Legal
Privacy Policy
Effective: June 29, 2026 · Last updated: June 29, 2026 · Version 2026-06-29
True Value Partnering Institute, LLC ("TVPi," "we," "us," or "our") respects your privacy. This policy explains what we collect, how we use it, and the rights you have over your personal data.
This Policy at a Glance
We collect your name, email, company, and professional details when you sign up for our programs, attend our events, or subscribe to our newsletter. We use Stripe to process payments — we never see or store your card number. We send marketing emails through Mailchimp and you can unsubscribe anytime. We use analytics tools to understand how people use our website. We don't sell your personal data. If you're in the EU/UK, you have specific rights under GDPR and we honor them. If you're in California, we comply with the CCPA/CPRA. Full details below.
1. Who We Are
TVPi is a professional development organization for legal pricing, project management, and legal operations professionals. We operate the ALPP (Accredited Legal Pricing Professional) accreditation program, conferences, workshops, courses, and The Pricing Shift newsletter.
For GDPR purposes, TVPi is the data controller. You can reach us at charlene@tvp-institute.com or via tvp-institute.com.
2. What Information We Collect
Information you provide directly
- Account information: your name and email when you create an account or sign in via magic link.
- Professional details: job title, law firm or company, professional background, and career stage when you apply for ALPP accreditation or register for events.
- Event registration data: name, email, company, dietary preferences, and guest information for conferences and workshops.
- Payment information: billing details for purchases, processed securely by Stripe. We never receive or store your full credit card number.
- Newsletter subscription: your email when you subscribe to The Pricing Shift or other TVPi communications.
- Survey responses: your answers to TVPi surveys, polls, or feedback forms.
- Communications: any messages you send us via email, contact forms, or other channels.
Information collected automatically
- Device and browser information: IP address, browser type, operating system, screen resolution, device type.
- Usage data: pages visited, time on page, referral URLs, click patterns.
- Cookies and similar technologies: see Section 7.
Information from third parties
- Accreditation verification: credential information from Accredible, our digital credentialing platform.
- Payment confirmations: transaction status and billing details from Stripe.
3. How We Use Your Information
To deliver our programs and services
- Processing ALPP applications and maintaining credential status.
- Registering you for events, workshops, courses, and cohorts.
- Issuing digital credentials and certificates via Accredible.
- Processing payments and sending receipts.
- Providing access to member-only content and communities.
To communicate with you
- Program updates, event reminders, and accreditation notices.
- The Pricing Shift newsletter and other subscribed content.
- Responses to inquiries and support requests.
- Marketing communications about TVPi programs (with your consent or where we have a legitimate interest).
To improve our website and programs
- Analyzing website usage to improve navigation and content.
- Recording user sessions on select pages to identify usability issues (via Microsoft Clarity — see Section 7).
- Researching and developing new programs.
To meet legal obligations
- Maintaining financial records required by tax law.
- Responding to lawful requests from authorities.
- Protecting our legal rights and enforcing our terms of service.
4. Legal Bases for Processing (GDPR)
If you're in the EEA, UK, or Switzerland, we rely on the following legal bases under the GDPR:
Contract performance (Article 6(1)(b))
- Processing ALPP accreditation applications.
- Registering you for events and programs you've purchased.
- Processing payments and delivering purchased services.
- Managing your TVPi account.
Legitimate interests (Article 6(1)(f))
- Marketing communications to existing members about similar programs (you can opt out anytime).
- Analyzing aggregated, anonymized website usage to improve our services.
- Protecting our website and systems from fraud and abuse.
Our legitimate interests do not override your fundamental rights. You can object to such processing at any time (Section 9).
Consent (Article 6(1)(a))
- Marketing emails to people who aren't existing members.
- Non-essential cookies and tracking (including Microsoft Clarity session recordings and the LinkedIn Insight Tag).
- Any other processing where we've specifically asked.
You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Legal obligation (Article 6(1)(c))
- Maintaining financial and tax records.
- Responding to lawful data access requests from authorities.
5. Who We Share Your Information With
We don't sell your personal data. We never have, and we don't plan to.
We share your information with the following categories of service providers, each processing data only on our instructions under contractual data protection obligations.
Payment processing
- Stripe — processes all payments. PCI-DSS Level 1 certified. Stripe privacy policy.
Email marketing
- Mailchimp / Intuit — newsletters and marketing emails. Intuit privacy policy.
Website hosting and infrastructure
- Lovable / GPT Engineer — hosts our main website. Lovable privacy policy.
- Supabase — database and authentication infrastructure. Supabase privacy policy.
Data management
- Airtable — CRM and program management database. Airtable privacy policy.
Analytics and website optimization
- Tinybird — anonymized website analytics. Tinybird privacy policy.
- Microsoft Clarity — records sessions on select pages to help us improve usability. Fires only with your consent. Microsoft privacy statement.
Advertising and conversion tracking
- LinkedIn Insight Tag — conversion tracking from LinkedIn advertising. Fires only with your consent. LinkedIn privacy policy.
We may also share your information:
- With professional advisors (lawyers, accountants) under duty of confidentiality.
- If required by law, court order, or government request.
- To protect our rights, safety, or property, or that of our members.
- In connection with a merger, acquisition, or sale of assets — we would notify you first.
6. International Data Transfers
TVPi is based in the United States. If you're located outside the US — particularly in the EEA, UK, or Switzerland — your personal data will be transferred to and processed in the US.
We protect these transfers through:
- The EU-US Data Privacy Framework (DPF), where our service providers are certified.
- Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our processor agreements.
- The UK International Data Transfer Agreement or UK Addendum to SCCs, where applicable.
7. Cookies and Tracking Technologies
Strictly necessary
Required for the website to function — session cookies for authentication (magic-link login) and security. You can't opt out of these.
- Supabase authentication cookies (session management).
- Stripe cookies (payment security and fraud prevention).
Analytics
- Tinybird: page views, referral sources, browser type, session information. Set only with your consent.
Functionality and performance
- Microsoft Clarity: mouse movements, clicks, and scrolls on select pages. Retained up to 90 days. Cookies: CLID, MUID, ANONCHK, SM, _clck, _clsk. Set only with your consent.
Advertising and conversion tracking
- LinkedIn Insight Tag: truncated IP, page visit events, and browser cookie identifiers for conversion tracking and audience building. Cookies: _li_fat_id, li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory, li_gc. Set only with your consent.
How to control cookies
You can control non-essential cookies through our cookie consent tool when displayed, or through your browser settings. Most browsers let you block or delete cookies, though blocking all cookies may affect some features.
Do Not Track / Global Privacy Control
We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a request to opt out of any sharing of your personal information for cross-context behavioral advertising.
8. Data Retention
We keep your information only as long as needed for the purposes described in this policy.
- Active member profiles: for the duration of your membership, plus 2 years after your last interaction.
- ALPP accreditation records: 7 years after credential issuance.
- Payment and financial records: 7 years (US tax law).
- Event registration data: 3 years after the event.
- Marketing consent records: duration of consent, plus 3 years.
- Newsletter subscriber data: until you unsubscribe, plus 30 days to process.
- Website analytics (Tinybird): up to 26 months.
- Session recordings (Microsoft Clarity): up to 90 days.
- Unsuccessful applications or inquiries: 1 year.
When data reaches the end of its retention period, we delete it or anonymize it so it can no longer identify you.
9. Your Privacy Rights
Rights for everyone
- Unsubscribe from marketing emails anytime via the unsubscribe link, or by contacting charlene@tvp-institute.com.
- Request information about what personal data we hold about you.
- Ask us to correct inaccurate information.
Additional rights under GDPR (EEA, UK, Switzerland)
- Access: a copy of personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: deletion of your data when there's no compelling reason to keep it.
- Restriction: limit how we use your data while we resolve a concern.
- Data portability: receive your data in a structured, machine-readable format.
- Object: object to processing based on legitimate interests, including direct marketing.
- Automated decision-making: we don't make decisions about you using solely automated processing that produces legal effects.
To exercise any of these rights, email charlene@tvp-institute.com. We'll respond within 30 days and may ask you to verify your identity.
If you're unsatisfied with our response, you may complain to your local data protection authority. UK residents can contact the ICO at ico.org.uk.
Additional rights under US state privacy laws
If you're a resident of California, Virginia, Colorado, Connecticut, Texas, Oregon, Montana, or other states with comprehensive privacy laws, you have additional rights:
- Right to know what personal information we collect, use, and share.
- Right to delete your personal information.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. We don't sell personal information and we don't share it for cross-context behavioral advertising, except through cookies you can control via our consent tool or Global Privacy Control.
- Right to non-discrimination for exercising your privacy rights.
California residents: under the CCPA/CPRA you may designate an authorized agent to make requests on your behalf. We may require proof of authorization.
Categories of personal information we've collected in the past 12 months:
- Identifiers (name, email, IP address).
- Professional information (job title, company, career stage).
- Commercial information (purchase history, programs enrolled).
- Internet activity (browsing history on our site, email interactions).
- Geolocation derived from IP address (country/region only).
We have not sold or shared (for cross-context behavioral advertising) any personal information in the past 12 months.
10. Children's Privacy
Our programs are designed for working professionals. We don't knowingly collect personal information from anyone under 16. If we learn we've collected data from a child under 16, we'll delete it promptly. If you believe a child has provided us with personal information, contact charlene@tvp-institute.com.
11. Security
We take reasonable measures to protect your personal information from unauthorized access, loss, misuse, or alteration:
- Encrypted transmission (HTTPS/TLS) across all our websites.
- Secure authentication via magic-link login (no passwords stored).
- PCI-DSS Level 1 certified payment processing through Stripe.
- Access controls limiting who within TVPi can access personal data.
- Regular review of our service providers' security practices.
No system is 100% secure. If you believe your account or data has been compromised, contact us immediately at charlene@tvp-institute.com.
12. Third-Party Links
Our website and emails may contain links to third-party websites, including event venues, partner organizations, and industry publications. This privacy policy applies only to TVPi's websites and services. We encourage you to read the privacy policy of any site you visit.
13. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Notify you by email if the changes significantly affect how we use your personal data.
- Post the updated policy on our website.
Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
Questions about this policy, requests to exercise your privacy rights, or concerns about how we handle your data:
Email: charlene@tvp-institute.com