Privacy policy
Your data, plainly.
Last updated: 19 September 2026
This policy explains what personal data London Baltic Tech Hub (“we”, “us”) collects when you use this website or attend our events, why we collect it, and what rights you have. We keep it deliberately short: we collect very little and we don’t sell or share it for advertising.
1. Who we are
The data controller is London Baltic Tech Hub, London, United Kingdom. For anything to do with your data, email hello@londonbaltic.tech.
2. What we collect and why
| Data | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Name, email address, and optionally company and role — when you RSVP | To register you for the event, send you a confirmation and a reminder, manage capacity and the waitlist, and run the guest list on the night | Performance of a contract / steps taken at your request (Art. 6(1)(b)) |
| Your marketing choice (the tick-box) and the date and wording of the consent you gave | To only send you news about future events if you asked us to, and to prove we had your permission | Consent (Art. 6(1)(a)) — you can withdraw it at any time |
| A one-way hashed (pseudonymised) version of your IP address and your browser type at the time you submit the form | To detect and block spam and abuse of the RSVP form. We never store the raw IP address. | Legitimate interests (Art. 6(1)(f)) — keeping the service secure |
| Emails you send us | To reply to you | Legitimate interests (Art. 6(1)(f)) |
We don’t ask for, and please don’t send us, any special category data (such as health information).
3. Cookies and tracking
This website sets no cookies of its own and uses no analytics, advertising or social-media tracking scripts. Fonts and images are served from our own site, so your browser makes no requests to third parties when you visit. The one exception is ticketing: if you click “Get tickets” for an event sold through Eventbrite, the Eventbrite checkout loads and Eventbrite sets its own cookies under its privacy policy — nothing loads until you click. We may add privacy-preserving, cookie-free analytics in the future; if we do, we’ll update this page.
4. Who we share data with
We use a small number of service providers (processors) who handle data on our instructions:
- Vercel — hosts this website. Vercel may process data in the UK, the EU and the US under its data-processing addendum and standard contractual clauses.
- Supabase — stores the RSVP database, in a data centre in London (UK). Supabase processes data on our instructions under its data-processing addendum.
- Eventbrite — for paid events, sells the tickets and takes payment. When you buy a ticket, Eventbrite is a separate data controller for your order and card details under its own privacy policy; it shares the attendee list (name, email, ticket) with us so we can run the door.
- Resend — sends the confirmation and reminder emails. Resend processes data in the EU and the US under standard contractual clauses.
- The event venue — we may share first names (and, if needed, a headcount) with the venue on the night for entry and safety. We do not share email addresses with venues.
We do not sell personal data and we do not share it with sponsors or speakers.
5. International transfers
Where our providers process data outside the UK, transfers are protected by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by a UK adequacy decision.
6. How long we keep it
- RSVP records — deleted 12 months after the event they relate to, unless you have opted in to hear about future events.
- Marketing list — kept until you unsubscribe or ask us to delete you, and reviewed at least every 24 months; we’ll remove anyone who hasn’t engaged in that time.
- Anti-spam hashes — deleted with the RSVP record.
- Emails — kept for as long as needed to deal with your query, then deleted.
7. Your rights
Under UK GDPR you can ask us to:
- Access the data we hold about you;
- Correct anything that’s wrong;
- Delete your data (“right to be forgotten”);
- Restrict or object to how we use it;
- Port it — receive it in a machine-readable format;
- Withdraw consent to marketing at any time — every marketing email has an unsubscribe link, or just reply and say “stop”.
To exercise any of these, email hello@londonbaltic.tech. We’ll respond within one month and won’t charge you. If you’re unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.ukor on 0303 123 1113.
8. Security
Data is transmitted over HTTPS and stored in an access-controlled database. Only the organisers of London Baltic Tech Hubcan access RSVP records. No method of storage is completely secure, but we take reasonable steps to protect your data and would tell you and the ICO without undue delay if a breach put you at risk.
9. Children
Our events and this website are intended for adults (18+). We do not knowingly collect data from children.
10. Photography at events
We sometimes take photos at events to share on our website and social media. We’ll tell you on the night; if you’d rather not be photographed, let an organiser know and we’ll make sure you aren’t.
11. Changes
If we change this policy in a way that affects you, we’ll update the date at the top and, where the change is significant, email people on our list.