Privacy Policy

Overview

This Privacy Policy describes how Malkant Group ("we," "us," or "our") collects, uses, stores, and protects personal information submitted through our website at malkantgroup.com and through registration and participation in The Capability Summit series.

By visiting our website, registering for a summit, or engaging with our communications, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

Information We Collect

We collect information in the following ways:

Information You Provide Directly

• Name, email address, job title, and organization when registering for a summit or booking a discovery call
• Phone number if provided through our contact page or booking system
• Billing and payment details submitted during pass purchase (processed securely by our payment partner — we do not store card data)
• Communications you send us directly via phone, email, or social media

Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent on pages, and navigation paths through our website
• Referring URLs and search terms that brought you to our site
• Session key collection data tied to your summit registration (see Section 07)

Information From Third Parties

• Booking and scheduling data from Calendly when you book a discovery call
• Payment confirmation data from Stripe upon successful purchase
• Aggregated engagement data from email marketing platforms

How We Use Your Information

We use the information we collect for the following purposes:

• To process your summit registration and provide access to the sessions you have purchased
• To verify attendance and session key completion to fulfill travel reward and hotel stay benefits
• To send you summit-related communications including confirmation emails, session reminders, and post-summit follow-ups
• To send marketing communications about future summits and Malkant Group offerings, where you have opted in
• To process payments securely through our payment partner
• To schedule and facilitate discovery calls booked through our calendar system
• To improve our website, content, and summit experiences based on usage patterns
• To comply with applicable legal obligations

Website Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects anonymized data including pages visited, time on site, geographic location (country/region level), device type, and traffic sources.

This data is aggregated and does not personally identify you. It helps us understand which content is most valuable to our audience and improve our website experience.

We do not use analytics data to build individual behavioral profiles or for advertising targeting purposes.

Payment Processing

All payments for summit passes are processed securely through Stripe, a PCI-DSS compliant payment processor. Malkant Group does not store, transmit, or have access to your full credit card number, CVV, or banking details.

Stripe may collect and retain the following on our behalf:

• Name and billing address associated with your payment method
• Last four digits of your card for reference
• Transaction amount, date, and status
• Email address for receipt delivery

Stripe's handling of your payment data is governed by Stripe's Privacy Policy. We retain transaction records for accounting and legal compliance purposes.

Email Marketing

When you register for a summit or opt in through our website, we may send you:

• Transactional emails — registration confirmations, session reminders, access instructions, and post-summit resources (these are sent regardless of marketing preferences)
• Marketing emails — announcements of upcoming summits, new content, and Malkant Group news (these require your explicit opt-in)

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us directly. Unsubscribing from marketing emails will not affect delivery of transactional emails related to a pass you have purchased.

We use a third-party email platform to manage our communications. This platform processes your email address and engagement data (opens, clicks) on our behalf. We do not sell or share your email address with third parties for their own marketing purposes.

Session Keys & Summit Attendance Tracking

The Capability Summit uses a proprietary session key system to verify attendance at individual sessions. This system is integral to administering travel rewards and hotel stay benefits available to eligible pass holders.

How it works: Unique keys are embedded within session videos and breakout session pages. Attendees collect these keys through our platform, which records which sessions have been attended and whether all required keys have been collected.

The data we collect through the session key system includes:

• Your registration identifier and pass tier
• Which sessions you accessed and when
• Whether and when each session key was collected
• Total key completion status used to determine benefit eligibility

Attendance data is retained for 24 months following the summit date, after which it is anonymized or deleted.

Data Sharing

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

• Service providers: We share necessary data with Stripe (payments), Calendly (scheduling), Google Analytics (site analytics), and our email platform — each acting as a data processor on our behalf under appropriate agreements
• Travel partner: If you qualify for a hotel stay benefit, we share your name and contact information with our travel partner solely to fulfill your booking voucher
• Legal requirements: We may disclose your information if required by law, court order, or governmental authority
• Business transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with notice provided to you

All third-party service providers are contractually required to protect your data and use it only for the purposes we specify.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, subject to the following guidelines:

• Registration and contact data is retained for 3 years following your last interaction with Malkant Group
• Payment and transaction records are retained for 7 years for accounting and legal compliance
• Summit attendance and session key data is retained for 24 months following the summit date
• Marketing email engagement data is retained until you unsubscribe or request deletion
• Analytics data is retained in aggregated, anonymized form indefinitely

You may request deletion of your personal data at any time (see Your Rights, Section 10). Deletion requests may not apply to data we are legally required to retain.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of processing, including direct marketing
• Restriction: Request that we limit how we use your data in certain circumstances
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us using the information in Section 14. We will respond to all requests within 30 days. We may need to verify your identity before processing certain requests.

If you are located in the European Union or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

Cookies

Our website uses cookies — small text files stored on your device — to support essential site functions and analytics. We use the following types:

• Essential cookies: Required for the website and summit platform to function, including session management and authentication. These cannot be disabled without affecting site functionality.
• Analytics cookies: Used by Google Analytics to collect anonymized data about site usage. These can be disabled via browser settings or the Google Analytics opt-out tool.
• Functional cookies: Used to remember your preferences, such as language settings or pass selection. These can be disabled but may affect your experience.

We do not use advertising or tracking cookies for third-party ad targeting. You can manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of our summit platform, including session key collection.

Security

We take the security of your personal information seriously. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption across all pages of our website and summit platform
• Secure, PCI-DSS compliant payment processing through Stripe — card data never touches our servers
• Access controls limiting which team members can access personal data and for what purpose
• Regular review of our data handling practices and security procedures

No method of transmission over the internet is completely secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or summit offerings. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send a notice to registered attendees and email subscribers where the changes are significant
• Post a prominent notice on our website for a period following the update

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or how Malkant Group handles your personal data, please contact us using the information below. We are committed to addressing all privacy inquiries promptly and transparently.