Privacy Policy

Last updated: 2 September 2026

This policy explains what ECCU Bankers Association Ltd. collects through https://eccuba.org, why, and what you can ask us to do about it.

1. Who is responsible

ECCU Bankers Association Ltd.
C/o Mr. Rolf K. Phillips, President
Bank of Saint Lucia, 1 Bridge Street
Castries
Saint Lucia
Email: info@ecbankers.org
Telephone: +1 (268) 720-4323

2. What we collect

Account details: name, email address, organisation, position, password (stored only as a hash), and an optional profile photo.
Security data: two-factor authentication settings, passkey credentials, sign-in timestamps and failed sign-in counts used for account lockout.
Registration details: organisation, primary contact, attendee names and titles, the registration tier and fee, accommodation choice, and any dietary, accessibility or special requests you tell us about. Dietary and accessibility information is optional, is used only to run the event, and is shared only with the venue or caterer who needs it.
Membership verification: where a member rate is claimed, we record which member bank the access code resolved to and when it was accepted. We never store the code itself.
Correspondence: messages you send through the contact form and mailing-list subscriptions.
Technical data: server logs including IP address, used to keep the service available and to enforce rate limits on sign-in.

3. What we do not collect

We do not collect or store payment card numbers, expiry dates or security codes. Card details are entered on the payment provider's own secure page. We receive only the outcome of the transaction and a reference. See the Payment Security Policy.

4. Why we use it

To create and secure your account.
To process and administer event registrations and payments.
To send confirmations, receipts, joining instructions and event updates.
To verify eligibility for member rates.
To answer enquiries.
To send the newsletter, where you have subscribed.
To meet legal, regulatory and card-scheme obligations, including fraud and sanctions screening.

Payment provider — processes card payments and holds the card data we never see.
Email provider — delivers transactional email on our behalf.
Hosting provider — operates the servers the site runs on.
Venues, caterers and event partners — receive only the attendee details needed to run a specific event.
Authorities and regulators — where we are legally required to disclose.

We do not sell personal information and we do not share it for third-party marketing. Some of these providers process data outside Saint Lucia; where they do, we rely on their contractual commitments to protect it.

6. How long we keep it

Account details are kept while the account is open and for 12 months after it is closed. Registration and payment records are kept for seven years to meet accounting and card-scheme requirements. Contact-form messages are kept for 24 months. Newsletter subscriptions are kept until you unsubscribe.

7. Cookies

We use cookies that are necessary for the site to work: a sign-in cookie that keeps you authenticated, and an antiforgery cookie that protects forms against cross-site request forgery. Sessions end after 30 minutes of inactivity, or after the "keep me signed in" period if you chose it. We do not use advertising or third-party tracking cookies.

8. Your choices

You can view and correct most details in your profile, unsubscribe from the newsletter using the link in any newsletter email, and ask us to correct or delete information by writing to info@ecbankers.org. Where we must keep a record for accounting or regulatory reasons we will tell you, and will restrict its use to that purpose.

9. How we protect it

The site is served over TLS, passwords are stored hashed, accounts support two-factor authentication and passkeys, sessions time out, and sign-in is rate limited. Access to the database is restricted to administrators who need it.

10. Changes

We will post any change to this policy on this page and update the date above.