Legal
Privacy Policy
How we collect, use and protect your personal data across BCSA's website, membership, events and threat-intelligence services.
Last updated: 19 July 2026
Who we are
The Brunei Cybersecurity Association (“BCSA”, “we”, “us”) is the data controller for the personal data described in this notice. BCSA operates this website together with the membership portal, events platform and members’ threat-intelligence service. For any privacy question or to exercise your rights, contact us at contact@bcsa.bn.
What we collect
- Membership data — name, email, phone, organisation, address, membership tier and status, invoices and payments.
- Event data — attendee names and emails, ticket type, payment proof and check-in status.
- Threat-intelligence subscription — your email and digest preferences (categories, frequency).
- Website data — contact-form submissions and standard technical/usage data.
How we use it
To administer your membership, process event registrations and payments, deliver the services and communications you have asked for (including the members’ digest), maintain security, and meet our legal and accounting obligations. We rely on your consent, the performance of our membership/ticketing agreement with you, and our legitimate interest in running the association.
Sharing across BCSA services
BCSA uses a single sign-on account so you can move between the website, membership, events and intelligence services. Your membership status may be shared between these services to apply member benefits (for example, member event pricing or access to the members’ feed). We do not sell your personal data. We share data with service providers (such as hosting and email delivery) only as needed to operate the services.
Retention
We keep membership and financial records for as long as you are a member and for the period required by law afterwards. Event and subscription data is kept while relevant and then deleted or anonymised.
Your rights
You may request access to, correction of, or deletion of your personal data, object to certain processing, and withdraw consent (including opting out of the directory or the members’ digest) at any time. Members can manage many of these settings in the member portal, or contact us at contact@bcsa.bn.
Cookies
We use cookies that are necessary for sign-in and security. Where we add analytics or optional cookies, we will ask for your consent first.
Changes
We may update this policy. Material changes will be posted here with a revised “last updated” date.