Privacy Policy

BGS is the controller of both guest data and the accounts of the staff who use it.

• Staff accounts: name, work email, and (if enabled) a phone number.
• Guests: the details staff record or you submit on a request form — name, email, phone, company, and any custom questions the event adds.
• Access records: when a pass is scanned at a gate we log the time, the result, and the device — so occupancy and attendance are accurate.

A QR code contains only a random, single-use token — never your name, phone, email, or any database id. The token is stored hashed; the readable value exists only in your pass. Losing a pass reveals nothing about you.

To issue and verify passes, run check-in, prevent duplicate entry, send the emails you expect (your invitation, confirmations), and keep the service secure. We do not sell your data, and we do not use guest data for advertising.

Only BGS staff granted access to the relevant event — and gate staff see even less: never a full email or phone, or private notes. Every access is logged.

Guest and event data are kept for as long as needed to operate the event and program, then deleted or anonymized per BGS’s internal retention schedule.

You can ask us to correct or delete your details. To reach us directly, email the address below.

If we make a material change we’ll update the date above.