Privacy Policy

Each event on GatherHub is run by an organiser. When you register for an event, the organiser decides why your registration data is collected and how it is used for that event, and is responsible for it. Where an organiser publishes its own data and privacy notice on the event page or registration form, that notice applies to that event in addition to this policy.

GatherHub provides the platform and processes registration data on the organiser's behalf. We are responsible for the data we hold for running the platform itself, such as your account.

• Account and registration details: name, email address, phone number, and any extra details an organiser asks for on its registration form.
• Tickets and orders: the events you register for, tickets, check-in and attendance records, and certificates.
• Payments: order amounts and payment status. Card and bank details are entered with our payment processors, not stored by GatherHub.
• Event activity: things you choose to do at an event, such as session check-ins, polls, questions, networking contacts and check-in photos.
• Technical data: IP address, browser and device information, and logs needed to keep the service secure and working.

• To register you for events, issue and verify your tickets, and check you in.
• To send you service messages about your registrations, such as tickets, receipts, reminders and changes to an event.
• To let organisers run their events, as described in section 5.
• To process payments, refunds and invoices.
• To secure the platform, prevent fraud and abuse, and meet legal obligations.
• To understand and improve how GatherHub is used.

We keep account data while your account is active. Registration and order records are kept for as long as the organiser needs them for the event and for as long as the law requires for financial and tax records. Some data has shorter limits; for example, check-in photos are deleted 30 days after the event ends. When data is no longer needed, we delete or anonymise it.

• Organisers of the events you register for. They receive your registration details and event activity for that event only.
• Payment processors that handle payments and refunds for paid tickets.
• Service providers that host the platform, deliver email and SMS, and help us operate the service, under contracts that limit how they can use the data.
• Authorities, when the law requires it.

We do not sell your personal data.

You can access and correct your personal data, and ask for it to be deleted. Much of this can be done in your account settings. For anything else, contact us using the details below. For data held by an organiser about its event, you can also contact the organiser directly; we will help pass your request on. You can withdraw consent at any time, although that will not affect processing that already happened.

We use cookies that are needed to sign you in and keep the service secure. The platform administrator may also enable analytics tools such as Google Analytics or the Meta Pixel to measure how pages are used. You can block or delete cookies in your browser settings, though some features may then stop working.

We protect your data with measures such as encrypted connections, access controls and restricted storage for sensitive items like photos. No system is completely secure, so please keep your password private and tell us if you suspect your account has been misused.

We may update this policy from time to time. When we do, we will change the "last updated" date above, and for material changes we will give notice on the platform.

Questions or requests about your data: [email protected].

This policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010.