Privacy notice

This notice explains how AMYBO uses your personal data when you register for an event on this website.

Who we are

The data controller is andeye Ltd, trading as AMYBO, a private limited company registered in Scotland (company number SC665704), registered office 60 Ladeside, Newmilns, East Ayrshire, KA16 9BE, United Kingdom. Contact us through our contact form or by post at that address.

What we collect

When you register for an event we collect:

• your name and email address
• whether you will attend in person or remotely, and any lab tour you book
• optionally, your organisation or affiliation
• optionally, any dietary or access needs you tell us about
• optionally, your answer to the event’s extra question (for example, plans for the day after)
• the time you gave consent and confirmed your email address
• whether you agreed to share your email address with session hosts
• a record of the emails and calendar invitations we sent you

Dietary or access needs can reveal information about your health or beliefs. Only share what you are comfortable with, and only what we need to make the event work for you.

Link pages (amy.bo/~name, a page of someone’s links) count how often the page is opened and each link is clicked. We store only the page, the link and the time: nothing about you, no IP address and no cookie.

If you have a link page, we also keep your email address (to send you sign-in links), your name, what you put on the page, and when you last signed in. Your page and everything on it is public; your email address is not. Ask us and we delete the page and all of it.

Why we use it and our lawful basis

We use your data only to organise the event you registered for and to email you about it: confirming your registration, sending joining instructions and updates, managing places and waiting lists, and planning catering and access.

Our lawful basis is your consent, which you give by ticking the box on the registration form. For any dietary or access needs you tell us about, which can be health or belief information, it is your explicit consent, given by the same box. We do not use your details for marketing, and we do not add you to any mailing list.

The talks are recorded so that people who could not come can watch them. Our lawful basis for recording is our legitimate interest in sharing the talks; the recordings show the speakers, and questions from the room or from remote attendees may be audible. Recordings are kept and may be published on AMYBO’s YouTube channel. You can object at any time: ask your question in the Meet chat or tell us on the day, and if you are identifiable in a published recording and would rather not be, contact us and we will edit or remove it.

Who can see it

Only the AMYBO organisers can see the full registrations. The host of each session you attend (for example a lab tour leader) is emailed the list for that session whenever it changes, so they can plan it: your name and whether you have a place or are on the waiting list. Your email address and organisation are included only if you tick the optional box to share them with session hosts; you can change that at any time with your “Manage my registration” link. Hosts are asked to use the list only for that session and to delete it afterwards. We use these service providers to run the website and send email:

• Cloudflare hosts the website and the registration database, and provides spam protection (Turnstile, which checks your browser and IP address when you submit the form; we do not store your IP address). The database is held in Cloudflare’s EU jurisdiction, so registrations are stored and processed in the European Union.
• Resend sends our emails, from its EU region.
• Google Workspace hosts the organisers’ mailbox, which receives a notification when someone registers, changes or cancels (with their name, organisation and registration details), and which organisers may use to send a message to registrants using blind copies.
• Imperial College London, which hosts the event, receives the access needs of people attending in person only where that is needed to arrange access to the building, and never dietary information unless catering is arranged with them.
• Google Meet streams the talks. If you join remotely, Google processes your name and email address under its own terms when you join the call.
• Registrations are handled by Events&I, open source registration software that runs on our own Cloudflare account; no other organisation receives your data through it.

Cloudflare, Resend and Google act as data processors on our behalf. Where they process data outside the UK (the EU for the registration database and email sending; Google and Cloudflare’s support and security operations may involve the United States), transfers rely on the UK adequacy regulations for the EU and on the UK International Data Transfer Addendum to each provider’s standard contractual clauses elsewhere. We do not sell or share your data with anyone else. If we name speakers on an event page, it is only with their agreement; attendees are never listed publicly.

How long we keep it

Unconfirmed registrations are deleted automatically if the email address is not confirmed in time. All registrations for an event, the record of emails sent to them, the lists sent to session hosts and the hosts’ own contact details are deleted from our registration system 30 days after the event ends. The database keeps a point-in-time backup for up to 30 days more (Cloudflare D1 Time Travel), so a deleted record can be restored from backup for that long and is then gone. Notification emails about registrations in our organisers’ mailbox are deleted within 30 days after the event. Resend keeps its own delivery logs under its retention policy.

Withdrawing consent and your rights

You can withdraw your consent at any time by cancelling your registration with the “Manage my registration” link in any of our emails. This deletes your details from the registration system straight away (they remain only in the 30-day backup described above). You can also contact us.

You have the right to access, correct or delete your data, to restrict or object to its use, and to data portability. To exercise any of these rights, contact us. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

Cookies

This website does not use tracking or advertising cookies. If you edit a link page, signing in sets one strictly necessary cookie that keeps you signed in for up to 60 days, until you sign out. Cloudflare Turnstile, which protects the registration form from spam, may set a strictly necessary cookie to do that job. Videos from YouTube and Vimeo load only when you click play (YouTube) or with Vimeo’s do-not-track setting, so their cookies are not set just by visiting a page. Video thumbnails are loaded from YouTube’s image server, which receives your IP address.

Last updated 2 October 2026 (link-page counts); before that 25 September 2026 (EU database, Google Workspace, Imperial, recordings, backups and what session hosts see).