Privacy Policy

1. Who controls your data

For your EventYard account, EventYard BV is the data controller. When you register for an event, the organizer of that event is an independent controller of the registration data you provide to them (name, contact details, vehicle/entrant details, answers and uploads). The organizer's own privacy practices apply to their use of that data.

2. What we collect

• Account data: name, email, password hash, organization details.
• Registration data: the answers, files and photos you submit to an event.
• Payment metadata: amount, status and the last four digits / method — full card data is held by Stripe, not us.
• Usage data: device, log and cookie data to run and secure the service.

3. How we use it

To provide the service, process registrations and payments, send transactional emails (confirmations, tickets, reminders), prevent fraud, and comply with law. We rely on contract, legitimate interest and consent as lawful bases under the GDPR.

4. Sharing

• With organizers you register with — they receive your registration data.
• With processors such as Stripe (payments) and our email and hosting providers, under data-processing agreements.
• We do not sell personal data or share it for third-party advertising.

5. Your rights

Under the GDPR you can access, correct, export, restrict or delete your data, and object to certain processing. Use the controls in your account or email privacy@eventyard.io. You may also complain to the Belgian Data Protection Authority.

6. Retention & security

We keep data only as long as needed for the purposes above or as the law requires, then delete or anonymise it. We use encryption in transit and at rest and restrict access on a need-to-know basis.

7. Contact

Data Protection contact: privacy@eventyard.io.