Privacy Policy
Updated 14 September 2026
Responsible for Data Protection and Privacy
The entity responsible for data processing under UK GDPR, the EU GDPR (where applicable), and other relevant privacy regulations is:
KimmiCon Limited (company no. 17283666)
Red House, Welford Road, Chapel Brampton, Northampton NN6 8AG, United Kingdom
Name: Kim Fletcher
Email: kim@rebuildcon.uk
trading as Re:Build, via the website rebuildcon.uk.
Data Protection Officer (DPO)
UK GDPR does not currently require us to appoint a dedicated Data Protection Officer (DPO). For that reason, the Managing Director of KimmiCon Limited is responsible for privacy matters. You can contact us using the details above.
Information We Collect
Personal information is information that can be directly associated with you, such as your full name, email address, company, telephone number, billing information, or information about activities directly linked to you, such as conference tickets you have purchased. You agree that you will not provide us with the personal information of anyone other than yourself unless you first obtain the consent of that person (for instance, when purchasing a ticket on behalf of a colleague).
Notify-me / mailing list sign-up
When you sign up to be notified about event updates, tickets and speaker announcements, we collect:
- Your full name
- Your email address
- Your role (e.g. developer/engineer/architect, tech lead/engineering manager, interested in speaking, community organizer, or other), used only to help us send you more relevant updates (for example, routing speaker-related news to those who selected "interested in speaking")
- Your optional answers to three free-text survey questions (your biggest concerns in tech, what excites you, and what you want from sponsors), used to shape the programme and sponsor content
- Your consent to receive email updates, which you actively confirm via checkbox at the point of sign-up
We do not share this information with third parties for their own marketing purposes.
Website usage data
When you visit rebuildcon.uk, we collect information about the pages you view. Log files may automatically record information such as:
- IP address
- Browser type
- Operating system
- Referring website (the site you visited before arriving at ours)
- Date and time of visit
- Approximate location (city/country) derived from IP address
- URLs of pages visited
We use Google Analytics 4 to understand which pages are popular and how visitors move through the site. It only runs if you accept the cookie banner shown on your first visit; if you decline, or don't respond, Google Analytics does not load and no analytics cookies are set. You can change your choice at any time using the "Cookie settings" link in the footer.
When active, Google Analytics sets cookies (typically _ga and _ga_*) that Google uses to distinguish visitors and sessions; these are kept for up to 14 months. Google Analytics does not store your full IP address against your activity. Data is processed by Google LLC, which self-certifies under the EU-U.S. Data Privacy Framework for transfers of data outside the UK. You can read Google's own privacy policy at policies.google.com/privacy, and opt out of Google Analytics tracking across all sites using their browser add-on.
Social media
Our website includes links to third-party social media platforms (for example, X, Instagram, or LinkedIn). Your interactions with these platforms are governed by their own privacy policies, not this one.
Ticketing
When Re:Build tickets go on sale, ticket purchase and attendee information will be processed via [TICKETING PLATFORM TO BE CONFIRMED]. That processor's own privacy policy will apply to payment and checkout data; this policy will be updated with a link once the platform is confirmed.
Sponsors (badge scanning)
Your conference badge QR code contains a unique identification number. If you allow a Re:Build sponsor to scan your badge, that identifier is used by our lead-scanning app to look up your name, company and email address, and this information is shared with that specific sponsor.
Sponsors are separate data controllers for the information shared with them this way, and may use it for their own marketing in line with the opt-in you give that sponsor at the point of scanning. You can decline to have your badge scanned at any time.
Event photography and video
Photos and video may be taken at Re:Build and used on the Re:Build website, social media, streaming platforms and related publications. If you would prefer not to appear in photos or video, let a member of staff know at registration and we will provide a way to identify that (such as a different lanyard colour or a sticker) so photographers can avoid you.
Lawful Basis for Processing and Retention
We process personal data for the following purposes, on the following lawful bases, and keep it for the following periods:
| Purpose | Lawful basis | Kept for |
|---|---|---|
| Mailing list / notify-me updates | Consent (the sign-up checkbox) | Until you unsubscribe |
| Ticket purchase, attendance, badge | Contract | Until the event, plus a short period for queries |
| Invoices and VAT records | Legal obligation | 6 years (HMRC) |
| Website logs, security, abuse prevention | Legitimate interests | Short rolling period (e.g. 30 to 90 days) |
| Website analytics (Google Analytics) | Consent (the cookie banner) | Up to 14 months, or until you withdraw consent |
Where we rely on consent, you can withdraw it at any time (see Your Rights, below) without affecting the lawfulness of processing carried out before you withdrew it.
Deletion of Data and Storage Duration
Personal data is deleted, or access to it is restricted, once there is no continuing reason to store it, in line with the retention periods set out in the table above, unless the law requires us to retain it for longer.
International Data Transfers
Some of the third-party services we use (see "Services We Use" below) may store or process data outside the UK or European Economic Area (EEA). For example, if our email provider or ticketing platform operates servers in the United States.
Where this is the case, we ensure an appropriate safeguard is in place before your data is transferred, such as:
- The receiving country having a valid UK adequacy regulation (or, where relevant, an EU adequacy decision) in place, or
- Use of the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs) with the receiving party, or
- Another safeguard recognised under UK GDPR (such as the vendor's own certification under an approved transfer mechanism, e.g. the EU-U.S. Data Privacy Framework, where the receiving entity is certified).
You can request further detail on the specific safeguard used for any given vendor by contacting us at kim@rebuildcon.uk.
Serving Our Website
Description and extent of processing
Log files containing your IP address and the pages you visited are generated when you access our website. We do not store log data alongside other personal data about you.
Reasons for processing
We use IP address data to understand which pages of our site have been visited, to prevent abuse, identify technical problems, and improve the service generally.
Dissent and removal
Writing log files is necessary to operate the website, so there is no mechanism to opt out of this specific processing, and this data cannot be individually removed on request. If you have an urgent concern, please contact us at kim@rebuildcon.uk.
Newsletters and Enquiries
Description and extent of processing
We send email updates to people who have signed up via our notify-me form, and essential information to those registered to attend Re:Build. We use the services of YAMM for this purpose. You can read that provider's own privacy policy here: yamm.com/privacy-policy.
To send you updates, we ask for your email address and full name. Links within our emails may be routed through YAMM's systems, which may record engagement (e.g. opens, clicks) for analytics purposes.
Reasons for processing
Your data is used to send you updates about Re:Build, including event updates, ticket availability and speaker announcements.
Dissent and removal
You can unsubscribe at any time. Every email we send includes an unsubscribe link at the bottom.
Your Rights
Right of access
You can ask us to confirm whether we hold personal data about you, and if so, request:
- Why we store your data
- The kind of data we process
- The recipients of your data, including anticipated future recipients
- Where available, information about how we obtained your data
Contact us at kim@rebuildcon.uk to make this request.
Right to correction
You have the right to have inaccurate or incomplete data corrected. We will action this as soon as possible.
Right to deletion
You can request deletion of your data. Contact us at kim@rebuildcon.uk.
Right to object
You have the right to object to our processing of your data, including to any direct marketing. Contact us at kim@rebuildcon.uk.
Right to restrict processing
You can ask us to limit how we use your data in certain circumstances, for example while a query about its accuracy is resolved.
Right to data portability
Where we process your data by automated means on the basis of consent or contract, you can ask us for a copy of it in a structured, commonly used, machine-readable format.
Right to withdraw consent
Where we process your data on the basis of consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before you withdrew it.
Right to complain to a regulator
You have the right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office, ico.org.uk) if you believe we are processing your data unlawfully.
Services We Use
In the interest of transparency, here is a list of third-party services used in running Re:Build that may process your data:
- Google Forms: for the notify-me / mailing list sign-up form
- Google Analytics: for website usage analytics, only after you accept the cookie banner
- Gmail and YAMM: for sending notify-me and event email updates
- [TICKETING PLATFORM]: for event ticketing and payment processing (once tickets go on sale)
- Google Workspace (Gmail, Google Calendar, Google Drive): for internal team email, scheduling, and document collaboration
- Slack: for internal team communication
- Notion: for internal event planning and documentation