Privacy Policy

Event participants

When you register for a BA & Beyond event, we collect:

• Name, organisation, job title, email address
• Country — to understand engagement across the global business analysis community and to actively stimulate multi-country participation in our events
• LinkedIn profile — to support communication and professional networking among participants and with the broader BA & Beyond community
• IIBA member ID (optional) — to apply eligible IIBA member discounts and to track participation from within the IIBA community
• Dietary requirements and accessibility needs (for on-site arrangements only — see note below) (optional)
• Payment information (processed by our ticketing provider; we do not store card details)

Why: To manage your registration, deliver the event experience you signed up for, and strengthen the diversity and reach of our community.

Legal basis: Performance of a contract (GDPR Art. 6(1)(b)) for registration essentials; legitimate interest (GDPR Art. 6(1)(f)) for country, LinkedIn, and IIBA member ID, which help us build a diverse, connected community and provide relevant discounts and recognition.

Note on dietary and accessibility information: Providing this is entirely optional. If provided, this information may reveal health or religious details and is therefore treated as special category data under GDPR Article 9. We collect it solely to arrange appropriate on-site provisions and handle it with additional care. Legal basis: Explicit consent (GDPR Art. 9(2)(a)) — by providing this information voluntarily, you consent to its use for on-site logistics only. You may request its deletion at any time.

Speakers

When you submit a speaker proposal or are confirmed as a speaker, we collect:

• Name, biography, photo, email address, social media handles
• Session title, abstract, and any materials you submit
• Your responses during the review process

Why: To manage the call-for-speakers process, build the programme, and promote the event.

Legal basis: Legitimate interest (programme delivery and event promotion) and, where you have accepted a speaker agreement, performance of a contract (GDPR Art. 6(1)(b) and (f)).

Partners and sponsors

When a partner or sponsor organisation engages with us, we collect contact details of the individuals involved (name, email, phone, role).

Why: To manage our partnership relationship and deliver agreed benefits.

Legal basis: Legitimate interest / performance of a contract (GDPR Art. 6(1)(b) and (f)).

Newsletter subscribers

If you subscribe to our newsletter or community updates, we collect your email address and any preferences you provide.

Why: To send you updates about BA & Beyond events and the business analysis community.

Legal basis: Consent (GDPR Art. 6(1)(a)) for general newsletter sign-ups. You can unsubscribe at any time using the link in any email or by contacting us.

Note for event registrants: Once you have registered for a BA & Beyond event, we may also send you limited information about future similar events and community initiatives that we believe are relevant to you. This falls within the “soft opt-in” provision of the ePrivacy Directive — no separate consent is required, but you can opt out at any time. We will never use your registration contact details to send marketing for third-party products or to share your details with sponsors for their own marketing.

Website visitors

Our website uses GoatCounter, a privacy-respecting analytics tool that does not use cookies or track individuals. It collects aggregated data such as page views, browser type, and country of origin (derived from your IP address, which is not stored). This helps us understand how the site is used.

Why: To improve our website.

Legal basis: Legitimate interest (GDPR Art. 6(1)(f)).

Third-party service providers (processors)

We use the following tools to deliver our services. Each is bound by a data processing agreement:

Co-organising partners (joint controllers)

For co-organised events, participant information (name, role, organisation, contact details) may be used jointly by BA & Beyond and our co-organising partner for event-specific outreach (e.g., via LinkedIn or email). Our intent is to ensure a diverse, high-quality community and the long-term viability of our events through sufficiently broad participation — this is a shared goal with our co-organisers. This use is limited strictly to that event’s purposes. See the section on joint controllers below.

Community insights (aggregated)

We may share non-identifying, aggregated information — such as sector categories, organisation types, and attendance figures — with partners and the community. No individual is identifiable in this data.