Privacy Policy
Last Updated: May 4, 2026
1. Introduction
At ConvLUB, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, process, store, and share your information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
ConvLUB acts as the data controller for the personal information collected through this Website. For any inquiries regarding your data, please contact us at askfinance6@gmail.com.
3. Information We Collect
We collect information that you provide directly to us when you register for an Event. This includes:
- Identity Data: Full name and age verification.
- Contact Data: Email address and phone number.
- Sensitive Data: Dietary requirements, allergies, and health-related preferences (collected only with your explicit consent).
- Preference Data: Your choices of main dishes and other Event-specific options.
- Technical Data: IP address, browser type, and usage data collected via cookies (see our Cookie Policy).
4. Purpose and Legal Basis for Processing
We process your data for the following purposes:
- Contractual Necessity: To process your registration and facilitate your attendance at the Event.
- Consent: To process sensitive dietary information and to send you marketing communications (if opted-in).
- Legitimate Interests: To improve our Website, manage Event logistics, and ensure the safety of all participants.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal data. We only share your information with trusted third parties under strict confidentiality agreements:
- Service Providers: Including Formspree (form processing) and email service providers.
- Venue Partners: Only essential dietary and preference data is shared with venues (e.g., Basma Mezze & Grill) to prepare for the Event.
- Legal Obligations: We may disclose data if required by law or to protect the rights and safety of ConvLUB and its community.
6. International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.
7. Data Security
We implement robust technical and organizational security measures to prevent unauthorized access, alteration, disclosure, or destruction of your personal data. This includes encryption of data in transit and restricted access to personal information.
8. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for the duration of the Event and a reasonable period thereafter (typically 12 months) for administrative and follow-up purposes.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Rectification: Request correction of any inaccurate or incomplete data.
- Erasure: Request deletion of your data under certain conditions.
- Portability: Request transfer of your data to another organization.
- Objection: Object to the processing of your data for specific purposes.
- Withdrawal of Consent: Withdraw your consent at any time where we rely on it to process your data.
10. Children's Privacy
Our Website and Events are not intended for individuals under the age of 18. We do not knowingly collect data from children. If we become aware of such collection, we will take steps to delete the information immediately.
11. Cookies
We use cookies to enhance your experience. For detailed information on the types of cookies we use and how to manage them, please refer to our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.
13. Contact and Complaints
If you have any questions about this policy or our data practices, please contact us at askfinance6@gmail.com. You also have the right to lodge a complaint with a data protection authority in your jurisdiction.