Privacy Policy
Last updated:
1. Introduction
Welcome to thekonfz ("we", "our", or "us"). We are a B2B event discovery and networking platform. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website at thekonfz.com and related services (collectively, the "Platform").
By using the Platform you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.
2. Information We Collect
2.1 Information You Provide
- Account data — name, email address, password (hashed), job title, company, industry, and profile bio when you register.
- Event data — event title, description, dates, location, speaker details, agenda, and banner images submitted by organisers.
- Messages — content of messages you send to other users through our in-platform messaging system.
- Reviews — ratings and written reviews you submit for events you have attended.
- Support communications — any emails or messages you send to us directly.
2.2 Information Collected Automatically
- Usage data — pages visited, links clicked, time spent, referring URLs, and search queries.
- Device data — browser type, operating system, screen resolution, and device type (mobile / tablet / desktop).
- IP address — used for approximate geolocation and security monitoring.
- Session identifiers — to keep you logged in and associate activity with your session.
- Cookies and similar technologies — see Section 7 for full details.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate you.
- Display events, facilitate registrations, and connect attendees with organisers.
- Provide in-platform messaging and networking match suggestions.
- Send transactional emails (account confirmation, password reset, event notifications).
- Show you relevant events based on your industry and interests.
- Analyse usage patterns to improve the Platform.
- Detect, prevent, and respond to fraud, abuse, or security incidents.
- Comply with legal obligations.
We do not sell your personal data to third parties.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Contract — processing necessary to provide the services you have requested.
- Legitimate interests — analytics, platform security, and product improvement.
- Consent — marketing emails and non-essential cookies (you may withdraw consent at any time).
- Legal obligation — where we are required to comply with applicable law.
5. Sharing of Information
We may share your information with:
- Other users — your public profile (name, job title, company, industry) is visible to other logged-in users for networking purposes.
- Event organisers — when you RSVP or express interest in an event, the organiser may see your name and attendance status.
- Service providers — hosting (cPanel shared hosting), email delivery (SMTP provider), and error monitoring. These providers are contractually bound to protect your data.
- Law enforcement — where required by a valid legal process or to protect the rights and safety of users.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Platform. If you delete your account, we permanently delete your profile, messages, reviews, and event data within 30 days, except where retention is required by law (e.g., tax or billing records).
7. Cookies
We use the following categories of cookies:
| Category | Purpose | Required |
|---|---|---|
| Essential | Session management, CSRF protection, authentication | Yes |
| Analytics | Page view tracking, device type, referrer data (stored on our own servers — no third-party analytics) | No |
| Preferences | Remembering your cookie consent choice | No |
You can manage cookie preferences using the consent banner shown on your first visit, or by clearing your browser's local storage. Declining non-essential cookies will not affect core functionality.
8. Security
We implement industry-standard security measures including:
- Bcrypt password hashing — plaintext passwords are never stored.
- HTTPS encryption for all data in transit.
- CSRF token protection on all forms.
- Input validation and SQL-injection prevention via parameterised queries.
No system is 100% secure. If you suspect unauthorised access to your account, please contact us immediately.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate data via your profile settings.
- Erasure — delete your account and all associated data from your profile settings page.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Restrict processing — request that we limit how we use your data.
To exercise any right not available through your account settings, email us at privacy@thekonfz.com.
10. Children's Privacy
The Platform is intended for professional and business use. We do not knowingly collect data from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email and update the "Last updated" date above. Continued use of the Platform after changes constitutes acceptance of the revised policy.
12. Contact Us
For any privacy-related questions or requests:
- Email: privacy@thekonfz.com
- Website: thekonfz.com