We are fully committed to protecting your personal data and handling it in a transparent, secure, and lawful manner in accordance with the UK GDPR, the EU General Data Protection Regulation (GDPR), and all relevant data protection laws.

This Data Privacy Statement outlines how we collect, use, store, and protect your data in connection with your participation in the WAVE Ecosystem.

The data controller for the WAVE Ecosystem is MasteringGM® (operated by TAA Insights Ltd.). If you have any questions about data privacy or wish to exercise your rights under GDPR, you can contact us directly at the email or postal address listed on our site https://mastering-gm.com/imprint/.

When you apply for access to the WAVE Ecosystem, we collect and process personal data including your name, job title, organization, email address, LinkedIn profile or other source of verification, location, and your interaction with the platform. We do not collect sensitive personal data unless explicitly provided by you, and we only process such data with your explicit consent.

We rely on several lawful bases for processing your data. First, by submitting your application and by joining the WAVE Ecosystem, you give us explicit consent to collect and process your data as described. You may withdraw this consent at any time. Second, we process your data based on legitimate interest – to deliver and improve the services you access through your membership. In some cases, we may also process your data where it is necessary for the performance of a contract with you or, if applicable, your membership sponsor.

We use your data to review and verify your eligibility, provide access to relevant tools and discussions, communicate with you about updates and opportunities, and enable selected interactions with trusted WAVE Ecosystem Partners. These communications are part of the platform experience. You may opt out at any time, but please note that opting out may result in the loss of access to some or all platform features, as ongoing communication is integral to the way the WAVE Ecosystem works.

Some of your data will be visible within the WAVE Ecosystem platform to other approved members, including your name, job title, organization, and general profile information, as part of fostering a transparent and trusted professional network. This visibility helps enable meaningful collaboration, peer learning, and high-trust engagement across the WAVE Ecosystem.

If your membership is provided through a sponsor (for example, as part of a corporate partnership or promotional access) that sponsor may also have access to limited information regarding your engagement with the platform (e.g., login activity, participation in sessions, diagnostic tool usage), solely for the purpose of evaluating the effectiveness of their partnership and the value delivered to their client base. Sponsored access is always subject to our strict data protection standards, and sponsors do not have direct access to your private communications or confidential responses within the platform.

By joining the WAVE Ecosystem, you acknowledge that some of your data will be shared within the platform and, where applicable, with your membership sponsor. All such sharing is done in a controlled, purpose-driven, and GDPR-compliant manner.

We store your data using GDPR-compliant systems, the Ecosystem is hosted via Kajabi. Data is retained only as long as necessary to provide platform services or comply with legal obligations. If your account becomes inactive for more than 24 months, we may anonymize or delete your data unless retention is required by law or contractual agreement.

We do not sell your personal data. Your data may be accessed by the MasteringGM® team, selected WAVE Ecosystem Partners who meet our confidentiality standards, and GDPR-compliant service providers under strict data processing agreements. Where data is transferred outside the UK or EU, appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.

As a data subject, you have the right to access your data, correct it, request deletion, restrict or object to processing, and request portability of your data. As mentioned above, you also have the right to withdraw your consent at any time. If you are concerned about how we handle your data, you have the right to lodge a complaint with a data protection authority such as the UK Information Commissioner’s Office (ICO).

For more information or to exercise your rights, contact us using the details provided at www.mastering-gm.com/imprint. Alternatively, you can also reach out via direct message on the platform. We may update this statement periodically, and the latest version will always be available on our platform.