Privacy Policy
Last updated: May 13, 2026
The FETP Alumni Platform ("Platform"), operated by EMPHNET (Eastern Mediterranean Public Health Network), is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using the Platform, you agree to the practices described in this document.
01 Who We Are
The FETP Alumni Platform is a global digital network managed by EMPHNET, a non-governmental, non-profit regional public health organization. EMPHNET serves as the data controller for all personal information collected through this Platform.
Our mission is to connect graduates of Field Epidemiology Training Programs (FETPs) and Public Health Emergency Preparedness (PHEP) programs to strengthen disease surveillance, outbreak response, and public health capacity across the Eastern Mediterranean Region and beyond.
02 Information We Collect
We collect the following categories of personal data:
Full name (first, middle, last), title (Mr/Ms/Dr/Prof), email address, country/program affiliation, and highest FETP training level completed.
Encrypted password credentials. We never store passwords in plain text.
Pages visited, features used, login timestamps, IP address, browser type, and device information collected automatically through server logs.
Any messages, feedback, or support requests you send to us directly.
03 How We Use Your Information
Your personal data is used exclusively for the following purposes:
- Creating and managing your alumni account and profile
- Verifying your identity and FETP/PHEP program affiliation
- Facilitating connection and knowledge exchange between alumni members
- Sending platform notifications, updates, and network announcements
- Providing technical support and responding to your inquiries
- Generating aggregate, anonymized statistics about the network (e.g., number of alumni per country)
- Improving platform functionality, performance, and user experience
- Complying with applicable legal and regulatory obligations
We do not use your data for advertising, and we do not sell your personal information to any third party.
04 Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual necessity: Processing required to provide the platform services you signed up for.
- Legitimate interests: Maintaining platform security, preventing fraud, and improving our services.
- Consent: Where you have explicitly opted in (e.g., newsletter subscription).
- Legal obligation: Where processing is required by applicable law.
05 Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
- FETP Country Program Coordinators: Program administrators within your registered country may access aggregated member statistics for network management purposes.
- Service Providers: Trusted third-party vendors who help us operate the platform (hosting, email delivery, analytics) under strict confidentiality agreements.
- Legal Requirements: When required by law, court order, or governmental authority.
- Organizational Partners: WHO, CDC, and other public health bodies may receive anonymized, aggregated data for global health reporting — never individually identifiable information.
06 Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law or for legitimate operational purposes (e.g., fraud prevention records).
Anonymized and aggregated data may be retained indefinitely for research and statistical purposes without identifying any individual.
07 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete personal data.
Request deletion of your personal data ("right to be forgotten").
Request that we limit how we process your data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
To exercise any of these rights, please contact us at privacy@emphnet.net. We will respond within 30 days.
08 Cookies & Tracking
We use the following types of cookies:
- Essential cookies: Required for the platform to function (session management, authentication). Cannot be disabled.
- Functional cookies: Remember your preferences (language, country selection).
- Analytics cookies: Help us understand how users interact with the platform (anonymized). You may opt out via your browser settings.
You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.
09 Data Security
We implement industry-standard technical and organizational measures to protect your personal data, including:
- HTTPS/TLS encryption for all data transmitted to and from the platform
- Bcrypt hashing for all stored passwords
- Role-based access controls limiting staff access to personal data
- Regular security audits and vulnerability assessments
- Secure, backed-up database infrastructure
In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities within 72 hours of becoming aware of it.
10 International Transfers
As a global platform, your data may be processed in countries outside your own. EMPHNET ensures that any international transfer of personal data is conducted under appropriate safeguards, including standard contractual clauses and data processing agreements that meet applicable legal requirements.
11 Children's Privacy
The FETP Alumni Platform is intended exclusively for professional public health practitioners and FETP graduates. It is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us immediately at privacy@emphnet.net.
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify registered users by email and display a prominent notice on the platform at least 14 days before the changes take effect.
Your continued use of the platform after changes become effective constitutes your acceptance of the revised policy.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection team: