Privacy Policy

MFA Website Privacy Policy

Last Updated October 2026

I. PRIVACY POLICY

This is the privacy policy (“Policy”) of Managed Funds Association (“MFA”), an organization incorporated in the United States, on behalf of itself, MFA PAC and the MFA Foundation.  MFA represents the global alternative asset management industry. MFA’s mission is to advance the ability of alternative asset managers to raise capital, invest it, and generate returns for their beneficiaries. MFA advocates on behalf of its membership and convenes stakeholders to address global regulatory, operational, and business issues. MFA has more than 180 fund manager members, including traditional hedge funds, private credit funds, and hybrid funds, that employ a diverse set of investment strategies. Member firms help pension plans, university endowments, charitable foundations, and other institutional investors diversify their investments, manage risk, and generate attractive returns throughout the economic cycle. For the purposes of applicable European data protection laws, MFA is the controller of your personal information.

II. WHAT THE POLICY COVERS

This Policy explains our practices regarding the collection and use of personal information from members, sponsors, event attendees, industry contacts, and other stakeholders (such as academics, investors, and policymakers), and registered users or other visitors to MFA’s website (“Website”):www.mfaalts.org.

This Policy provides information on:

• Personal Information Collected;
• Use and Disclosure of Collected Information;
• Information Security and Data Retention;
• Communications;
• International Data Transfers;
• Changes to the Policy; 
• Your Privacy Rights; and 
• How to Contact Us.

This policy does not apply to the practices of third-party companies that MFA does not own or control, to third-party websites (even if linked to the Website), or to individuals that MFA does not employ or manage.  The Website may contain links to other sites.  MFA is not responsible for the data practices or privacy policies of these third-party sites.

Please ensure that you provide a copy of this privacy notice to any third parties whose personal information you provide to us (such as your directors, officers, employees, and/or beneficial owners).

III. PERSONAL INFORMATION COLLECTED

Personal Information: We may collect a variety of your personal information, including contact information (i.e., to communicate with or respond to requests from members and non-members), professional information, financial information (i.e., to process dues, fees, donations), IT and online activity information, demographic information, as well as audio and visual information. We collect such personal information to service your MFA membership, in furtherance of MFA’s mission statement provided above or for other legitimate business interests as you interact with MFA, such as on our Website or through MFA and industry conferences and events.  We may collect your personal information, directly from you i.e., through your membership subscription, or as provided voluntarily to us, such as when you register for, or sponsor, an MFA event, request our newsletter, submit a Press Inquiry or Contact Us form, provide payment for dues or conferences, or provide personal information through our Website. We may obtain certain of your personal information indirectly i.e., from an alternative assets industry subscription database or from a referral.  

Website Information and Tracking Technologies: We, and/or our third party service providers, may collect information from your use of our Website or online services, including technical information about your interaction with our Website. This may include the time and date of your visit, your IP address, referral URLs (or the website you came from when you visit our Website), operating systems and browser types, and other information gathered through the use of cookies or other similar technologies.  We may use these technologies in the collection of information you provide us or when your web browser accesses information on this Website to store your Website preferences, to help us to improve or optimize our Website, to understand Website traffic, and to offer you a more personalized experience.  You can configure your browser to disable, block or alert you when a site is attempting to send a cookie.  Because an industry-standard Do-Not-Track protocol is not yet established, the choices we offer will continue to operate as described in this Privacy Policy independent of any Do-Not-Track signals. For additional information on our use of cookies and other tracking technologies please see our Cookies Policy on our Website.

We use Google Analytics to evaluate the use of our Website. Google Analytics uses cookies and other identifiers to collect information, such as how often users visit the Website, what pages they visit when they do so, and what other websites they visit prior to visiting our Website. For information about Google’s privacy practices, please refer to the Google Privacy Policy: https://policies.google.com/privacy?hl=en-US#infocollect.

Children’s Privacy: This Website is not intended for children.  We do not knowingly collect personal information from children under the age of 13, and in the event that we learn that a child under the age of 13 has provided information on our Website, we will delete that information as soon as possible.

IV. USE AND DISCLOSURE OF COLLECTED INFORMATION

Third Party Service Providers, Agents, Contractors, Partners, and Event Collaborators: We do not share personal information with unaffiliated third parties for those third parties’ own purposes.  We may, however, share personal information with our third party service providers, agents, contractors, or partners in connection with services that these individuals or entities perform for, or with, MFA.  This includes services such as sending email messages, managing data, hosting our databases, providing data processing services, or providing online consulting services. These service providers, agents, contractors, or partners are restricted from using this data in any way other than to provide services for MFA. We may also share personal information with third party partners, including like-minded organizations, for purposes of planning, administering, evaluating, or assessing interest in events, programs, services, or other initiatives that MFA sponsors, co-sponsors, or supports. Such information will be shared only as reasonably necessary for those purposes.

As Required by Law or for the Protection of Others: We may disclose personal information in response to requests from law enforcement, courts, regulators, or other legal process, as required by applicable law, or where we reasonably believe such disclosure is necessary to protect the rights, property, safety, or interests of MFA, our members, event participants, Website users, or others, including to enforce this Policy or our Website Terms of Use.  

Business Transfers: Your personal information may be disclosed to third parties in the event of a bankruptcy, transfer of assets, reorganization or other restructuring of MFA.

Where you or we are located in the EEA/UK: for further details about how we use your personal information where EEA/UK data protection laws apply, including the legal bases we rely on for such processing, please see Appendix 1.

V. INFORMATION SECURITY AND DATA RETENTION

MFA endeavors to protect personal information in its possession, and uses technical and organizational security measures and safeguards to help protect your information. However, MFA cannot guarantee the security of personal information. Your account information is protected by a password for your privacy and security. You should help to prevent unauthorized access to your account by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your account.

We retain personal information of members for purposes of providing membership services.  Any sensitive personal information that MFA collects from members for government security clearances for meetings with policymakers is destroyed immediately upon the meeting for which such information was collected.  We retain personal information of non-members in order to better service these individuals who may attend MFA events, share common interests, become MFA members, or for other similar legitimate business interests. We will expunge personal information of non-members after ten years with no recorded activity, outreach or communication with MFA, absent a reason to obtain such information to comply with applicable law or for the legitimate interests of MFA.

VI. COMMUNICATIONS

For MFA members, we may use your information to communicate with you to provide membership services, including notifications about relevant industry news and MFA activities (such as meetings, calls, and events).  For non-members, we may send you MFA or industry news and information, notifications of MFA events, or other information that you may sign up for on our homepage. Where required by applicable law, we will request your consent prior to sending any marketing communications.  If, at any time, you would like to unsubscribe from our mailing lists, you may email us at MFA_Privacy@mfaalts.org or follow the instructions to unsubscribe at the bottom of our emails.

VII. INTERNATIONAL DATA TRANSFERS

Certain MFA affiliates and certain recipients listed above are located outside the EEA/UK, in jurisdictions which are not currently considered by the European Commission and/or the UK Government (as applicable) to provide an adequate level of data protection, including in the United States. When you use our Website or provide personal information to MFA through the Website, that information will be transferred to MFA and other recipients in the United States. 

In these circumstances, MFA will take steps to ensure that the personal information is protected, including by entering into standard contractual clauses (“SCCs”) with the recipient, seeking assurances from the recipient that they have Binding Corporate Rules in place, are certified to the EU-U.S. Data Privacy Framework (or UK extension) or otherwise relying on a derogation for the transfer (e.g., where the transfer is necessary for the defense of legal claims).

You can request further information on the data transfer solutions relied upon including a copy of the SCCs by using the contact details at Section X below.

VIII. CHANGES TO THE PRIVACY POLICY

We may update this Policy from time to time and will place any updates on our Website with a “last updated” date at the top of the Policy.  We will inform you of any material changes to the Policy through the Website and/or, if deemed appropriate, by email.

IX. YOUR PRIVACY RIGHTS

You may have certain rights under applicable law, including the right to access or for MFA to update, rectify or delete the information we have on you, as well as the right to object or restrict our data processing activities, withdraw any consent provided or to stop receiving marketing communications.  If you wish to submit a request to exercise your rights as detailed in this Policy, please contact us at the email below.  Where you or we are based in the UK, you have a right to complain to us about our handling of your personal information. We are committed to working with you to resolve any complaint.  Where you or we are based in the EEA/UK, you also have the right to lodge a complaint with a supervisory authority.

X. HOW TO CONTACT US

If you have any comments, questions or concerns about this Policy, or wish to exercise your rights as outlined in Section IX above, please contact us at MFA_Privacy@mfaalts.org.

Appendix 1 – Legal Basis for Processing

Where you or we are located in the EEA/UK, we set out below a description of the ways we use your personal information (referred to as “processing purposes” below) and which of the legal bases we rely on to do so.

Categories of Personal Information	Processing Purposes	Legal Basis (where you or we are located in the EEA or the UK)
Contact Information, Professional Information, Demographic Information, Financial Information	For members: to service your MFA membership, including processing dues, fees or donations	For the performance of our contract with you (Article 6(1)(b) GDPR) Our legitimate interests to effectively and efficiently manage our business (Article 6(1)(f) GDPR)
Contact Information, Professional Information,	For members: to organize meetings, including MFA meetings with government officials	We may have a legal obligation to do so (Article 6(1)(c) GDPR) Our legitimate interests to manage our business and comply with non-EEA/UK legal obligations and to facilitate member meetings (Article 6(1)(f) GDPR)
Contact Information	For members and non-members: to communicate with you and respond to requests, complaints or other communications	Our legitimate interests to respond to your communications, which allow us to effectively and efficiently manage our business (Article 6(1)(f) GDPR)
Contact Information, Professional Information	For members and non-members: to share personal information with third party partners, including like-minded organizations, as reasonably necessary to plan, administer, evaluate, or assess interest in events, programs, services, or other initiatives that MFA sponsors, co-sponsors, or supports.	Our legitimate interests, and those of our partners, in planning, administering, evaluating, and assessing interest in events, programs, services, and other initiatives that MFA sponsors, co-sponsors, or supports (Article 6(1)(f) GDPR)
Contact Information	For members and non-members: to send you marketing communications about opportunities we think may be of interest to you	Our legitimate interests to communicate with you and share opportunities that may be of interest (Article 6(1)(f) GDPR) If applicable law requires that we receive your consent before we send you certain types of marketing communications, we will only send you those types of communications after receiving your consent (Article 6(1)(a) GDPR)
Contact Information, Professional Information, Financial Information	For members and non-members: The day-to-day running and management of our business including, to perform general, financial and regulatory accounting and reporting	We may have a legal obligation to do so (Article 6(1)(c) GDPR) Our legitimate interests to effectively and efficiently manage our business (Article 6(1)(f) GDPR)
All Personal Information at Section III above	For members and non-members: enforce or defend our rights, ourselves or through third parties to whom we delegate such responsibilities	We may have a legal obligation to do so (Article 6(1)(c) GDPR)
All Personal Information at Section III above	For members and non-members: to fulfil our legal and regulatory obligations	We may have a legal obligation to do so (Article 6(1)(c) GDPR)
All Personal Information at Section III above	For members and non-members: to manage our network and information systems security e.g., to ensure network and information security, including monitoring authorized users’ access to our Website for the purpose of preventing cyber-attacks, unauthorized use of our systems and websites, prevention or detection of crime and protection of personal information	We may have a legal obligation to do so (Article 6(1)(c) GDPR) Our legitimate interests to ensure that our systems are secure and that individuals are using our systems correctly (Article 6(1)(f) GDPR)
IT and Online Activity Information	For members and non-members: to monitor, maintain and improve the processes, information and data, technology and communications solutions and services used by, or provided by, us, including this Website	Our legitimate interests to ensure that our systems are secure and that individuals are using our systems correctly (Article 6(1)(f) GDPR)
All Personal Information at Section III above	For members and non-members: To share such personal information with third parties that acquire or are interested in acquiring all or part of our assets or shares, or that succeeds us in carrying on our business	Our legitimate interests to conduct our business, evaluate, complete and administer transactions, including seeking advice from professionals (Article 6(1)(f) GDPR)

 

You have a right to object to the processing of your personal information where that processing is carried out for our legitimate interests. Please note however that we may not be able to fulfil such requests in all instances. Where we need to collect your personal information by virtue of a legal obligation or in light of a contract entered into or to be entered into with you, and you do not provide this personal information when requested, we may not be able to comply with our legal obligations, provide you with our services or perform the contract we have or are trying to enter into with you. In such cases, we may have to terminate our relationship with you or no longer provide you with our services.