STATUTORY COMPLIANCE • DATA GOVERNANCE

Global Privacy Policy

The sovereign privacy covenants, data protection mechanisms, and statutory processing guidelines binding the International Crystal Industry Alliance (ICIA) across all global secretariats and public ledger interfaces.

DATA PRIVACY CHARTER

Comprehensive Data Protection Statement

The International Crystal Industry Alliance (ICIA) operates under non-commercial statutory charters. In executing global mineral metrology, OAISS testing node accreditations (OA-LABs), and dispute arbitrations, we adhere strictly to the UK Data Protection Act 2018 (UK GDPR), the General Data Protection Regulation (EU GDPR), and the Swiss Federal Act on Data Protection (FADP).

This Global Privacy Policy outlines the operational boundaries governing how personal data is collected, processed, and safeguarded across the ICIA central portal, member directories, and https://cert.icia.uk/ verification registries.

SECTION 01 • LEGAL BASIS FOR DATA PROCESSING

Statutory Necessity & Consent

1. Fiduciary Administration: Processing contact, identity, and institutional verification records necessary for executing accreditation covenants and maintaining public trust ledgers under English Common Law.

2. Scientific Archival Compliance: Recording OA-LAB testing metadata, IGMRI Micro-FTIR (3054 cm¹) & Raman baseline calibrations, and certified specimen plots under CCGS (4C+1I), RCGS (5R), and MSGS (4M) frameworks.

3. Security Defense & Audit Logs: Capturing network access telemetry to prevent automated scraping, rate abuse, and unauthorized modifications to specimen databases and ADRPS escrow records (£24,660,000 statutory reserve; up to £250,000 per node).

SECTION 02 • DATA MINIMIZATION & ISOLATION

On-Chain Cryptographic Ring-Fencing

Personal names, corporate beneficial ownership records, and commercial billing details are segregated from public verification services. The public ledger index (https://cert.icia.uk/) records objective physical metrics (carat mass, refractive index, Micro-FTIR & Raman shifts, diaphaneity τ, and IGSTS 3D biometric hashes) referenced by cryptographic identifiers.

Under no circumstances does ICIA monetize, trade, or transfer institutional registry records to marketing syndicates or unauthorized third-party aggregators.

DATA CONTROLLER DESK

ICIA General Secretariat — Legal Office

The data controller governing registry interactions, Subject Access Requests (SAR), and cross-border regulatory reporting.

Seat: London, United Kingdom
Supervisory Authority: UK Information Commissioner’s Office (ICO)

INTERNATIONAL TRANSFERS

Cross-Border Fiduciary Safeguards

Transfers between ICIA General Secretariat hubs (London • Geneva • Hong Kong) operate under Standard Contractual Clauses (SCCs) and mutual adequacy agreements ensuring parity of protection.

STATUTORY LEGAL RIGHTS

Individual Privacy Protections & Entitlements

Registered members, PCAS fellows, OA-LAB personnel, and public registry users retain statutory rights under applicable privacy mandates.

RIGHT OF TRANSPARENCY

Subject Access Inquiries

Entitled to receive a verified transcript of personally identifiable records held by the Alliance, delivered within 30 calendar days of filing.

Compliant with UK DPA 2018

RIGHT OF RECTIFICATION

Record Rectification Desk

Prompt correction of erroneous ICIA Certification Council licensing entries, academic titles, or administrative contact points upon identity verification.

Immediate Registry Update

RIGHT TO RESTRICTION

Processing Objections

Request temporary restriction of non-essential profile processing while formal IAAC arbitration or ADRPS restitution filings are pending.

Governed under ADRPS Rules