IT Leader Exchange Privacy Notice
Dated: September 8, 2026
Who we are
IT Leader Exchange produces professionally facilitated, peer-to-peer events for senior IT leaders. GoTo Marketers Inc., a Canadian company, and SoCommunity Ltd., a United Kingdom company, jointly operate IT Leader Exchange. In this notice, “IT Leader Exchange,” “we,” “us” and “our” refer to these organizations when they operate IT Leader Exchange.
GoTo Marketers Inc. and SoCommunity Ltd. jointly decide how and why personal information is used for IT Leader Exchange and act as joint controllers for UK and European data-protection purposes. We have an arrangement setting out our respective responsibilities. You may contact us for a summary. You may exercise your rights against either company, and we will handle requests sent to the privacy address below for both.
GoTo Marketers Inc.: 5535 Glean Erin Drive #16, Mississauga Ontario L5M 6H1
SoCommunity Ltd.: 20 Nightingales, Market Deeping, Peterborough, PE6 8RU, United Kingdom
Privacy contact: privacy@itleaderexchange.com
What this notice covers
This notice explains how we collect, use, disclose, retain and protect personal information when you visit our website, ask to attend or attend an event, communicate with us, participate as a speaker or facilitator, complete a survey, or agree to receive future communications.
An event may also have a short privacy notice on its registration form identifying the event partner or sponsor and any event-specific use of information. That notice should be read together with this policy.
Information we collect
Business and contact information: Name, business email, telephone number, company, job title, professional profile, city, state or province, country and LinkedIn profile where supplied or lawfully obtained.
Event information: The event requested, application and approval status, attendance, calendar responses, dietary or accessibility requirements, questions, feedback and survey responses.
Communication information: Email preferences, consent records, unsubscribe requests, correspondence and interactions with our emails, such as delivery, opens and link clicks where permitted.
Website and device information: IP address, browser and device information, pages visited, referral source, campaign or UTM information and cookie or analytics identifiers.
Event media: Photographs, video and audio captured at an event, together with names, titles or attributed comments where permission is obtained or another lawful basis applies.
Limited sensitive information: Dietary, allergy, accessibility or health information you voluntarily provide so that we can make reasonable arrangements. We use this only for that purpose and request explicit consent where required.
How we collect information
We collect information directly from you through event forms, email, surveys and conversations. We may also receive professional business information from co-hosts, referral partners, professional data providers such as business-contact databases, public company websites, LinkedIn and other publicly available professional sources, where permitted by law.
If we first obtain your information from another source, we will provide the information required by applicable law in our initial communication or within the legally required period.
How and why we use information
Event applications and administration: To review eligibility, manage invitations and waiting lists, confirm attendance, issue calendar invitations, provide venue and accessibility information, communicate changes, protect event security and follow up about the event.
Event experience: To select relevant themes, facilitate peer discussions, understand attendance, request feedback and improve future events. Roundtable discussions may be recorded so that we can produce a written synthesis. Comments are not attributed without permission.
Future communications: To send invitations, community updates, research and relevant content when you have consented or when another lawful basis and electronic-marketing rule permits us to do so.
Professional outreach: To invite relevant senior IT leaders to consider events based on their professional role, location and likely relevance, subject to applicable direct-marketing rules and the right to object.
Partner and sponsor delivery: To operate a co-hosted event, provide agreed event benefits and produce aggregate or de-identified reporting. For events in the United Kingdom and Ireland, we share identifiable contact information with a named sponsor or partner for their own marketing only with consent. For events in the United States, we share it where you have been given notice and the opportunity to opt out.
Media and content: To document events and create event recaps, editorial content and promotion. We will provide event notices, respect reasonable objections and seek specific permission before publishing attributed comments or prominent individual features where appropriate.
Website operation and analytics: To keep the website secure, understand use, measure campaigns, troubleshoot and improve content. Non-essential cookies or tracking technologies are used only as permitted by applicable law and our cookie choices.
Legal and business protection: To maintain records, enforce agreements, prevent misuse, respond to lawful requests and establish, exercise or defend legal claims.
Lawful bases for UK and EEA processing
Contract and steps at your request:When we process an event request, provide an event place or respond to an enquiry.
Legitimate interests: When we administer and improve business events, conduct proportionate business-to-business outreach, maintain security and create aggregate reporting, after balancing those interests against individual rights.
Consent: For optional future communications where required, named sponsor or partner data sharing, certain non-essential cookies, and sensitive information or media uses where explicit permission is appropriate.
Legal obligation: When we must keep records, respond to authorities or comply with applicable law.
You may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal. You also have an absolute right to object to direct marketing at any time.
Marketing choices
We provide an unsubscribe link in marketing emails and maintain suppression records so that we can respect opt-outs. Event-service messages, such as approval, confirmation, safety and schedule information, are not marketing and may still be sent while your event request or attendance is active.
For Canadian recipients, we seek consent and identify the senders as required by Canada’s anti-spam legislation, unless a valid exception applies. For UK and EEA recipients, we apply the UK GDPR or EU GDPR and applicable electronic-marketing rules. For US recipients, we comply with CAN-SPAM and applicable state privacy laws.
How we share information
Our operating companies: GoTo Marketers Inc. and SoCommunity Ltd. share information as needed to operate IT Leader Exchange across Canada, the United States and the United Kingdom.
Service providers: We use providers for website hosting, CRM and event registration, email delivery, analytics, videography, event production, venues, catering, security, accounting and professional advice. They may use information only to provide contracted services and must protect it.
Event co-hosts: A co-host may receive the limited information necessary to review or administer a co-hosted event. If it will retain information for its own future communications, the form will identify it and request consent where required.
Sponsors: Our events are supported by a founding sponsor. We name the sponsor on the registration page for each event. We provide the sponsor with aggregate or de-identified reporting on event participation for every event.
For events in the United Kingdom and Ireland, we share your name, company, job title and business email address with the sponsor only where you have given consent. We request consent separately from your event application. Refusing it does not affect your place at an event.
For events in the United States, if you are approved to attend, we share your name, company, job title, business email address and event participation details with the sponsor, who may contact you about its content, events, products and services. You can opt out at any time by emailing us or using the unsubscribe link in any message.
Legal, safety and organizational changes: We may disclose information where required by law, to protect people or rights, or in connection with a merger, financing, restructuring or sale, subject to appropriate protections.
We do not sell attendee lists as a standalone product. We do not share personal information for cross-context behavioral advertising unless we first provide the notices and choices required by applicable law.
International transfers
IT Leader Exchange operates across Canada, the United States and the United Kingdom. Information may therefore be accessed or processed outside the country where it was collected, including by our operating companies and service providers.
Where UK or EEA personal data is transferred to a country without an applicable adequacy decision, we use an approved transfer mechanism, such as the UK International Data Transfer Addendum or applicable Standard Contractual Clauses, together with additional safeguards where required. You may contact us for information about the safeguards used.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, legal obligations and the protection of legal rights. The following periods are proposed and must be confirmed before publication:
Event applications and attendance records: Up to 24 months after the event, unless a longer period is needed for a complaint, legal claim or contractual obligation.
Marketing records: Until consent is withdrawn, the person objects, or there has been no engagement for 24 months, then delete or anonymize where appropriate.
Consent and suppression records: Up to six years after the last communication or withdrawal so that we can demonstrate consent and continue honoring an opt-out.
Contracts, invoices and financial records: Up to seven years or the period required by applicable tax and corporate law.
Event photographs and recordings: Up to five years, subject to periodic review and any agreed license or content requirement.
Website analytics: Up to 14 months unless a shorter setting is configured or longer retention is justified and disclosed.
Cookies and email analytics
Our website may use essential cookies for security and form operation and optional cookies for analytics or marketing measurement. Where consent is required, optional cookies are disabled until a visitor makes a choice. A separate Cookie Notice should identify the tools used, their purposes, providers and durations.
Our emails may use standard delivery, open and click tracking to measure engagement and improve communications where permitted. Because open tracking can be inaccurate, we do not treat an email open alone as proof that a person read or consented to a communication.
Photography, video and event participation
Events may be photographed or recorded. We will provide reasonable notice at registration and at the venue. Attendees who do not wish to appear should tell the event team so we can take reasonable steps. Separate permission will be obtained before we publish an attributed quotation, testimonial or deliberately featured interview where required.
Security
We use reasonable administrative, technical and physical safeguards designed to protect personal information. Access is limited to people and providers who need it for authorized purposes. No internet transmission or storage system can be guaranteed completely secure.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your information; restrict or object to processing; withdraw consent; opt out of marketing; and complain to a privacy regulator. Some rights are subject to exceptions.
UK: You may complain to the Information Commissioner’s Office at ico.org.uk. You have the right to object to direct marketing at any time.
EEA: You may complain to the supervisory authority in the country where you live or work, or where you believe an infringement occurred.
Canada: You may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.
United States: Residents of states with applicable privacy laws may have rights to know, access, correct, delete or obtain a copy of information and to opt out of certain sales, sharing or targeted advertising. We will not discriminate against a person for exercising an applicable right.
To make a request, email privacy@itleaderexchange.com. We may need to verify your identity. Authorized agents may submit requests where permitted by law.
California notice
If the California Consumer Privacy Act applies to IT Leader Exchange, this section supplements the rest of the notice. During the preceding 12 months, we may have collected the categories described above, including identifiers, professional information, internet activity, event participation and audio-visual information. We use and disclose these categories for the business and commercial purposes described in this notice.
We do not sell personal information as defined by California law. We disclose limited business contact information to our named founding sponsor as described in section 8, and you may opt out of that disclosure at any time by emailing us.
Children
Our services are intended for business professionals and are not directed to anyone under 18. We do not knowingly collect personal information from children.
Third-party websites
Our website and communications may link to venues, partners, sponsors and other third parties. Their privacy practices are governed by their own notices, not this one.
Changes to this notice
We may update this notice as our events, technology or legal obligations change. We will post the updated version and effective date on the website and provide additional notice where required.
Contact us
Questions, privacy requests and complaints may be sent to:
Email: privacy@itleaderexchange.com
Canada or United States: GoTo Marketers Inc., 5535 Glean Erin Drive #16, Mississauga Ontario L5M 6H1
United Kingdom: SoCommunity Ltd., 20 Nightingales, Market Deeping, Peterborough, PE6 8RU.