Privacy Policy

Last updated: October 6, 2026

This policy explains how the Expo Manager team ("Expo Manager", "we", "us") collects and uses personal information when you visit expomanager.io, create an organizer account at app.expomanager.io, buy a ticket to an event, or book an exhibitor space through the platform. It also covers the ExpoAssistant app that attendees use during events.

Who this policy covers

Expo Manager serves three groups, and we look after their data differently:

Visitors to this website, who browse our pages or get in touch.
Organizers, who create accounts to run events, sell tickets, and manage exhibitors.
Attendees and exhibitors, who buy tickets or book spaces for events run on the platform.

When an attendee buys a ticket or an exhibitor books a space, their details are provided to the organizer of that event. Expo Manager stores that data on the organizer's behalf, and the organizer decides how it is used. We process it only to run the service, and we do not use attendee or exhibitor data for our own marketing. See "Who controls what" below.

Information we collect

Information you give us directly

Account details: your name, email address, and the name of your organization when you sign up.
Contact details you send us through forms, email, or a demo request.
Billing details when you are set up to receive payouts. Card payments are handled by our payment processor and we do not store full card numbers.

Information attendees and exhibitors give to organizers

Ticket purchases: name, email address, and any answers to checkout questions the organizer has set, such as job title or dietary needs.
Exhibitor bookings: company and contact details, chosen stand, and add-ons such as power, wifi, or furniture.
ExpoAssistant activity: session attendance and lead details you choose to share with an exhibitor.

Information collected automatically

Usage data: IP address, browser type and version, pages visited, dates and times of visits, and time spent on pages.
Diagnostic and device data used to keep the service secure and fix technical issues.

Cookies

We use cookies and similar technologies to keep the service working, remember your preferences, and understand how the site is used. You can set your browser to refuse cookies, but some parts of the service may not work properly without them. We use three kinds:

Session cookies, which keep you signed in while you use the service.
Preference cookies, which remember settings and choices.
Security cookies, which protect accounts and prevent fraud.

How we use information

To provide, run, and improve the service, including processing ticket and exhibitor sales.
To communicate with you about your account, your orders, your events, and service updates.
To provide customer support.
To detect, prevent, and address fraud, abuse, and technical issues.
To meet legal, accounting, and regulatory obligations.

We do not sell personal information, and we do not send marketing emails without consent.

Who controls what

For organizer account data, Expo Manager is the controller: we decide how that data is used. For attendee and exhibitor data, the organizer running the event is the controller and Expo Manager acts as a processor. If you are an attendee or exhibitor and have a question about how your details are used, the quickest route is usually to contact the organizer directly. We will pass on your request to the organizer, or help you exercise your rights against our systems, under the section below.

Sharing your information

We share personal information only where it is needed to run the service:

Payment processing: card payments and payouts are handled by our payment processor (Stripe). Card details are sent directly to Stripe and are not stored on our servers.
Service providers: companies that host the platform, deliver email, and support analytics, bound by contract to use data only on our behalf.
Organizers: when you buy a ticket or book a space, the organizer of that event receives the details you provided, because they are the party hosting you.
Legal requirements: we may disclose information in good faith where necessary to comply with the law, protect the rights or safety of others, or prevent fraud.

We never sell personal information to third parties.

Data retention

We keep personal data only as long as needed to provide the service, meet the purposes in this policy, and comply with legal, accounting, and regulatory duties. Account data is kept while the account is active. If you close an account or ask us to delete your data, we delete or anonymize it within a reasonable time, except where we must keep certain records by law. Backup copies may persist for a short period for security and recovery before being securely deleted.

Your rights and deleting your data

You can ask us to:

Give you access to the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your personal data.
Restrict or object to certain processing.
Send you a copy of your data in a structured, commonly used format.

Email hello@expomanager.io to exercise any of these rights. Once we confirm a deletion request, we remove your data from active systems and from backups on our normal schedule, unless the law requires us to keep it. If your data was collected by an organizer (for example, when buying their tickets), we will forward your request to them, and they are responsible for honoring it.

International transfers

Your information may be processed on systems located outside your own country, where data protection laws may differ. Where information leaves the UK or EEA, we put adequate safeguards in place, such as approved contractual clauses, before any transfer happens.

Security

We use commercially reasonable technical and organizational measures to protect personal data, including encryption for data in transit and at rest, and restricted access to production systems. No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security, but we take protecting your data seriously and act quickly on any incident.

Children's privacy

The service is not directed at anyone under 18, and we do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data, we will delete it. Organizers who allow under-18s to their events must obtain the necessary consent themselves and manage that data through their own event settings.

Changes to this policy

We may update this policy from time to time. When we do, we post the new version on this page and update the date at the top. Where a change is significant or affects your rights, we will notify you by email or with a prominent notice inside the service.

Contact

Questions about this policy, or any request to exercise your data rights, can be sent to hello@expomanager.io.