IIT Alumni Association UK ("IITAA UK", "we", "us") organises SUMMIIT UK 2026. This policy explains what personal data we collect through this website, why, how long we keep it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
IIT Alumni Association UK is a registered charity in England and Wales, charity no. 1126274. We are the data controller for the personal data described in this policy.
Contact: partner@summiit-uk.org.
2. What we collect, and why
| When | What we collect | Why | Lawful basis |
|---|---|---|---|
| You register interest, request the sponsorship prospectus, or ask to be contacted | Name (optional), email address, organisation (optional), and any message you enter | To send you SUMMIIT UK 2026 updates, the agenda, your invitation, or to respond to your enquiry | Your consent, given by ticking the consent box on the form |
| You browse the site, having accepted analytics cookies | Pseudonymous usage data — pages viewed, approximate location, device/browser type — via Google Analytics | To understand how the site is used and improve it | Your consent, given via the cookie banner |
We never collect payment details, government ID numbers, or any special category data (e.g. health, religion, ethnicity) through this website.
3. Cookies
This site sets no cookies on arrival. If you accept analytics cookies via the banner shown on your first visit, we load Google Analytics, which sets cookies to distinguish visitors and measure site usage. You can withdraw or give consent at any time using "Cookie preferences" in the footer of the homepage. If you reject or take no action, no analytics cookies are set and no data is sent to Google.
We do not use advertising, retargeting, or cross-site tracking cookies.
4. Who we share data with
- Formspree, Inc. — processes form submissions on our behalf so we can receive and reply to them. Formspree is based in the United States; data is transferred under Formspree's standard contractual clauses (SCCs), a safeguard recognised under UK GDPR for international transfers.
- Google Ireland Limited (Google Analytics) — processes pseudonymous usage data, only if you accept analytics cookies. Data may be processed in the United States under Google's SCCs.
- We do not sell personal data, and we do not share it with any other third party for their own marketing purposes.
As a technical note: when you submit the form, your entry is also saved as a backup in your own browser's local storage, purely on your device — it is not sent to us or to anyone else by that mechanism, and clearing your browser data removes it.
5. How long we keep it
We keep event-registration and enquiry data for as long as reasonably needed to deliver SUMMIIT UK 2026 and follow-up communications, and no longer than 24 months after the event, unless you ask us to delete it sooner or the law requires us to keep it longer (for example, for our charity's financial records).
6. Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you and get a copy (access)
- Ask us to correct inaccurate data (rectification)
- Ask us to delete your data (erasure)
- Ask us to restrict or object to how we use your data
- Receive your data in a portable format (portability)
- Withdraw consent at any time — this does not affect anything we did while consent was in place
To exercise any of these rights, email partner@summiit-uk.org. We will respond within one month. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), though we'd welcome the chance to resolve any concern directly first.
7. Changes to this policy
We may update this policy as the event approaches — for example, if we introduce new tools or services. Material changes will be reflected by updating the date at the top of this page.
8. Contact
Questions about this policy or your data: partner@summiit-uk.org.