Privacy Policy and Data Protection

1. Data Controller

ICATC (International Catholic Association of Therapy & Coaching), a non-profit civil association, with registered address at Calle Lagasca 89, 28006 Madrid, Spain, and Tax ID: G10992519, is the data controller for the personal data you voluntarily provide through our forms, online services and My ICATC platform.

We are committed to protecting your privacy and using your data only for the purposes described here.

Contact: info@icatc-world.com

2. Data We Collect

We collect data that you provide directly to us:

• Identification data: name, surname, email, phone, country
• Professional data: qualifications, profession, languages, registration number
• Verification documents: university degree, professional registration certificate, criminal record certificate, liability insurance
• Profile photo and professional description (if you choose to publish them in the directory)
• Payment data processed by Stripe (ICATC does not store banking details)
• Platform usage data to improve the service
• Directory consent record: date, time and version of the document in which you gave consent to appear in the professional directory, pursuant to Art. 7.1 GDPR
• Aggregated My ICATC activity data: which platform sections you use and how frequently, on a statistical basis and not linked to individual profiles, based on ICATC's legitimate interest in improving services (Art. 6.1.f GDPR)

3. Purpose and Legal Basis

• Performance of the membership contract — processing your application, verifying your documentation, activating your My ICATC access and publishing your profile in the directory (only if authorised).
• Explicit consent — sending newsletters, activity communications and adding you to the professionals WhatsApp group. You may withdraw this consent at any time.
• Legitimate interest — managing the platform, improving the service and complying with legal obligations.
• Legal obligation — retaining documentation for the periods required by tax and accounting regulations.

4. Data Retention

Your data will be retained only as long as necessary for the stated purposes or until you request deletion:

• Active membership data: for the entire duration of membership
• Administrative and accounting data: up to 5 years after cancellation, in accordance with tax regulations
• Verification documents: deleted 12 months after verification is completed
• Marketing data: until you withdraw consent

5. Your Rights

Under the GDPR, you may request at any time:

• Access to the data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten")
• Restriction or objection to processing
• Portability of your data
• Withdrawal of consent for marketing communications

To exercise your rights, write to us at info@icatc-world.com. We will respond within one month. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

6. Third-Party Services

We use the following services to operate the platform, each governed by its own privacy policy:

• Stripe — secure payment processing (we do not store banking data)
• Google Workspace — email and Google Meet for peer supervision groups
• Dedicated server in the EU — data hosted within the European Economic Area

All providers are subject to GDPR safeguards.

7. Security

We implement the technical and organisational measures required by applicable law to protect your data: encrypted communications, restricted access controls and regular backups.

8. Cookies

We only use our own technical cookies necessary for the platform to function. We do not use advertising or third-party tracking cookies. You can manage your preferences via the cookie banner on the site.