Privacy Policy

1. Who we are

This website is operated by Dignity Education Vision International (“we”, “us”), the organiser of the Global Learning Lab 2027, hosted by City Montessori School (CMS), Lucknow. For the purposes of India's Digital Personal Data Protection Act 2023 (DPDP Act) we are the data fiduciary, and for the purposes of the EU/UK GDPR we are the data controller.

Contact: lab@dignityeducation.org · +91 740 800 0332 · World Unity Convention Centre, City Montessori School, Lucknow

2. What personal data we collect

• Registration and delegate profile: name, email, phone, designation, organisation, country, address, delegate category, accessibility and dietary requirements, professional photo and short bio.
• Account data: email address, one-time sign-in codes, password (stored only as a secure hash), multi-factor settings and sign-in/security activity logs.
• Speaking and session proposals: proposed topics, abstracts and supporting details you submit.
• Invitation letter data: the name, designation, organisation and address shown on your visa-support letter, plus approval and download records.
• Enquiries and newsletter: your email address and message content when you contact us or subscribe.
• Chatbot conversations: questions you ask the website assistant, feedback ratings and escalation details.
• Technical data: anonymised page-performance measurements (Core Web Vitals), cookie and accessibility preferences stored in your browser, and standard server logs.

We do not knowingly collect sensitive personal data through this website beyond the accessibility, dietary and faith requirements you choose to share so we can host you properly.

3. Why we use it (purposes and legal basis)

• To process and confirm your registration and manage your delegate account — performance of a contract / your consent.
• To issue personalised invitation letters and visa-support documents you request — your consent.
• To send event logistics, programme updates and registration reminders — legitimate interest in running the event you registered for.
• To send the newsletter you subscribed to — your consent, withdrawable at any time via the unsubscribe link.
• To review speaker proposals and publish admin-approved professional attendee and speaker profiles (name, photo, short and full biography, designation, organisation and country) on this site. Existing and future delegates receive a publication notice in their dashboard; no separate publication-consent checkbox is required. Private registration details are not published. You may contact us about correction, removal or other privacy concerns; applicable data-protection rights remain unchanged.
• To keep accounts secure (sign-in codes, session protection, security alerts) — legitimate interest in security.
• To understand aggregate site usage and improve performance — your consent via the cookie banner, where required.

We never sell personal data and never use it for advertising.

4. Who processes your data

We use a small number of service providers (data processors) to run the site and event:

• Lovable Cloud — website hosting, database and file storage (delegate photos, letter assets).
• Brevo — delivery of transactional email (sign-in codes, confirmations, reminders, newsletters).
• Google — Maps embeds on the venue page and optional website translation; Google's own privacy policy applies when you use those features.

Data may be processed in countries outside your own, including India, the EU and the United States. Where required, transfers rely on appropriate safeguards such as contractual clauses.

5. How long we keep it

• Registration and delegate profile data: up to 24 months after the event.
• Visa-letter and invitation data: 90 days after the event, then deleted.
• Newsletter data: until you unsubscribe.
• Security and sign-in activity logs: 12 months.
• Chatbot feedback and anonymised analytics: in aggregate form, without your identity.

You can ask us to delete your data sooner — see Your rights below.

6. Your rights

Under the DPDP Act 2023 and, where applicable, the GDPR, you may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data (much of this is editable in your delegate dashboard).
• Request erasure of your data.
• Withdraw consent at any time (for example, unsubscribe from the newsletter).
• Nominate someone to exercise your rights if you are unable to.
• Complain to a supervisory authority — in India, the Data Protection Board; in the EU/UK, your national authority.

To exercise any right, write to lab@dignityeducation.org. We respond within 30 days.

7. How we protect your data

We use encrypted connections (HTTPS), hashed passwords, one-time sign-in codes, optional multi-factor authentication, role-based access to the admin panel, server-side session revocation and row-level access rules in the database. No system is perfectly secure; if a breach affects your data we will inform you and the relevant authority as required by law.

8. Children

This website and delegate registration are intended for adults (18+). The event involves school field visits; pupil data from host schools is never collected through this site. See our Code of Conduct and Child Safeguarding.

9. Cookies

We use essential cookies and, with your consent, analytics cookies. Full details — including every cookie and storage item we set and how to change your choice — are in our Cookie Policy.

10. Changes to this policy

We may update this policy as the event approaches. Material changes will be announced on this page with a new “last updated” date, and registered delegates will be notified by email.

11. Grievance Officer and contact

For any privacy question, request or complaint, contact our Grievance Officer at lab@dignityeducation.org or +91 740 800 0332. Postal address: World Unity Convention Centre, City Montessori School (CMS), Kanpur Road Campus, LDA Colony, Lucknow, Uttar Pradesh 226012, India