Terms and Conditions & Privacy
Website Terms of Use
15 June 2026Welcome to CSA.org, a website of The Chief of Staff Association ("CSA", "the CSA", "we", "our", or "us"). This page explains the terms by which you may use our website (the "Site") and the content, services and other functionality offered on or through the Site (collectively, the "Services").By accessing or using the Services, you signify that you have read, understood, and agree to be bound by these terms, together with any rules, policies and guidelines set forth in, referred to and/or linked herein (collectively, the "Agreement"), whether or not you are a registered user. CSA reserves the right to make unilateral modifications to these terms and will provide notice of these changes as described below.This Agreement applies to all visitors, users, and others who access the Services, including authorised participants in courses or events hosted by CSA ("Users"). In addition to these General Terms of Use, Clients of CSA are subject to our Client Terms & Conditions at CSA.org (the "Client Terms & Conditions"), incorporated herein by reference. For Clients, "Services" includes all Events (as defined in the Client Terms and Conditions).Please read this Agreement carefully. It contains a mandatory individual arbitration provision and class action/jury trial waiver that requires, unless you opt out, the use of arbitration on an individual basis to resolve disputes, rather than jury trials or class actions. To the fullest extent permitted by applicable law, you expressly waive your right to seek relief in a court of law and to have a jury trial on your claims, as well as your right to participate as a plaintiff or class member in any class, collective, private attorney general, or representative action or proceeding.If you are based in the United Kingdom: Nothing in this Agreement affects your statutory rights as a consumer under English law. This Agreement shall be governed by and construed in accordance with the laws of England and Wales. Any dispute arising out of or in connection with this Agreement shall be subject to the non-exclusive jurisdiction of the courts of England and Wales. You are not required to resolve disputes by arbitration and retain the right to bring proceedings before the courts of England and Wales. You also retain your right to participate in any group litigation or representative proceedings available to you under English law.1. Use of Our ServicesA. EligibilityThis is a contract between you and the CSA. You must read and agree to these terms before using the Services. If you do not agree, you may not use the Services. You may use the Services only if you can form a binding contract with the CSA and only in compliance with this Agreement and all applicable laws. The Services are not available to any Users previously removed by the CSA.B. Access to the SiteSubject to this Agreement, you are granted a non-exclusive, limited, non-transferable, freely revocable right to use the Services for your internal business purposes only. The CSA reserves all rights not expressly granted herein and may terminate this licence at any time for any reason or no reason.C. CSA AccountsYour CSA account gives you access to the Services and functionality that we may establish and maintain at our sole discretion. You do not own your CSA account or possess any rights to data stored on our servers. If you open an account on behalf of a company or other entity, "you" includes you and that entity, and you represent that you are authorised to bind the entity to this Agreement.You must provide accurate and complete information, keep it up to date, and keep your password secure. You are solely responsible for activity on your account and must notify us immediately of any unauthorised use.By providing your email address, you consent to receiving Services-related notices by email, including notices required by law, in lieu of postal communication. We will only send you marketing communications where you have opted in to receive them, and you may withdraw that consent at any time via the unsubscribe link in any message, through your User portal, or by contacting us at contact@csa.org. Opting out of marketing communications will not affect your receipt of Services-related noticesD. Services RulesYou agree not to:- Copy, distribute, or disclose any part of the Services in any medium, including by automated scraping
- Use automated systems beyond what a human could reasonably produce using a conventional browser
- Transmit spam or unsolicited communications
- Interfere with or compromise system integrity or security
- Impose an unreasonable load on our infrastructure
- Upload viruses, malware, or other harmful code
- Collect personally identifiable information from the Services
- Use the Services for commercial solicitation
- Impersonate another person
- Interfere with the proper working of the Services
- Access content through unauthorised means or bypass access-restriction measures
- Use any content for machine learning, AI training, or identification of natural persons
- Use the Services in competition with us or for competitive analysis
- Reverse engineer or create derivative works of any materials or software
- Remove proprietary notices or mirror materials on another server
- Use the Services in a way that disrupts our networks or other services
- You have obtained all consents required by law to provide any User Content relating to third parties
- Your User Content will not violate any law or infringe any third-party rights, including Intellectual Property Rights and privacy rights
- You will not upload personal information of children under 13 or the applicable age of digital consent
- Your User Content does not include nudity, hate speech, threats, abusive or defamatory content, illegal content, malicious code, spam, or otherwise objectionable material
- To the best of your knowledge, all User Content is truthful and accurate
- Protect the confidentiality of all Confidential Information with at least the same degree of care as you would use to protect your own highly sensitive confidential information, but in no event less than a reasonable degree of care
- Not use any Confidential Information for any purpose other than to exercise your rights or perform your obligations under this Agreement
- Not disclose any Confidential Information to any person or entity, except your service providers or financial or legal advisors who need to know the Confidential Information and are bound by non-use and non-disclosure restrictions at least as restrictive as those set forth herein
- CSA Fee: The portion of the Fee that the CSA may retain as consideration for providing the Services.
- Payment Processor: The third-party payment processor, currently HubSpot, which we engage to process payments.
- Subscription: A portion of the Services available on an automatically renewing subscription basis.
- Subscription Fee: The recurring amount due for a Subscription; changes are made at the sole discretion of the CSA and will be communicated in the renewal notification email sent 21 days prior to the auto-renewal date.
- Subscription Term: The period in which your subscription is active and paid for, beginning on the start date confirmed at purchase and continuing until the end of the agreed billing period, unless renewed or terminated earlier; Subscription Terms are annual unless otherwise agreed at purchase.
- Third-Party Fees: The portion of the Fee retained by third parties, including the Payment Processor, that we may engage from time to time.
- The Subscription Fee for the applicable Subscription
- Any applicable Taxes
- Any other charges you may incur in connection with such Subscription, subject to adjustment in accordance with this Agreement
Privacy Notice
15 June 2026Welcome to CSA.org (the "Site"), a website of The Chief of Staff Association ("CSA", "the CSA", "we", "our," or "us").This Privacy Notice explains how we collect, use, disclose, and otherwise process information, including personal information, in connection with our Site and the related content, services and other functionality offered on or through the Site (collectively, the "Services").We may also receive personal information from our affiliated and partner organisations, including Vannin Consulting, LLC ("Vannin"), pursuant to intercompany arrangements for the purposes of user and worker administration, event facilitation, and the provision of Services.We may also choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.This Privacy Notice does not address our privacy practices relating to CSA job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified information). This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.Personal Information Submitted by Site VisitorsWe may collect the following personal information submitted to us by visitors to our Site:- Contact information, including first name, last name, title, employer, status in respect of CSA, email address, mailing address, phone number and communication preferences.
- Inquiry information, including information provided in custom messages sent through the forms or contact information provided on our Site.
- Survey responses and feedback
- Event attendance records, images (video or photographs) or audio from events (when permitted by law), and relevant travel bookings and dietary or mobility requirements
- Session records, including sessions completed, course results and assessment answers
- Online account information, including username and password, as well as associated security questions and answers.
- Contact information as described in the Site Visitors section above.
- Demographic information, including date of birth, age, gender and country of citizenship.
- Professional and education information, including employment and education history, as well as degrees, certificates and other honours achieved.
- Other Client profile information, including a photograph for the online account or other personal information shared through the account.
- Client application information, including decisions, personal statements, referral information, interview summaries and any other personal information provided in connection with the application. We may record information from an application even if it is not fully submitted.
- Client history information, including Client status, login activity, transactions and benefits, the Services we provide in connection with the Client, and the cancellation date and associated cancellation code if the Client's contract is cancelled.
- Client support information, including personal information provided when contacting us in connection with Client services or when requesting advice.
- Client payment information, including payment status, billing address, payment card details, bank account information, payment dates, renewal information and billing history. We utilise a third-party provider to process payments on our behalf and do not accept payment directly through our Site.
- Referrals: Our Clients and trusted advisors often refer individuals to us for purposes of facilitating an inquiry or application. We collect any personal data that the referring individual provides.
- Intercompany Partners: We may receive personal data, including names, contact information, and employment details, from our intercompany partners, such as Vannin, in connection with Client enrolment and administration arrangements pursuant to applicable intercompany agreements.
- Social Media: When an individual interacts with our Services through social media networks, we may receive personal data that they permit the social network to share with third parties. The data received depends on the individual's privacy settings with the relevant social network.
- Service Providers: Our service providers that perform services on our behalf, such as survey and marketing providers, may collect and share personal information with us.
- Information Providers: We may obtain personal data from third-party providers to correct or supplement personal information we collect, such as updated contact information.
- Publicly Available Sources: We collect personal data from publicly available sources, such as contact and employment-related information, to contact individuals, personalise our Services, and better understand the demographics of those with whom we interact.
- Manage our organisation and its day-to-day operations, and communicate with individuals via email, text message, social media and/or telephone
- Market our Services and request individuals to complete surveys about our service offerings
- Administer, improve and personalise our Site and Services, including by recognising returning individuals, and identify and analyse how individuals use our Site and Services
- Determine Client eligibility, create and maintain Client accounts, process payments, and facilitate Client benefits and services
- Conduct research and analytics on our Client base and Services, and improve and customise our offerings to address the needs and interests of individuals we interact with
- Test, enhance, update and monitor the Services, diagnose or fix technology problems, and help maintain the safety, security and integrity of our property, Services and technology assets
- Defend, protect or enforce our rights or applicable contracts and agreements, resolve disputes, and protect our business interests and the interests and rights of third parties
- Detect, prevent, investigate or provide notice of fraud or unlawful activity
- Facilitate business transactions and reorganisations
- Comply with contractual and legal obligations
- Affiliates: We may share personal information with companies owned or controlled by, or under common ownership with, the CSA, particularly when we collaborate in providing the Services.
- Service Providers and Partners: We share personal information with third parties who assist us in delivering surveys, events, education and training, Client services, communications, payment processing, website hosting, IT, analytics, and other operational services on our behalf.
- Client Partners: Because becoming a Client is by invitation only, we may rely on third-party partners to identify and contact potential Clients. This information may include employment status and contact information.
- Other Businesses As Needed To Provide Services: We may share personal information with third parties that an individual engages with through our Services or as needed to fulfil a request or transaction including, for example, payment processing services, course administration services and event planning services.
- Business Transaction or Reorganisation: We may disclose personal information in connection with a merger, acquisition, joint venture, financing, sale of assets, insolvency, bankruptcy, or receivership.
- Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement: in connection with the establishment, exercise, or defence of legal claims; to comply with laws or to respond to lawful requests and legal process; to protect our rights and property and the rights and property of others, including to enforce our agreements and policies; to detect, suppress, or prevent fraud; to protect the health and safety of us and others; or as otherwise required by applicable law.
- Otherwise With Consent or Direction: We may disclose personal information about an individual to third parties or publicly with their consent or direction. Nevada residents may submit an opt-out request under Chapter 603A of the Nevada Revised Statutes by contacting us at admin@csa.org.
- European Economic Area: https://edpb.europa.eu/about-edpb/board/members_en
- United Kingdom: https://ico.org.uk/global/contact-us/
- Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
- Contract: Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract, including our Terms of Use.
- Legitimate Interest: Where processing is necessary for legitimate interests not overridden by your rights or freedoms, such as providing and improving our Services, conducting analytics, and communicating with you.
- Vital Interest: Where processing is necessary to protect the vital interests of you or another person.
- Public Interest: Where processing is necessary to perform tasks carried out in the public interest or in the exercise of official authority.
- Legal Obligation: Where processing is necessary to comply with our legal obligations.
- Consent: Where we have your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing. When we process special categories of personal information, we do so only where permitted under applicable law. You are not required to provide personal information to us, but if you choose not to, we may not be able to provide certain products or services to you.
- For clarity, we rely on these bases as follows. When you apply to become a Client and throughout your relationship with us, we process your personal information on the basis of contract, including taking steps at your request prior to entering into a contract, to assess your application, create and maintain your account, process payments and provide the Services. We send marketing communications, including email newsletters, on the basis of your consent, which you may withdraw at any time using the unsubscribe link in any message or by contacting us at admin@csa.org. We rely on our legitimate interests to improve our Services, conduct analytics and maintain the security of our systems.
- Access and obtain a copy of your personal data
- Receive your personal data in a structured, commonly used, machine-readable format
- Correct inaccurate or incomplete personal data
- Restrict processing where continued processing is not justified
- Object to processing based on legitimate interests or to direct marketing
- Withdraw previously provided consent
- Request deletion of your personal data