NAPF stores your data securely using Google Drive, a cloud-based platform compliant with international standards such as ISO/IEC 27001, SOC 2, and GDPR. Access is restricted to authorized NAPF personnel through encrypted, password-protected accounts with two-factor authentication. NAPF retains your data for as long as you remain an active member, or for up to ten years after your last contact unless you request earlier deletion. Upon expiry or request, your data is deleted by removing it from Google Drive, clearing associated trash folders, and permanently deleting it from shared and backup areas. You have the right to request access to, correction of, or deletion of your data at any time by contacting privacy@napforum.org. Some data may be processed outside the European Economic Area, including in the United States. In such cases, NAPF relies on Standard Contractual Clauses approved by the European Commission to ensure adequate data protection.