SBP Events App Privacy Policy
This privacy policy explains how Sustainable Biomass Program Limited (“SBP”, “we”, “us”, “our”) collects and uses personal data when you use the ‘SBP Events’ mobile application (the “App”) for SBP conferences, training sessions and events.
The App is provided to SBP by our event technology partner, Conference Compass B.V. (“Conference Compass”), and is published on the Apple App Store and Google Play under SBP as the developer. SBP is the data controller for the personal data described in this policy; Conference Compass acts as our data processor.
This policy covers the App only. Use of the SBP website is covered by our website privacy policy. Downloading and using the App is entirely voluntary – SBP does not require you to use it to attend an event.
1 Who we are and how to contact us
Sustainable Biomass Program Limited
71 Queen Victoria Street, London EC4V 4BE, United Kingdom
Registered in England and Wales.
For any questions related to privacy, to exercise your rights, or to request deletion of your account and data, contact us at [email protected].
2 The personal data we collect
The App runs on the Floq platform (floq.live) provided by Conference Compass. The exact engagement features in use depend on how SBP configures each event, so not all of the items below will apply to every event.
Information you provide when you register and build your profile
- First name and last name
- Email address
- Company / organisation name
- Profession or job title
- Phone number (if you add it to your profile)
- Profile picture (if you add one)
- Password (for accounts created directly in the App)
Information created through your use of the App
Depending on the features enabled for your event, this may include:
- Chat messages you send
- Social wall posts and comments
- Questions, votes and ratings you submit
- Bookmarks you create and notes you take
- Appointments you create and contacts (connections) you make with other attendees
- Virtual sessions attended, on-demand content accessed, and event pages and content viewed
Information collected automatically
- Device and technical information
- Trackers and similar identifiers used to operate the App and keep you signed in
- IP address
- Push notification token (if you enable notifications)
We do not intentionally collect special category data (such as health, religion or political opinions). Please do not post such information in the App.
3 How we collect your data
We collect your data when:
- You or the event organiser register you for an event and set up your access to the App;
- You create or update your profile and use the App’s features; and
- You use the App, through automatic collection of device and usage data as described above.
4 Why we use your data
Under the UK GDPR and EU GDPR, we rely on the following legal bases:
| Purpose | Legal basis |
| Providing you with the App, your account and event content | Performance of a contract / our legitimate interest in delivering the event service you registered for |
| Enabling networking and messaging between attendees | Your consent (you choose to make your profile visible and to connect), and our legitimate interest in facilitating the event |
| Managing event check-in and attendance | Our legitimate interest in running the event |
| Maintaining app security, and troubleshooting and improving performance | Our legitimate interest in a secure, reliable service |
| Sending you service and event-related notifications | Our legitimate interest, and your consent where push notifications are enabled |
| Meeting legal and regulatory obligations | Compliance with a legal obligation |
Where we rely on consent, you can withdraw it at any time (see “Your rights” below).
5 Who we share your data with
- Conference Compass, as our processor, to operate and host the App on our behalf.
- Other attendees, if you choose to use networking or messaging features, the profile information you make visible and any messages you send will be seen by the attendees you interact with. You control what you add to your profile and whether you connect.
- Conference Compass’s sub-processors, in particular Amazon Web Services (AWS), which provides hosting and backend infrastructure for the App.
We do not sell, rent or trade your personal data. We only share it with third parties as described here or where required by law.
6 International data transfers
Conference Compass is based in the Netherlands (EU). Data collected through the App is hosted on Amazon Web Services (AWS) infrastructure in the EU/EEA. Where any personal data is transferred outside the UK or the European Economic Area, we ensure an appropriate safeguard is in place, such as an adequacy decision or Standard Contractual Clauses.
7 How long we keep your data
We keep your personal data only for as long as necessary for the purposes set out in this policy.
- Your App account, profile and activity data are retained for the duration of the relevant event and then deleted or anonymised within 90 days after the event closes, unless you ask us to delete them sooner.
- Messages and networking data are retained for: the duration of the event and deleted or anonymised within 90 days after it closes.
- Diagnostic and usage data are retained for 90 days.
Where we are required to keep certain information to meet a legal or regulatory obligation, we will retain only what is necessary for that purpose and for no longer than required.
8 Account and data deletion
You can ask us to delete your App account and its associated personal data at any time.
Delete your account yourself, in the App
- Open My profile and tap your name at the top of the screen.
- Tap Edit profile.
- Scroll to the bottom and tap Delete account.
Or ask us to delete it for you
Email [email protected] from the email address associated with your account, with the subject line “App account deletion”. We will verify that the request comes from the account holder before deleting your account. You do not need to reinstall or reopen the App to make a request by email.
What is deleted
When we action your request, we remove you from the event’s attendee list and delete your App account and the personal data associated with it, including your profile, your personal agenda and bookmarks, your networking connections, your messages and your notes. Conference Compass, acting as our processor, carries out the deletion within the platform.
What we may keep, and why
We may retain a limited amount of information where we are legally required to do so, or where it is necessary for security, fraud prevention or to resolve a dispute. In those cases, we keep only what is necessary, for no longer than required, and then delete it.
How long it takes
We will complete your deletion request within 14 days of receiving it and confirm to you when it is done.
9 Your rights
Under the UK GDPR and EU GDPR you have the right to:
- Access the personal data we hold about you;
- Request rectification of inaccurate or incomplete data;
- Request erasure of your data (“right to be forgotten”) – see “Account and data deletion” above;
- Restrict or object to our processing of your data;
- Data portability to receive your data in a portable format;
- Withdraw consent at any time, where we rely on consent; and
- Lodge a complaint with a data protection authority.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are in the UK, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If you are in the EU/EEA, you can complain to your local data protection authority.
10 Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure, and we require Conference Compass to do the same under our data processing agreement.
11 Children
The App is intended for professional event attendees and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
12 Changes to this policy
We keep this policy under regular review and will publish any updates on this page, updating the “Last updated” date above. Significant changes will be communicated to you where appropriate.
Last updated: 28 September 2026