We collect the following categories of data: 

Information you provide: name, email, phone number; company, role, sector; billing information; accessibility needs; dietary restrictions; survey responses or other communications with us; photos or videos captured by us during the Event

Ticketing & event participation data: ticket type, check-in status, session attendance 

Device & analytics data: IP address; browser type; device identifiers; cookies, pixels, log files; pages viewed, referrers, links clicked

We process your personal data to deliver event services and manage attendance, communicate essential event information, improve the Event and user experience, provide customer support, promote future KFF events (photos, videos, testimonials), and ensure safety and compliance with venue requirements. We do not sell your personal data. 

We use the device information we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve our website and measure engagement (for example, by generating analytics about how customers browse and interact with our website, and to assess the success of our marketing and advertising campaigns). 

Under GDPR, we rely on the following legal bases for processing your data:

• Contract performance - to deliver tickets and event services
• Legitimate interests - event safety, analytics, documentation, promotion
• Consent - newsletter signup, operational surveys, cookie preferences
• Legal obligations - accounting, regulatory compliance

We may share your data with the following third parties to help us use your personal information as described above. 

• Event partners, venues, and service providers 
• Katapult entities (Katapult Foundation, Katapult Ocean)
• Analytics services (e.g., Google Analytics)
• Legal authorities, where required

All third parties are bound by GDPR-compliant agreements. 

Your data may be transferred outside the EEA. We use safeguards such as Standard Contractual Clauses when required.

We retain personal data for up to 7 years unless a shorter period is required by law. Recordings used for documentation or promotional purposes may be retained longer. You may request deletion where legally permitted. 

You have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below. 

We may update this policy to reflect legal, operational, or service changes. Updated versions will be posted on our website.