What we keep, and why.

Who is responsible

• The organiser of each event is the data controller for its event: it decides what is collected and why.
• Boyne Business Intelligence Ltd (company no. 17293878, England & Wales) builds and runs this app on the organiser's behalf as a processor.
• Questions or requests: privacy@duncanboyne.co.uk. Platform questions: privacy@duncanboyne.co.uk.

If you sign in

• Your email address, so we can send the sign-in link and code and match you to your tickets.
• Your name, company and job title if you add them; they appear on your ticket and, with your permission, to sponsors you book a meeting with or who scan your ticket.
• A session record so you stay signed in on this device.

Lawful basis: contract (providing the app you asked for).

If you register or buy a ticket

• Ticket holder name and email, the ticket type, and a reference code.
• For paid tickets, payment is taken by Stripe; we never see your card number. We keep Stripe's reference and the amount.
• Dietary and accessibility requirements only if you choose to tell us, with a separate tick box. They are shown only to the organising team for catering and access, never to sponsors, and are deleted 30 days after the event.

Lawful basis: contract for the ticket; explicit consent for dietary and accessibility details.

Agenda and favourites

• Which sessions you favourite, stored against your account so they follow you between devices.
• A copy of the public agenda is kept on your device so the app works offline.

Lawful basis: contract.

Session feedback

• If you rate a session: your star rating and any comment you add, stored against your account so you can see and change it.
• Organisers see the ratings and comments with the session and the time, never your name or email address. Other attendees and sponsors see nothing.
• You can rate a talk from 10 minutes after it starts until 14 days after the event.

Lawful basis: legitimate interests (improving the event's programme); contract for keeping it with your account.

Sponsor meetings

• When you book a meeting, the sponsor sees your name, company, job title and the topic you typed.
• Your email address is shared with that sponsor only if you tick the box on the booking form. You can book without it.
• Sponsors may export the details of people who ticked the box, so they can follow up. That sharing ends 3 months after the event, or with your account, whichever is first: from then on the sponsor sees your name, company, job title and topic only, and keeps any copy it already exported.

Lawful basis: contract for the booking; consent for sharing contact details.

If a sponsor scans your ticket

• Only if you switch on Sharing with sponsors on the More page (it is off until you do, and it is set separately for each event): the sponsor whose rep scans your ticket gets your name, company, job title and email address so they can follow up. Other sponsors get nothing.
• The rep can add a rating, short labels and notes about your conversation to that record.
• If the switch is off, a scan saves nothing about you. The rep sees your first name only, so they can ask whether you want to share, and we count that a scan was refused without recording who.
• You can switch it off at any time on the More page. That stops new scans; a sponsor that already scanned you keeps what it collected and is responsible for it from then on. To have it removed, ask that sponsor.
• The copy of that record held in this app is deleted 3 months after the event, or with your account, whichever is first. The sponsor's own copy is the sponsor's to manage.

Lawful basis: consent.

Check-in

• Your ticket's QR code is scanned at the door and the time of entry is recorded against the ticket.
• Door staff see your name and ticket type on their device; that list is removed from their device at the end of the day.

Lawful basis: legitimate interests (running a safe, ticketed event).

Notifications

• Only if you turn them on (the switch on the More page): the push address your browser issues for this device, and two encryption keys that come with it. We never keep the content of notifications we have sent you.
• We use them to send announcements from the organisers of this event and occasional schedule changes, nothing else.
• Each notification is encrypted for your device before it leaves us, then delivered by your browser's push service (Google, Apple, Mozilla or Microsoft), which cannot read it.
• To stop: use the switch on the More page, or block notifications for this app in your browser or phone settings.
• The address and keys are deleted when you switch off, when your browser's push service tells us the address no longer works, or when the event's data is cleared.

Lawful basis: consent.

Security and abuse

• The IP address of sign-in requests is kept for 24 hours to stop abuse.
• Actions taken by organisers (exports, ticket transfers) are logged.

Lawful basis: legitimate interests.

Who else handles it

• Cloudflare (hosting, in the EU/UK region), Resend (email delivery), Stripe (payments), Sessionize (the public agenda, which contains no attendee data).
• No advertising trackers. No data is sold.

How long it is kept

• Account, tickets, favourites and session feedback: until you delete your account or 12 months after the last event you took part in has ended, whichever is first. Expiry removes the account the same way as deleting it yourself, and a ticket for a later event keeps the account until 12 months after that one. When your account is deleted or expires, its tickets are cancelled and your name and email are removed from them; your session ratings stay with nothing linking them to you; and the numbers organisers need (ticket counts, check-ins, payment references) are kept without your details.
• Dietary and accessibility answers: deleted 30 days after the event.
• Sign-in tokens: minutes. Sign-in IP addresses: 24 hours. Sessions: up to 180 days.
• Notification push addresses: until you switch notifications off, the address stops working, or the event's data is cleared.
• Details a sponsor collected by scanning your ticket: the copy held in this app is deleted 3 months after the event, or with your account, whichever is first. The sponsor keeps its own copy for its own follow-up.
• Your email address shared with a sponsor when you booked a meeting: withdrawn from the sponsor 3 months after the event, or with your account, whichever is first. The booking itself stays as the sponsor's record of the meeting (your name, company, job title and topic), and the sponsor keeps any copy it already exported.
• Backups held by Cloudflare's point-in-time recovery expire after 30 days.

Your rights

• You can see and correct your details in the app, clear your dietary and accessibility answers, cancel meetings, switch sharing with sponsors off, and delete your account (More, then Delete my account). Deleting your account cancels your tickets and meetings, removes the sponsor scan records held in this app and signs you out everywhere. A paid ticket for an event that has not happened yet must be refunded by the organiser first; ask them.
• You can ask for a copy of your data or ask us to delete it by emailing the addresses above. We answer within one month.
• Without the app, or before you sign in: Delete your account or your data explains every route.

Complaints

• If you are unhappy with how your data is handled, contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk.