Scrum Alliance Privacy and Cookie Policy

This Privacy and Cookie Policy (“Privacy Policy”) describes Scrum Alliance, Inc.’s (“SAI”) practices regarding information we collect about you and the choices available to you regarding such information.

1. “Personal Data” Explained

As used in this policy, “Personal Data” means any information relating to an identified or identifiable natural person. This Privacy Policy applies to information we collect where we control the purposes and means of processing, specifically information we collect through any of our websites, apps, emails, or other online services that link to this Privacy Policy (the “Service”), or other sources identified below. Please note that your use of the Service is subject to our Terms of Service. 

This Privacy Policy does not apply to practices of third parties we do not control or information that has been anonymized or, to the extent permitted by law, deidentified. 

See additional disclosures if you live in the following regions: Colorado, Delaware, Maryland, Minnesota, New Jersey, or Oregon.

2. Security

We have implemented and maintain reasonable security features that help protect information about you from loss, theft, misuse, alteration, destruction, or unauthorized release or access.  

Notwithstanding our efforts, no security system is impenetrable and the confidentiality of any communication or material transmitted to or from us via our website or e-mail cannot be guaranteed.  SAI is not responsible for the security of information transmitted via the Internet.  If you do not want to communicate with us via the Internet, you may contact us by mail at the address set forth below in the “Contact Us” section.

To help maintain the security of your Personal Data, SAI asks that you please notify us immediately of any unauthorized visit, access or use of the SAI websites or the loss or unauthorized use of your login information for the websites (e.g., username or password).

3. Types of Personal Data We Collect

The Personal Data we collect about you depends upon how you choose to use our Service. Depending upon your use, we may collect and process usage data, your name, email, phone number, address, gender, photograph, biographical or demographic information, professional information relating to experience, role, and work history, payment card information, any dietary restrictions in connection with event registrations, username, password, security responses, and your IP address. Such usage information is collected using cookies.

4. How We Collect and Use Personal Data

We collect certain Personal Data about you when you use our Service, including when you visit our websites, set up an account, or make other voluntary, active uses of our websites. 

We may also obtain your Personal Data from third parties such as training providers, academic partners, enterprise partners, hosts of events we sponsor, and/or other third parties who may obtain your consent to share your Personal Data with us or as permitted by applicable law. We may also obtain your Personal Data from a school, school district, or teacher in the United States as outlined in Section 18, below. 

We use your Personal Data to monitor website usage, protect our Service, administer your account, award any credentials you have earned, populate your online profile, manage your membership, process payments for membership and certification renewals, and facilitate training. Depending on your preferences, we may also contact you with information about Scrum Alliance events, community information, membership benefits and details, learning opportunities, course recommendations, or to provide other Scrum Alliance-related information. More specific details about those types of Personal Data and how we process them are provided below:

Usage data.  Usage data includes:  home server domain name, date and time of visit to our websites, type of computer, the originating IP address, files downloaded, type of search engine used, operating system used, and the web browser of site visitors.  We collect this information when you visit our sites.  We use this data to improve our websites, conduct analytics, and provide relevant advertising.

• Usage data. Usage data includes home server domain name, date and time of visit to our websites, type of computer, the originating IP address, files downloaded, type of search engine used, operating system used, and the web browser of site visitors.  We collect this information when you visit our sites.  We use this data to improve our websites, conduct analytics, and provide relevant advertising, including targeted advertising. For more information regarding our use and disclosure of information for advertising purposes, see our Cookie Policy below. 

• Account Information. You are required to provide your first name, last name, job function, industry, country, age range, email, username, password, and security responses when you set up an account and seek a credential. We use the account information to create and administer the account, award credentials, perform business analytics, and, if you opt into marketing emails, provide information about relevant SAI courses, events, community opportunities, or benefits. Based on your personal settings, we may contact you with information about your account or with marketing and event messages. 

• Other Information You Choose to Provide. You may provide us with different types of information depending upon your use of our websites. From time to time, we may collect information when you choose to contact us through our websites or take other voluntary actions, such as participating in a contest, attending a webinar, responding to a survey, submitting a proposal to present at one of our events, volunteering to assist us with our events, joining a user group, posting in a forum, Slack channel, email group, or otherwise submitting content on a community page. We process this information to fulfill requests you have made and for business analytics.

• Profile data. Profile data may include your first and last name, information relating to your industry and job function, your phone number, country, address, gender identity, age range, income range, highest level of education, ethnic background, credential history, photograph, biological information, and work history.  This information will be used to populate your online profile and for SAI’s internal business purposes. For further information regarding sensitive information, see the Colorado, Delaware, Maryland, Minnesota, New Jersey, and Oregon section below.

• Your payment card information. We use your payment card information to process payment for any orders you make, including membership and certification renewals and purchase of on-demand content. We do not store any payment card information within SAI-owned systems.

• Certification information. When you take a test to obtain a certification, we obtain your name and test score.  We obtain this information in order to award your certification, if earned.  We also collect and store any continuing education you earn through our system or self-report in order to maintain your certifications.

• Dietary restrictions.  If you register for an event that includes one or more meals, we will ask you if you have any dietary restrictions.  If you provide this information to us, we will disclose it to our catering and servers to ensure that you receive meals meeting your restrictions.

5. Retention of Personal Data

The information, including Personal Data, that we obtain about you will be retained for as long as it is reasonably necessary for a business purpose, including to support your membership and validate your credentials, and in accordance with our then-current document retention policies and practices. For any lifetime memberships or credentials, we will retain your Personal Data in accordance with our document retention policies and practices unless and until you ask us to delete it.

6. Sharing of Personal Data

Sharing for Purposes of Providing SAI Services

We will share your Personal Data with other SAI entities, volunteers, business partners, or third-party service providers to: 

• provide you with our membership, membership benefits, products, services, or otherwise fulfill your requests; 

• send you marketing and event materials, newsletters, surveys, polls, or other communications on our behalf; 

• deliver joint services, content, events, conferences, seminars, or other programs; 

• deliver events, including coordinating volunteers or providing event facilities or lodging; 

• support operations through software, system, and platform assistance, cloud hosting, and data analytics.

• obtain analytics services. For information on our use of service providers for analytics purposes, see our Cookie Policy below. 

For example:

• We use vendors to assist us with managing online shopping carts, processing payments, delivering relevant marketing to you, offering exclusive benefits you may be entitled to as a member, such as digital badges, administering certification exams, and analyzing and enhancing data.

• If you would like to present at one of our events and have submitted a proposal for our consideration, we will share your submission with subject matter experts who have volunteered to assist us in evaluating proposals and selecting presenters.

• If you have volunteered to assist us with an event, we will share your name and contact information with the volunteer coordinator for the event.

• Sponsors and exhibitors at Scrum Alliance events may ask to scan your event badge so that they can contact you with additional information. Scrum Alliance uses a third-party company to provide badge scanning services to those exhibitors who request it. Third party data practices are subject to the third party’s own policies and disclosures. We encourage you to familiarize yourself with and consult the third-party disclosures, privacy policies, and terms of use. 

Where required by law, SAI entities, volunteers, and business partners are governed by applicable confidentiality and processing agreements.

Sharing for Purposes of Sales, Shares, and Targeted Advertising

We collect, use and share information to advertise our products and services. Various third parties such as ad agencies, ad networks, publishers, social media platforms, and technology providers may be involved in this process. For information regarding targeted advertising, please see our Cookie Policy below. 

Sharing for Other Purposes

In certain cases, we are required to disclose Personal Data to investigate, prevent, or take action concerning: 

• legal requests; 

• the enforcement of our Terms of Use; 

• the protection of our rights, property, or personal safety or the rights, property, or personal safety of our users and the public; 

• our exercise of legal rights;

• any other disclosure required by law.

We may also share information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business. 

7. Social Plugins, Social Media Widgets, and Connecting Via Social Networks

Our Service includes different types of “social plugins” and social media widgets.

These features may collect your IP address and information on which pages you are visiting on our websites, and they may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing it.

Our Service includes social media widgets from Meta, LinkedIn, and X (formerly Twitter) that use cookies to track users and advertise to them when they visit those platforms.

If you do not want to be tracked by social media widgets, log out of all social networks you’re logged in to before visiting our website.

8. Other Websites

This Privacy Policy only applies to SAI websites and websites of our affiliates linking to this Privacy Policy.  Our websites contain multiple links to other websites.  Please be aware that we are not responsible for the privacy practices of those websites.  When visiting other websites, you should read those sites’ privacy policies.

9. Children Under the Age of 13

Our websites are not directed toward children under the age of 13.  We do not knowingly collect Personal Data from children under 13.  If you are under 13, do not use or provide any information on our websites.  If we learn we have collected or received Personal Data from a child under 13, we will delete that information.  If you believe we might have information from or about a child under 13, please contact us at [email protected].

10. Colorado, Delaware, Maryland, Minnesota, New Jersey, and Oregon

For residents of Colorado, Delaware, Maryland, Minnesota, New Jersey, and Oregon, our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy and Cookie Policy.

Some of our disclosures of Personal Data may be considered a “sale” or “share” under applicable law, which is often defined to include a disclosure for something of value. We may also process your Personal Data for purposes of targeted advertising. We do not process Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. 

Some of the Personal Data we collect may be considered sensitive personal data under applicable law. We collect sensitive personal data with your consent.

Requests

You have the right to exercise choice over your personal data as follows:

• Verifiable Requests: You have the right to:

• Confirm whether or not we are processing your personal data, and in some regions, confirm the categories of personal data we have processed;

• Access your personal data;

• Correct inaccuracies in your personal data;

• Delete your personal data; 

• Obtain a copy of your personal data that you previously provided to us in a portable and readily usable format.

If you are a Minnesota or Oregon resident, you also have the right to obtain a list of the specific third parties to which we have disclosed personal data.

If you are a Delaware or Maryland resident, you also have the right to obtain a list of categories of third parties to which we have disclosed your personal data.

• These rights are verifiable rights, meaning that we need to verify your identity before fulfilling them. To exercise any of these rights, submit a request through our form (specifying the rights you wish to exercise). If you have an account with us, we may require you to submit the request through your account. We will confirm receipt of and respond to your request consistent with applicable law. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we cannot verify your identity, we may deny your request in accordance with applicable law.

• Sales and Targeted Advertising: You have the right to opt-out of us selling or sharing your personal data or processing your personal data for purposes of targeted advertising. To exercise this right, click here to manage your technology preferences or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you opt-out through either of the above methods we do not know who you are within our systems, and your opt-out will apply only to information collected through tracking technologies on the specific browser from which you opt-out or, where required by law, to any pseudonymous profiles we maintain associated with your browser or device. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings. If you are logged into your account when you submit the request, where required by law, we will apply the request to your account. If you want the opt-out to apply to information we have about you in our systems, such as your email address, please also submit a request through our form here (specifying the right you wish to exercise).

• Consent: You have the right to revoke consent previously given to us for the processing of your personal data. To revoke consent, write us at the email or postal address set out in the Contact Us section below (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.

Your rights are subject to exceptions and our retention practices. You have the right not to be discriminated against for exercising any of your rights. To the extent permitted by law, rights requests must be exercised through the applicable designated method listed above. You may make a rights request using an authorized agent. Except for rights requests made by opt-out preference signal, we will require written and signed proof of the agent’s permission to do so and we may verify your identity directly with you.

You have the right to appeal our decision in response to your request. To appeal, please write us at the email or postal address set out in the Contact Us section below and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows:

• For Colorado residents: https://coag.gov/file-complaint/

• For Delaware residents: https://attorneygeneral.delaware.gov/fraud/cmu/complaint/ 

• For Maryland residents: https://www.marylandattorneygeneral.gov/Pages/CPD/Complaint.aspx. 

• For Minnesota residents: https://www.ag.state.mn.us/Office/Forms/ConsumerAssistanceRequestForm.pdf

• For New Jersey residents: https://www.njconsumeraffairs.gov/Pages/Consumer-Complaints.aspx 

• For Oregon residents: https://justice.oregon.gov/consumercomplaints/ 

11. Important Notices to Non-U.S. Residents

This section applies to consumers in the EEA and the United Kingdom. We are headquartered in the United States of America. Personal Data may be accessed by us or transferred to us in the United States. Please be aware that your information may be transferred to, processed, maintained, and used on computers, servers, and systems located outside of your state, province, country, or other governmental jurisdiction where privacy laws may not be as protective as those in your country of origin. If you are located outside of the United States and choose to use our Service, you do so at your own risk. You are also consenting to the application of United States federal and Colorado state law in all matters concerning the Service and this Privacy Policy.

In certain circumstances, we may transfer the Personal Data of residents of the European Economic Area (EEA) and/or the United Kingdom through data controllers such as a course provider. In these circumstances, we enter into appropriate agreements with the course provider or other third party, including the use of Standard Contractual Clauses. 

11.1 Data Controller

SAI is the data controller of the Personal Data you provide on our Service.

You may contact SAI at [email protected] or by mail:

Scrum Alliance, Inc.
7237 Church Ranch Blvd. #410
Westminster, CO 80021 USA

11.2 Purposes of Processing and Legal Basis for Processing

If you reside in the United Kingdom or in a country in the European Union, you are entitled to an explanation of the legal bases upon which we rely to process your Personal Data. The legal bases for collecting and using the Personal Data described above will depend on the context in which we collect the data and the Personal Data at issue. These legal bases include the following: (1) with your consent; (2) as necessary to perform a contract when you request services; (3) as necessary for our legitimate interests in providing you with our products and services, enhancing our web services, conducting analytics and delivering relevant advertising; and (4) to comply with a legal obligation (e.g., to defend against a claim against us or if we bring a claim against you, providing information to law enforcement or governmental authorities or to comply with legal process).

It may also be necessary for SAI to process personal information to establish exercise or defend against fraud, illegal activity, and claims and other potential liabilities, including by enforcing the terms and conditions that govern the services we provide.

11.3 Your Rights Regarding Personal Data

Access and Confirmation.  You have the right to ask us if we process Personal Data about you, and in some circumstances, to obtain a copy of your Personal Data. 

Deletion and Blocking.  Under certain circumstances, you may have the right to have your Personal Data deleted or blocked without undue delay. If you have your Personal Data deleted, you may not be able to receive certain services that require such Personal Data.

Direct Marketing.  You have the right to object to our processing of Personal Data in specific circumstances.

Consent.  To the extent we are processing Personal Data on the basis of your consent, you have the right to withdraw consent at any time. 

Data Portability.  Under certain circumstances, to the extent we are processing your Personal Data on the basis of consent, or that it is necessary to perform a contract with you, and the processing is carried out by automated means, you have the right to receive the Personal Data in a structured, commonly used and machine-readable format.

To exercise those rights, please contact us at [email protected] or by mail:

Scrum Alliance, Inc.
Attn: Data Privacy Officer
7237 Church Ranch Blvd. #410
Westminster, CO 80021 USA

12. Contact Us

Should you have any further questions or suggestions regarding the protection of your Personal Data processed in connection with the use of our Service, or if you have trouble accessing this Privacy Policy, please contact us at [email protected].

13. Changes to Our Privacy Policy

We may make changes to our Privacy Policy. We make changes to the Privacy Policy available on this page and note that the policy has been updated.  If we make material changes to how we treat your Personal Data, we will notify you by email to the primary email address specified in your account and through a notice on our home page.

14. Schools and Student Use

The following applies in the event that a school, school district, or teacher in the United States (each, a “School”) shares Personal Data with SAI in connection with providing SAI’s educational services to the School’s students (“Students”) as part of the School’s educational program. In such cases, the Student data may include information defined as “education records” by the Family Educational Rights and Privacy Act (“FERPA”) or other information protected by similar state student data privacy laws (“Student Personal Data”). Each School has agreed that it will only provide personal information from students over the age of 13. SAI does not have actual knowledge that it collects Personal Data from Students under the age of 13.

SAI’s use of Student Personal Data is governed by SAI’s contract with the applicable School, SAI’s Privacy Policy (including this Section), and any applicable privacy laws. SAI will adhere to the following in connection with Student Personal Data:

• SAI will not disclose Student Personal Data to any third parties, except as necessary to provide the applicable services to the School. 

• Student Personal Data is retained as long as necessary to provide the applicable services to the School.

• SAI will store Student Personal Data in the United States.

• If you are a Student’s parent or guardian and wish to learn what specific Student Personal Data is held by SAI about such Student and/or request correction or deletion of any such data, please email [email protected] with the email subject “Student Personal Data Transparency Request.” Please note that deletion of Student Personal Data may impair SAI’s ability to validate the Student’s credential(s).

• In the event of a data breach involving Student Personal Data, SAI or the applicable School shall notify the Student in accordance with SAI’s contract with the School.

This Privacy Policy was last updated on 03/23/2026.

This Cookie Policy explains how we use Personal Data we collect about you from your browser or device, or directly from you, for analytics and advertising purposes, including for targeted advertising.

1. Cookies

A “cookie” is a small text file that is stored on computers, tablets, mobile phones, and any device used to browse the Internet, capable of storing navigation information for statistical or functional purposes. Some cookies may be used to recognize the user viewing a particular website, make navigation easier, and customize the content. For example, cookies allow us to remember your actions and preferences so that you do not have to re-enter information each time you visit our site or navigate to another page and remember your language and time zone preferences. Cookies also allow us to keep track of items you add to your shopping cart.

There are several types of cookies, including, for example, browser cookies, session cookies, and persistent cookies. Session cookies are cookies that expire when you close your browser and persistent cookies are cookies that do not expire until a set expiration date or when you manually delete them. 

We may also use pixels, also known as web beacons. Pixels are code embedded in a service. There are various types of pixels, including image pixels (which are one-pixel transparent images) and JavaScript pixels (which contain JavaScript code). Pixels are often used in conjunction with cookies. When you access a service that contains a pixel, the pixel may permit us or a third party to collect information from your browser or device, or to drop or read cookies on your browser. 

While browsing on our websites, SAI may collect information about traffic flow and visits to the pages of our domain “scrumalliance.org.” This information, obtained through cookies, will be treated in a secure manner.

For further information about cookies, visit www.allaboutcookies.org.

You can set your browser to accept or reject the setting of all or certain cookies, or to request to be notified when a cookie is set. Each browser has specific configuration instructions. However, please be aware that the blocking of cookies may have the effect that you will not be able to use all of our website functions.

2. Analytics Cookies 

We collect and use information to understand trends, usage, and activities, for example through surveys you respond to and tracking technologies that we incorporate into the Service (such as Google Analytics). Google Analytics helps us determine the number of visitors to our site and helps us understand how users find our site. Google Analytics may record your geographical location, device, internet browser, operating system, and IP address. We are not provided with information allowing us to link an individual to an IP address. More information about Google Analytics can be found in its Terms of Service and in its Privacy Policy.

3. Cookie Settings

Use the following link to change your cookie settings on the Scrum Alliance website: