Legal · Privacy

No. KCTS/2027/L1

Privacy notice

What this site collects, where it goes, how long it stays and how to get it removed.

Last updated 2026. This notice covers the summit website only.

What is collected

Only what you type into a form on this site. That is: your name, email address, and optionally your organisation, job title, country, registration category and message. Nothing else about you is gathered.

Alongside each submission the system records a small amount of technical context used to detect automated spam: the country your request came from, your browser's user-agent string, and the page you submitted from. Your IP address is not stored — for rate limiting it is converted to a one-way hash that cannot be turned back into an address.

What is not collected

  • No advertising or cross-site tracking cookies.
  • No third-party analytics that profile you. Site analytics are aggregate page counts only, with no cookie and no individual identifier.
  • No data brokers, no list rental, no sale of any kind.

Where it goes

Stored in
Cloudflare D1, a database controlled by the summit secretariat
Email delivery
Brevo, used to send your confirmation and notify the secretariat
Spam protection
Cloudflare Turnstile
Who can read it
The summit secretariat and its appointed organiser

How long it is kept

Registration and enquiry records are kept until the end of the summit and for twelve months afterwards, so the secretariat can contact you about the next edition. After that they are deleted. Spam-detection rate-limit records are discarded within the hour.

Your choices

You can ask to see what is held about you, ask for it to be corrected, or ask for it to be deleted entirely. Use the contact form and say which. Requests are actioned rather than negotiated.

Confirmation emails are transactional — they are the receipt for something you submitted. Any future announcement emails carry an unsubscribe link, and unsubscribing does not remove your registration.

Security

The site is served over HTTPS only, with a content security policy that blocks third-party scripts. Form submissions are validated and rate-limited. No payment details are handled anywhere on this site, because the site takes no payments.

Contact details pending

A named data contact and postal address will be published here once the secretariat confirms them. Until then the contact form is the route for any privacy request, and those requests are handled the same way.