Data Processing & International Data Transfer Policy

1Purpose

This document defines governance for the processing and international transfer of member information. It ensures all processing activities adhere to applicable data protection rules and respect the privacy rights of seeking members.

2Governance

Data Controller: The Grand Master of the English Grand Lodge for Africa and the Middle East (AMORC AME).

Authorised Processors: The Grand Master's Office, Membership Services Department, Mailing & Distribution Department, and approved technical providers.

3Processing Principles

We process all personal information lawfully, fairly, transparently, and only for legitimate membership administration purposes, applying appropriate security controls.

4Access Control

We implement role-based access controls across all platform operations. Staff and officer access to personal data is restricted strictly to a need-to-know basis. All administrative actions should be auditable.

5International Transfers

Transfers of member information between different geographical jurisdictions must document:

• The data controllers and processors involved.
• The specific administrative purpose of the transfer.
• The storage locations and access protocols.
• The specific technical and organizational safeguards in place.

6Retention

We retain personal records only as long as necessary for membership administration, legal obligations, and legitimate historical organisational records.

7Member Rights

AMORC AME provides clear processes for members to exercise their rights to request access, correction, or updates to their personal information, in accordance with applicable laws.

8Review

This policy is subject to review and will be updated whenever data protection legislation or organisational practices change.