Privacy Policy

Last updated: April 2, 2026

1. Introduction

The Natural Stone Strategic Alliance ("NSSA", "we", "our", or "us") is a voluntary trade association of national and international trade associations in the natural stone sector, exempt from federal income taxation pursuant to Section 501(c)(6) of the Internal Revenue Code, incorporated in the State of Ohio, United States (Charter #5427564).

We are committed to protecting the privacy and personal data of our members, website visitors, event participants, and all individuals who interact with the NSSA. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our website (naturalstonestrategicalliance.org), membership services, events, and communications.

By accessing our website, submitting a membership application, or otherwise providing personal information to the NSSA, you acknowledge that you have read and understood this Privacy Policy.

2. Scope

This Privacy Policy applies to personal information collected through:

• The NSSA website (naturalstonestrategicalliance.org) and any subdomains;
• Membership registration and application forms;
• Event registrations, trade shows, and seminars organized or co-organized by NSSA;
• Email communications, newsletters, and correspondence;
• Board of Directors and committee activities; and
• Any other interactions where NSSA collects personal data.

This Policy does not cover the practices of third-party websites linked from the NSSA website. We encourage you to review the privacy policies of any third-party sites you visit.

3. Data Controller

The data controller responsible for the processing of personal data under this Policy is:

4. Personal Data We Collect

We collect personal information that is necessary to fulfill our mission as a trade association and to manage our relationship with members and stakeholders. The categories of data we collect include:

4.1 Membership and Registration Data

When an organization applies for membership, we collect:

• Official organization name, trading name, and acronym;
• Full address and country of operation;
• Organization email address and website;
• Primary contact person's full name, title/role, email, and direct phone number;
• Preferred communication channel;
• Organizational profile data (country, region/state, year established, number of member companies, annual national sector turnover);
• Billing address and fiscal identification number (where required);
• Authorized signatory name and signature; and
• Communication and marketing preferences (newsletter subscriptions, event alerts, partner offers).

4.2 Board of Directors and Officers Data

For individuals serving on the Board of Directors or as officers of the NSSA, we additionally collect information necessary for governance, including contact details, biographical data, and conflict of interest disclosures as required by the NSSA Bylaws.

4.3 Website Usage Data

When you visit our website, we may automatically collect:

• IP address and approximate geographic location;
• Browser type, operating system, and device information;
• Pages visited, time spent on pages, and navigation paths;
• Referring website or source; and
• Cookies and similar tracking technologies (see Section 9 below).

4.4 Event and Communication Data

If you register for NSSA events, trade shows, or seminars, or interact with our communications, we may collect your name, contact details, organization, dietary or accessibility requirements, and engagement metrics (e.g., email open rates).

5. How We Use Your Personal Data

We process personal data for the following purposes:

5.1 Membership Administration

• Processing membership applications and renewals;
• Managing membership records, dues, and billing;
• Communicating with member associations regarding Association matters;
• Administering voting rights and governance processes; and
• Maintaining the register of members as required by the Bylaws.

5.2 Communication and Engagement

• Sending newsletters, industry updates, and event notifications (where consent has been given);
• Responding to inquiries and correspondence;
• Sharing relevant partner offers (only where the member has opted in); and
• Facilitating collaboration among member associations on key projects.

5.3 Events and Trade Shows

• Organizing and managing participation in NSSA events;
• Providing logistical information and post-event follow-up; and
• Producing event-related materials such as attendee lists and proceedings.

5.4 Website Operations

• Ensuring the security and proper functioning of our website;
• Analyzing website usage to improve content and user experience; and
• Complying with legal and regulatory requirements.

5.5 Legal and Regulatory Compliance

We may process personal data to comply with applicable laws, respond to legal requests, protect NSSA's rights and interests, and fulfill our obligations under the NSSA Bylaws and applicable tax-exempt regulations.

6. Legal Basis for Processing

We process personal data on the following legal bases:

• Contractual necessity: Processing is necessary to fulfill the membership agreement and deliver the services associated with NSSA membership;
• Consent: Where you have provided explicit consent, for example when subscribing to newsletters, event alerts, or partner offers. You may withdraw consent at any time;
• Legitimate interests: Processing is necessary for the legitimate interests of the NSSA and its members, such as governance administration, collaboration on industry projects, and promoting the natural stone sector; and
• Legal obligation: Processing is required to comply with applicable laws and regulations, including U.S. tax-exempt organization requirements.

7. Data Sharing and Disclosure

The NSSA does not sell, rent, or trade personal data. We may share personal information in the following limited circumstances:

• With NSSA member associations: We may share certain organizational and contact information among members solely for the purposes of facilitating collaboration on NSSA projects and initiatives, subject to the confidentiality obligations in the NSSA Bylaws (Article VII, Section 1);
• With service providers: We may engage trusted third-party service providers (e.g., website hosting, email distribution platforms, payment processors) who process data on our behalf and under our instructions, subject to appropriate data protection agreements;
• For legal compliance: We may disclose personal data where required by law, regulation, court order, or governmental request; and
• In connection with organizational changes: In the event of a merger, reorganization, or dissolution of the NSSA, personal data may be transferred to a successor organization, provided such organization commits to honoring this Privacy Policy or provides equivalent privacy protections.

8. International Data Transfers

The NSSA is an international organization with member associations across multiple countries. As such, personal data may be transferred to, stored in, and processed in countries other than the country in which it was originally collected, including the United States.

When personal data is transferred from the European Economic Area (EEA), the United Kingdom, or other jurisdictions with data protection laws to a country that does not provide an equivalent level of protection, we will implement appropriate safeguards in accordance with applicable law, such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

9. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance your browsing experience and collect usage data. Cookies are small text files stored on your device when you visit a website.

We may use the following types of cookies:

• Strictly necessary cookies: Required for the website to function correctly (e.g., security, session management);
• Analytics cookies: Used to understand how visitors interact with our website, helping us improve content and functionality; and
• Preference cookies: Used to remember your settings and choices.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. If NSSA deploys analytics or third-party cookies in the future, this section will be updated accordingly, and consent mechanisms will be provided where required by law.

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Membership data: Retained for the duration of membership and for a period of five (5) years after membership ends, to address any outstanding obligations or inquiries;
• Board and governance data: Retained for the duration of service and for a period of seven (7) years thereafter, to meet legal and regulatory requirements;
• Website usage data: Retained for up to twenty-four (24) months from the date of collection;
• Event registration data: Retained for two (2) years following the event; and
• Communication preferences: Retained until you withdraw your consent or update your preferences.

When personal data is no longer required, it will be securely deleted or anonymized.

11. Data Security

The NSSA takes the security of personal data seriously and implements appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Use of encrypted communications (SSL/TLS) for data transmission;
• Access controls limiting data access to authorized personnel only;
• Regular review of security practices and procedures; and
• Confidentiality obligations for all persons handling personal data on behalf of the NSSA.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is entirely secure. We cannot guarantee absolute security but commit to promptly addressing any data breach in accordance with applicable laws.

12. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right of Access: You may request confirmation of whether we process your personal data and, if so, obtain a copy of such data;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to applicable legal retention requirements;
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances;
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Object: You may object to data processing based on legitimate interests or for direct marketing purposes; and
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the details provided in Section 15 below. We will respond to your request within the timeframes required by applicable law (generally within 30 days).

13. Children's Privacy

The NSSA's services are directed to trade associations and organizations, not to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify affected individuals by posting the updated Policy on our website and, where appropriate, by direct communication to our members.

The "Last updated" date at the top of this document indicates when this Policy was most recently revised. We encourage you to review this Policy periodically.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at:

16. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Ohio, United States, without regard to its conflict of laws principles. For individuals located in the European Economic Area, this Policy shall also comply with the applicable provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR). For individuals in other jurisdictions, applicable local data protection laws will be respected to the extent required.