzerland, we load Mapbox maps only if you agree in the consent box. Elsewhere they load by default, and you can switch them off at any time in Cookie settings. With Mapbox maps on, your browser connects to Mapbox, which receives technical information about your device and stores a random identifier and map tiles in your browser. With them off, you see a simpler map that loads nothing from Mapbox. See Maps from Mapbox below.
• Membership and payments are handled on the IFFS Hub, which uses Wild Apricot. IFFS Lens takes no payment and never receives your payment card details.
• IFFS Lens keeps a security log of sign-ins and other security events for 12 months.
• We do not sell your personal information or share it for targeted advertising.
• When you are signed in, your account page lets you download a copy of your IFFS Lens data or delete it. You can also ask to see, correct or delete your information at any time by emailing secretariat@iffsreproduction.org.

IFFS Lens is run by the International Federation of Fertility Societies, which is based in the United States. IFFS is the controller of the personal information described in this policy. This means IFFS decides how and why it is used. IFFS is also the controller for the IFFS Hub, and it is the seller of IFFS memberships.

• Post: International Federation of Fertility Societies, 10685-B Hazelhurst Dr. #26427, Houston, TX 77043, USA
• Email: secretariat@iffsreproduction.org (please put “Privacy” in the subject line)
• Phone: +1 856 423 0047

We have not appointed a data protection officer, because the law does not require one for the processing we carry out. The secretariat handles all privacy questions.

Our service providers, such as ICS Events (secretariat, management and operations) and Heel Turn (design and development), act for us and only on our instructions. IFFS remains responsible for your information.

You can use the public parts of IFFS Lens without an account. These include the home-page story, the atlas, the insights, the declaration and the sources page. When you visit, the following information is collected.

• Hosting logs. Our hosting provider, Vercel, records technical details of each request in its platform logs. These include your IP address, the page or file requested, the date and time, and your browser's user-agent details (the browser and device type it reports). IFFS Lens does not keep request logs of its own. Its security log, described below, records only sign-ins and other security events.
• Your country, for border depiction and for the question about maps. Vercel works out from your IP address which country a request comes from. IFFS Lens uses only that country code, while handling your request, for two things. It chooses how disputed borders are shown on maps: India, China and Japan each have their own depiction, and every other country gets a default one. It also decides whether to ask you before loading Mapbox maps (see Maps from Mapbox below). We do not store your country, and we never ask for your location.
• Maps. When Mapbox maps are on, pages with interactive maps load them from Mapbox. See Maps from Mapbox below.

Fonts, images and the demographic data are served by IFFS Lens itself, so your browser does not contact Google Fonts or other third parties to get them. The one exception is Mapbox maps, when they are on (see Maps from Mapbox below). IFFS Lens has no analytics, advertising pixels, social media widgets, embedded videos, error-tracking tools or session-recording tools.

Pages with interactive maps, such as the home-page story, the declaration page and the atlas, can use maps from Mapbox, Inc. (United States). Whether Mapbox maps load depends on where you are:

• In the EU, the EEA, the UK and Switzerland, we load Mapbox maps only if you agree. When you first visit, a consent box asks whether you accept Mapbox maps. Until you choose, or if you decline, IFFS Lens shows a simpler map that it draws itself and that loads nothing from Mapbox. If you close the consent box without choosing, nothing is recorded and we ask again on your next visit.
• Everywhere else, Mapbox maps load by default. You can switch to the simpler map at any time in Cookie settings.

We work out which applies from the country your request appears to come from (see Information collected when you visit above). If we cannot tell which country that is, we ask first.

When Mapbox maps are on, your browser connects directly to Mapbox to download map styles, map tiles and fonts. With each request, Mapbox receives your IP address, your browser's user-agent details and the web address of IFFS Lens (the referrer). Mapbox's map software also does the following:

• It stores a random identifier in your browser's local storage, replaced every 24 hours, together with the date it last sent usage data.
• It sends Mapbox usage events with that identifier: a once-a-day count, map loads and style loads. Mapbox uses these for billing and to measure use of its service.
• It sends Mapbox performance measurements. These include your browser's full user-agent string, your screen and window size, pixel density, connection type, details of your graphics hardware, and counts of the files loaded.
• It keeps a cache of up to 500 map tiles in your browser so that maps load faster.

IFFS does not receive the identifier or the measurements. Mapbox processes some of this information for us to provide the maps. It also uses some of it for its own purposes, such as billing, security and improving its services, and for that use it acts as an independent controller under the Mapbox privacy policy. Mapbox says it deletes IP addresses within 30 days of receiving them, unless they are needed for an investigation.

You can change your choice at any time, wherever you are, using the Cookie settings link in the site footer, or in the Rendering panel of the atlas. If you switch Mapbox maps off or withdraw your consent, IFFS Lens stops loading Mapbox maps, switches to the simpler map and deletes the identifier and map tiles Mapbox stored in your browser. If Mapbox cannot be reached, or rejects our access key, IFFS Lens shows the simpler map instead.

Who can sign in. Only an IFFS Hub login with an active IFFS membership can sign in to IFFS Lens. A membership waiting for its renewal, or for a change to another membership, counts as active; one that has lapsed, and a new one still waiting for approval or payment, do not. The administrators IFFS names on our servers can also sign in without one. If you sign in for the first time without an active membership, IFFS Lens does not keep an account for you: what that sign-in stored is deleted at once, and you see a page that explains why. What remains is anonymous entries in the security log and the counts of recent sign-in attempts described below.

How your account comes to exist. You sign in to IFFS Lens with your IFFS Hub login, on IFFS's own sign-in page, which Wild Apricot runs. IFFS Lens never receives your IFFS Hub password. Your IFFS Lens account is made the first time you sign in with an active membership, and it is tied to your IFFS Hub contact number, not to your email address. One IFFS Hub login gives one IFFS Lens account. There is no other way to make one.

What we receive from the IFFS Hub. IFFS Lens reads your record on the IFFS Hub every time you sign in, and again at most once a day while you use IFFS Lens (a read that fails is tried again after 10 minutes). It also reads it when an administrator checks your membership. It keeps: your IFFS Hub contact number, name and email address; your membership level (its number and name), its status and whether it is enabled; when we last read it, or tried to; and when we last found your membership active. It asks only for what it uses. It does not keep your phone number, your payment details, any other field of your IFFS Hub record, or the sign-in tokens Wild Apricot hands over while you sign in. You cannot change your name or email address in IFFS Lens: change them on the IFFS Hub, and IFFS Lens follows the next time it reads your record. If your new email address is already used by another IFFS Lens account, we keep your old one and mark it as out of date.

The first time you sign in. Before you can use anything that needs an account, IFFS Lens asks you to accept the Terms of Use and this Privacy Policy, and to confirm that you are 18 or over. We record when you did both, and which versions you accepted.

Optional questions. Then IFFS Lens asks three questions. You can skip any of them:

• what brings you here: clinician; researcher; policy or advocacy; industry; or media or education
• which topics matter to you: below-replacement fertility, assisted reproduction demand, population ageing, adolescent fertility, migration, policy and legislation, market sizing, or access and equity
• where you work (free text)

If you answer them, we also record when. Your answers describe your professional interests. They are kept with your account and do not change what IFFS Lens shows you. Please do not put sensitive information, such as health details, in the free-text field.

Saved maps, comparisons and your watchlist. When you are signed in, you can save maps from the atlas, save comparisons of countries and keep a watchlist of countries. For a saved map, we keep the name you give it, the indicator, the year, the scenario and the country (or the world view), and whether the map is a globe or flat, has a dark or light background, and has 3D extrusion on. For a saved comparison, we keep its name, its two to four countries in the order you chose them, the year, the indicator and the scenario. For your watchlist, we keep the countries. We also record when you saved or added each one, and when you last renamed a saved map. They are kept with your account and used only to show them to you. They stay until you delete them, or until your IFFS Lens data is deleted.

Sessions. Each time you sign in, we create a session record. It holds a session identifier, its expiry time, your IP address and your browser's user-agent details. For IPv6 addresses, we keep only the first part of the address (the /64 network prefix).

Protection against misuse. To limit repeated attempts, IFFS Lens counts recent requests. Attempts to start or finish a sign-in, and to enter an administrator's code, are counted by IP address; completed sign-ins by IFFS Hub contact number; and membership checks you or an administrator ask for, and changes to your saved maps, comparisons and watchlist, by account. These counts are kept in the IFFS Lens database, and our daily clean-up deletes each one once it has not been used for a day.

The security log. IFFS Lens keeps a security log. It records sign-ins, sign-outs and refused sign-ins; requests refused because there were too many; when an account is created, closed, reopened or deleted; changes to an account's name or email address that come from the IFFS Hub, and when the optional answers are saved (but not the answers); membership reads that change the level, find a membership level IFFS Lens has not seen before, or fail, and each membership check you ask for on your account page; sessions you end on your account page, and sessions ended because a membership stopped, an account was closed, or an account has no IFFS Hub login; acceptance of the Terms of Use and this policy; requests for a copy of your data or for its deletion; and what administrators do, including each time they look at the log. Each entry holds the time, what happened and whether it succeeded, the IFFS Lens account and IFFS Hub contact number concerned, the IP address (for IPv6, the /64 network prefix only) and browser user-agent details of the request, the page address without its query, and a few fixed details, such as a reason code or a membership level number. It never holds passwords, sign-in codes or tokens, authenticator, set-up or backup codes, or your answer to “where you work”. We use it to protect accounts, to find and stop misuse, and to see what happened when something goes wrong. Entries are kept for 12 months.

If you are an administrator. IFFS Lens also keeps your authenticator app's secret, encrypted; your backup codes, only in a scrambled form that cannot be turned back into the codes; when and from which IP address you set up the authenticator; and, for 12 hours after you enter a code, that the admin area is open in that browser. These are kept with your IFFS Hub contact number. Deleting your IFFS Lens data does not remove them; the developer removes them when the authenticator is reset.

Emails. IFFS Lens sends no email. You reset your IFFS Hub password, and change your email address, on the IFFS Hub.

IFFS Lens comes with IFFS membership. IFFS Lens has two levels. Standard comes with every active IFFS membership. Premium comes with IFFS Hub All Access Membership. Today, Standard and Premium include the same features. IFFS Lens reads your membership level and status from the IFFS Hub. It takes no payment and sells nothing.

When your membership stops being active, IFFS Lens signs you out within a day of your next visit, and you cannot sign in again until it is active. We keep your account until you ask us to delete it, as How long we keep information explains.

Membership and payments happen on the IFFS Hub. You join IFFS, pay for your membership and renew it on the IFFS Hub, using the membership software Wild Apricot and a payment processor, and not inside IFFS Lens. For your membership, IFFS holds the information you give in your application, such as your name and email address. It also holds records of your membership level, invoices, renewal dates, and payment amounts, dates and status, and of any cancellation or refund request. Our Refund and Cancellation Policy explains where refunds are handled.

You enter your card or other payment details with the payment processor. Wild Apricot does not store card data, and IFFS does not receive your full card number. The payment processor may also use your payment information for its own purposes, such as preventing fraud and meeting its legal duties, under its own privacy notice. Wild Apricot may send membership emails for IFFS, such as renewal reminders and payment notices.

When you contact us. If you email the secretariat, we receive your email address, your message and anything you choose to include. We use these to reply and to deal with your request.

People shown on IFFS Lens. IFFS Lens includes photographs from IFFS events. It also names IFFS officers and others connected with IFFS's work. IFFS publishes these to document its activities. If you appear and have a concern, please contact us.

Where information comes from. Most of the information in this policy comes from you or your browser. Some comes from other sources: your IFFS Hub contact number, name, email address and membership details from the IFFS Hub, and the country worked out from your IP address by Vercel.

What we do not collect. We do not ask for health information or any other special category of personal data. We do not ask for your date of birth or precise location, and we never collect payment card details.

If you are in the EU, EEA or UK, data protection law requires us to have a legal basis for each use of your information. We rely on four:

• consent: you have agreed, and you can withdraw your consent at any time
• contract: we need the information to provide a service you asked for, or to take steps you asked for before a contract
• legitimate interests: our reasonable interests, which we weigh against your rights
• legal obligation: the law requires it

Here is what we use information for and the legal basis for each use.

• Delivering, securing and fixing IFFS Lens (hosting logs): legitimate interests in running a reliable, secure website.
• Choosing the border depiction, and whether to ask before loading Mapbox maps (country lookup): legitimate interests in showing disputed borders in a way that fits local requirements and sensitivities, and in applying the rules on consent of the place you are in.
• Showing interactive maps from Mapbox (and the browser storage and usage data that come with them): in the EU, the EEA, the UK and Switzerland, consent, given in the consent box. Elsewhere, legitimate interests in showing a detailed and readable atlas; you can switch Mapbox maps off in Cookie settings.
• Signing you in with your IFFS Hub login, creating and running your account and keeping you signed in: contract.
• Reading your membership from the IFFS Hub, when you sign in, at most once a day while you use IFFS Lens, and when an administrator checks it, to decide whether you may sign in and at which level: contract.
• Recording your acceptance of the Terms of Use and this policy, and your confirmation that you are 18 or over: contract, and legitimate interests in being able to show what was agreed and in keeping IFFS Lens for adults.
• Keeping session records, counting sign-in attempts, keeping the security log and protecting the admin area with an authenticator app (including IP address and user-agent): legitimate interests in protecting accounts, and in finding and stopping misuse.
• Your optional answers (profession, topics and organisation): legitimate interests in understanding who uses IFFS Lens and planning content and features. These answers are optional, and you can ask us to remove them.
• Keeping your saved maps, saved comparisons and watchlist, and showing them to you when you are signed in: contract.
• Administering accounts: contract and legitimate interests. IFFS administrators can see each account's IFFS Hub contact number, name, email address, level, the membership's status, level and enabled flag on the IFFS Hub, when the account last signed in, when we last read its membership and last found it active, and whether it is closed. In the security log they can also see the IP address and browser details of each entry. They see this so that we can run and support the service. People who look after the database for us can also see the other records described in this policy.
• Selling memberships on the IFFS Hub, and handling billing, renewals and cancellations there: contract. Keeping billing and tax records: legal obligation.
• Membership and service emails (such as renewal reminders and payment notices): contract, and legal obligation where consumer law requires a notice.
• Answering messages, requests and complaints: legitimate interests, and legal obligation for privacy rights requests.
• Handling cancellation and refund requests for memberships, meeting legal duties and dealing with disputes: legal obligation and legitimate interests.
• Publishing photographs and names connected with IFFS's work: legitimate interests in documenting and promoting IFFS's activities.

What you have to give us. To sign in, you need an IFFS Hub login with an active IFFS membership, and IFFS Lens needs your IFFS Hub contact number, name, email address and membership details from the IFFS Hub. You also need to accept the Terms of Use and this Privacy Policy and confirm that you are 18 or over. Without these, we cannot give you an account. To join IFFS, you need to give the details the IFFS Hub asks for, including payment details. Everything else is optional, and you do not need an account to use the public parts of IFFS Lens.

We do not use your information for advertising, and IFFS Lens does not send marketing emails. If we want to send them in future, we will ask for your consent where the law requires it.

IFFS Lens decides automatically, from your membership as the IFFS Hub records it, whether you may sign in and at which level. If you think that record is wrong, write to the secretariat, and a person will look at it. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Cookies are small files that a website saves in your browser. Local storage and browser caches work in a similar way. This section lists what IFFS Lens and Mapbox store on your device.

Strictly necessary, set by IFFS Lens

• __Secure-better-auth.session_token (cookie). This keeps you signed in. It is set when you sign in, and it holds a signed session identifier. It keeps you signed in for 30 days from the time you sign in. Using IFFS Lens does not extend that. It is deleted when you sign out. Scripts on the page cannot read it (HttpOnly), it is sent only over secure connections (Secure), and browsers hold it back from most requests that start on other websites (SameSite=Lax).
• __Secure-better-auth.state (cookie). This is set when you press the button to sign in, and it holds a signed random value. When you come back from IFFS's sign-in page, IFFS Lens checks it, so that only the sign-in you started can finish in your browser. It lasts at most 5 minutes, and it is normally deleted as soon as you come back. It has the same protections as the session cookie.

These items are strictly necessary to provide the sign-in you ask for, so they do not need your consent. IFFS Lens also remembers your choice about Mapbox maps, so that it does not ask you on every page. It keeps that choice in your browser's local storage as iffs-lens.map-consent (the value is just "accepted" or "declined") until you change it or clear your site data. That record is strictly necessary too.

Set by Wild Apricot on its own page. You sign in on IFFS's sign-in page, which Wild Apricot runs on its own website. Wild Apricot sets its own cookies there, under its own privacy policy. IFFS Lens does not control them and cannot read them.

Set by Mapbox, only while Mapbox maps are on

• mapbox.eventData.uuid, mapbox.eventData.uuidTimestamp and mapbox.eventData (local storage, each name followed by an identifier). These hold a random identifier that is replaced every 24 hours, and the date Mapbox last received usage data. Mapbox uses them to count map use for billing and measurement.
• mapbox-tiles (browser cache). This stores up to 500 map tiles so that maps load faster.

Mapbox does not set cookies on IFFS Lens. Because these items serve Mapbox's own billing and measurement, we ask for your consent before Mapbox maps load if you are in the EU, the EEA, the UK or Switzerland. See Maps from Mapbox above for what Mapbox receives.

What we do not use. IFFS Lens does not use cookies or local storage for analytics, advertising, social media or tracking. If that changes, we will update this notice first and ask for your consent where the law requires it.

Your choices. Wherever you are, you can accept or decline Mapbox maps at any time using the Cookie settings link in the site footer or in the atlas's Rendering panel. Declining, or switching Mapbox maps off later, deletes the Mapbox items listed above from your browser. You can also delete or block cookies and site data in your browser settings. If you block the two IFFS Lens cookies, you will not be able to sign in or stay signed in. Signing out deletes the session cookie.

We do not sell personal information. We share it only with the organisations below, and only as far as each one needs it.

Service providers that help run IFFS Lens and the IFFS Hub

• Vercel, Inc. (United States) hosts IFFS Lens and keeps the hosting logs described above. IFFS Lens's server functions run in Vercel's Washington, D.C. region, and pages are delivered through Vercel's global network. Vercel also uses some data for its own purposes under its privacy notice.
• Neon, LLC, part of Databricks, Inc. (United States), runs the IFFS Lens database, which holds the account, session and security-log records described in this policy. The database is hosted on Amazon Web Services in the US East (Northern Virginia) region. See the Databricks privacy notice.
• Mapbox, Inc. (United States) provides maps, as described above.
• Wild Apricot (Wild Apricot Inc., part of Personify, Inc.) provides the IFFS Hub's membership software, covering applications, invoices, renewals and membership emails. It also runs IFFS's sign-in page, where you sign in to IFFS Lens, and it is the source of the details IFFS Lens receives about you and your membership. IFFS Lens asks Wild Apricot for the record of the person signing in, and of account holders whose membership it checks, by IFFS Hub contact number. When someone signs in with an email address another IFFS Lens account holds, it also reads that account's record, to settle which IFFS Hub login the address belongs to. Wild Apricot says it hosts data on Amazon Web Services in the United States. See the Wild Apricot privacy policy.
• Google, Microsoft or Apple, only if IFFS's sign-in page offers signing in with one of them and you choose it. That company then confirms who you are to Wild Apricot, under its own terms and privacy policy. IFFS Lens receives nothing from it directly.
• The payment processor connected to the IFFS Hub processes payments for memberships. It receives your payment details directly from you.
• ICS Events provides IFFS's secretariat, management and operations. It handles messages sent to the secretariat, and it may access membership and account information when it helps run the IFFS Hub and IFFS Lens for us.
• Heel Turn designs, builds and maintains IFFS Lens for us. For this work it has access to the IFFS Lens hosting and database, and it manages some of the service accounts listed here on our behalf. It also carries out the requests described under Your rights.
• Our email service provider carries and stores emails sent to and from the secretariat.

Others

• professional advisers, such as lawyers, accountants and auditors, where they need the information to advise us
• courts, regulators, law enforcement and other authorities, where the law requires it or where it is needed to protect rights, property or safety
• another organisation, if IFFS Lens or the IFFS Hub is reorganised or transferred to it. We would tell you before your information became subject to a different privacy policy.

IFFS is based in the United States, so we handle your information there. Most of our service providers also process it in the United States. Some may access it from other countries: ICS Events from countries where it has offices, including Canada, and Heel Turn from India.

If you are in the EU, EEA, UK or Switzerland, these countries may not protect personal information in the same way as your own. Where your information is transferred to them, we rely on these safeguards:

• The EU-US Data Privacy Framework, its UK Extension and the Swiss-US Data Privacy Framework, for providers certified under them: Vercel, Mapbox, and Databricks (which covers Neon). You can check a provider's certification on the Data Privacy Framework list.
• Adequacy decisions by the European Commission and the UK for commercial organisations in Canada.
• Standard contractual clauses approved by the European Commission, with the UK addendum, where no other safeguard applies. Examples are Wild Apricot's data processing terms and access by Heel Turn from India.

To ask for a copy of these safeguards, contact us.

• Your IFFS Lens account, its details from the IFFS Hub, your acceptance records and your optional answers: while your account exists. If your IFFS Lens data is deleted, they are deleted together with your sessions.
• Your saved maps, saved comparisons and watchlist: until you delete them, or until your IFFS Lens data is deleted. They are kept while your membership is not active, so that they are there again if you renew.
• A first sign-in refused because there is no active membership: what that sign-in stored is deleted at once, apart from anonymous entries in the security log and the counts of sign-in attempts.
• An account whose first sign-in was not finished (the Terms of Use and this policy not accepted, or the age not confirmed): deleted at once if you choose “I do not accept, or I am under 18”. Otherwise it is kept until you choose that or ask us to delete it.
• An account whose membership is no longer active: you are signed out, and the account is kept until you ask us to delete it, so that it is there again if you renew.
• An account whose IFFS Hub login no longer exists: closed when the IFFS Hub has told us twice, at least a day apart, that it cannot find your login, or at once when another IFFS Hub login with the email address your account holds tries to sign in and the IFFS Hub then cannot find yours. It is kept, closed, until you ask us to delete it. If you sign in again with the same login, it is reopened.
• Session records (including IP address and user-agent): until you sign out or your sessions are ended, or until the session runs out after 30 days. Signing out deletes that session's record. Our daily clean-up deletes the records of sessions that ran out more than 30 days earlier.
• Session cookie: keeps you signed in for 30 days from the time you sign in. Using IFFS Lens does not extend that. It is deleted when you sign out.
• A sign-in in progress: the cookie lasts at most 5 minutes. The value it is checked against lasts 10 minutes, and our daily clean-up deletes any that are left.
• Counts of sign-in attempts: deleted by our daily clean-up once they have not been used for a day.
• Security log: 12 months. If your IFFS Lens data is deleted, the entries about you stay until then, with your account and contact number replaced by the word “deleted” and your IP address and browser details removed. A reason code or level number in an entry stays, because it is not personal. For an administrator, the entries about signing in and about administration are kept whole for their 12 months, so that they cannot be wiped by deleting the account.
• Country lookup: not stored.
• Hosting logs: for a limited period set by Vercel's platform.
• Mapbox data: as set by Mapbox. Mapbox says it deletes IP addresses within 30 days. The identifier in your browser is replaced every 24 hours. The tile cache stays until your browser removes it or you clear it.
• Membership, purchase and billing records: while your membership lasts, and then for as long as tax, accounting and consumer laws require.
• Messages and requests: as long as we need them to deal with your message and any follow-up, and to keep a record of privacy requests and complaints.

When we no longer need information, we delete it or make it anonymous.

We take reasonable technical and organisational steps to protect your information. These include:

• encrypted connections (HTTPS) across IFFS Lens
• signing in on IFFS's own sign-in page, so that IFFS Lens never receives your IFFS Hub password
• a session cookie that page scripts cannot read and that is sent only over secure connections
• limits on repeated sign-in attempts, counted in the database
• restricted administrator access: administrators are named on our servers, never through the website, and need a code from an authenticator app as well as their IFFS Hub login
• a security log of sign-ins and other security events

No system is completely secure. Please keep your IFFS Hub login to yourself, and sign out on shared devices. Signing out of IFFS Lens also signs you out of the IFFS Hub, using a small window that opens for a moment and closes by itself. If your browser blocks that window, you stay signed in to the IFFS Hub: on a shared computer, sign out of the IFFS Hub yourself, so the next person at that computer has to sign in again. If a breach affects your information and is likely to put you at risk, we will tell you and the relevant authorities as the law requires.

Wherever you live, you can ask us to:

• show you the personal information we hold about you and give you a copy
• correct information that is wrong or incomplete
• delete your information, including your IFFS Lens account
• stop using optional information, such as your answers to the optional questions

When you are signed in, your account page lets you download a copy of your IFFS Lens data as one file, with your saved maps, saved comparisons and watchlist in it; change or clear your optional answers; and delete your IFFS Lens data, saved items included. If you cannot sign in, or would rather ask us, email secretariat@iffsreproduction.org. Once the secretariat has confirmed the request with you, the developer who runs IFFS Lens for us carries out your request from our servers within one month. Your name and email address come from the IFFS Hub: to correct them, change them on the IFFS Hub, and IFFS Lens follows the next time it reads your record. Deleting your IFFS Lens data does not close your IFFS Hub login or cancel your IFFS membership, and if you sign in again, a new IFFS Lens account is made. What stays in the security log is explained under How long we keep information. We may have to keep some membership and payment records for legal reasons. If so, we will tell you.

Before acting on a request, we will check your identity, usually by asking you to write from the email address on your account. Requests are free unless they are clearly unfounded or excessive.

To manage your IFFS membership and payments, use your IFFS Hub profile or contact us. Our Refund and Cancellation Policy explains where refunds are handled.

Under the GDPR and the UK GDPR you have the rights listed above. You also have the right to:

• restrict our use of your information in some circumstances
• receive the information you gave us in a portable format, where we use it under a contract or with your consent
• object, on grounds relating to your situation, to any use of your information that relies on legitimate interests
• object at any time to direct marketing (we do not currently send any)
• withdraw any consent you have given, at any time. This does not affect our use of your information before you withdrew it.

We will respond within one month. If a request is complex, or we receive many requests, we may extend this by up to two more months. If we do, we will tell you why.

Complaints. Please contact us first so that we can try to put things right. If you are in the UK, you have the right to complain to us, and we will acknowledge your complaint within 30 days. You can also complain to a data protection authority, for example the one where you live or work. In the EU or EEA, you can find yours on the European Data Protection Board website. In the UK, it is the Information Commissioner's Office.

Our representatives. We are appointing representatives in the EU and the UK for data protection. We will add their contact details here once they are appointed. Until then, please contact us directly at secretariat@iffsreproduction.org.

We do not sell your personal information. We do not share it for targeted (cross-context behavioural) advertising. We do not use it for profiling that produces legal or similarly significant effects.

We collect the categories of personal information described in this policy, from you, your browser and the IFFS Hub. These categories are:

• identifiers, such as your name, email address, IFFS Hub contact number and IP address
• internet activity, such as hosting logs, session records and the security log
• professional information, such as your optional profession and organisation
• commercial information, such as memberships and purchases
• your approximate location, as a country worked out from your IP address. It is used for that request and not stored.

Depending on your state, you may have the right to access, correct, delete or get a copy of your personal information. You may also have the right to opt out of its sale, of targeted advertising and of certain profiling. We offer access, correction and deletion to everyone in the US, whether or not a state law applies to us.

To make a request, email us. Where your state's law allows, an authorised agent can make the request for you, and we may ask for proof of their authority. If we refuse a request, you can appeal by replying to our decision, and we will explain the outcome. If you are still unhappy, you can contact your state attorney general. We will not treat you differently for using your privacy rights.

Global Privacy Control and Do Not Track. We treat a Global Privacy Control signal from your browser as a valid request to opt out of the sale or sharing of your personal information. We do not sell or share it, so nothing further needs to change. IFFS Lens does not track you across other websites, so it does not change how it works when your browser sends a Do Not Track signal. No advertising or analytics companies collect information on IFFS Lens. Mapbox receives the technical information described in Maps from Mapbox when you view our maps with Mapbox maps on, and may receive similar information when you view Mapbox maps on other websites, under its own privacy policy.

IFFS Lens is meant for adults and professionals. It is not directed at children. You must be 18 or over to have an IFFS Lens account.

Your IFFS Hub login makes your IFFS Lens account the first time you sign in, before IFFS Lens can ask your age. The first page you then see asks you to confirm that you are 18 or over. If you choose “I do not accept, or I am under 18”, your account is deleted at once. If you leave that page without answering, you cannot use anything that needs an account, and the account is kept until you choose “I do not accept, or I am under 18” or ask us to delete it.

We do not knowingly collect personal information from children under 13, or from anyone under 18 for an account. If we learn that we have, we will delete it. If you think a child has given us information, please contact us.

IFFS Lens links to other websites, such as the IFFS Hub, the IFFS website, United Nations sources and our partners. Apart from Wild Apricot, as described above, IFFS Lens does not share your account information with them. When you follow a link, your browser connects to that site, and that site's own privacy policy applies. This includes the IFFS Hub membership pages hosted on Wild Apricot.

We will update this policy when IFFS Lens changes, or when the law changes. The date at the top of this page shows when it last changed.

IFFS Lens sends no email. If a change matters, we show it in IFFS Lens: the next time you open a page that needs your account, you will be asked to accept the new version before you go on. If we want to use your information in a new way that needs your consent, we will ask first.

If you have a question about this policy or your information, or want to make a request or complaint, email secretariat@iffsreproduction.org. You can also write to International Federation of Fertility Societies, 10685-B Hazelhurst Dr. #26427, Houston, TX 77043, USA.

You also have the right to complain to a data protection authority or, in the US, your state attorney general, as explained above.