Privacy Policy

1. Who is responsible for your information

Bendie generally acts as a controller when it decides why and how personal information is used, including for website enquiries, Bendie account and access administration, service security, direct support, product administration, service analytics, legal compliance and Bendie marketing.

An event organizer or organizational customer may provide attendee, speaker, exhibitor, sponsor, team, accommodation, flight, transfer or programme information and instruct Bendie to use it for a particular event. In that situation, the organizer will often be the controller and Bendie will act as its processor or service provider. The organizer is responsible for having an appropriate basis to collect the information and for giving required notices to participants. Bendie processes that information under its agreement with the organizer and applicable law.

If you submit a request about organizer-controlled information, we may refer the request to the relevant organizer or assist the organizer in responding.

2. Information we collect

We collect information received from organizers and organizations, information you provide directly, and limited information collected automatically when you use the Services.

Some event logistics or accessibility arrangements may reveal sensitive or higher-risk information. Bendie and organizers limit collection of this information to what is necessary for the event, legally permitted and clearly explained. We apply access restrictions and safeguards appropriate to its sensitivity.

• Registration and identity information, such as name, email address, organization, job title, role and attendee identifier.
• Event participation information, such as event assignment, agenda, sessions, breakout rooms, access permissions and event status.
• Profile and networking information, such as biography, professional interests, industry, skills, photograph and matching preferences.
• Event logistics information, where configured, such as accommodation, rooming, flight, arrival, departure, vehicle, route, passenger allocation and pickup details.
• Speaker, presenter, sponsor, exhibitor, planner and event-team information.
• Contact and enquiry information submitted through the website or during an organizer sales conversation.
• The email address used to request a secure event access code.
• Connection requests, chat messages, ratings, survey responses, feedback, game and leaderboard activity.
• Photos, captions, reactions, likes and other event-gallery content.
• Support requests and correspondence with Bendie or the event organizer.
• Device, application, usage, security and diagnostic information, including device type, app version, timestamps, IP address, crash data and suspected abuse signals.
• Push-notification tokens and notification interaction information when notifications are enabled.
• Website cookie or similar technology information, subject to applicable consent requirements.

3. How we use information

We use personal information to provide, secure, support and improve the Services, including to:

• Create, configure, administer and support organizer and event workspaces.
• Verify registered attendees and issue or validate secure event access codes.
• Present personalized agendas, sessions, rooms, speakers, updates and configured travel or transfer details.
• Enable attendee discovery, smart matchmaking, connections, messaging, ratings, feedback, games, leaderboards, sponsor and exhibitor discovery, and gallery participation.
• Send service, security and event-related notifications or messages.
• Support planners with programmes, production schedules, tasks, team access, accommodation, flights, transfers and operational views.
• Respond to enquiries, provide support and troubleshoot problems.
• Prevent fraud and abuse, investigate incidents and enforce applicable terms.
• Measure reliability and usage, improve features and plan service development.
• Meet legal, regulatory, tax, audit and dispute-resolution obligations.
• Send Bendie marketing communications where permitted and provide required unsubscribe or objection choices.

4. Legal grounds for processing

Where applicable law requires a legal ground, Bendie relies on one or more of the following, as appropriate: performance of a contract; steps requested before entering a contract; compliance with a legal obligation; legitimate interests that are not overridden by individual rights; consent; protection of vital interests; or another ground permitted by law. Where Bendie acts for an organizer, the organizer determines the applicable ground for organizer-controlled processing and Bendie follows documented instructions.

Consent may be withdrawn where processing relies on consent, but withdrawal does not affect processing already carried out lawfully. Certain information may be required to provide event access or a requested service; if it is not supplied, the relevant service may be unavailable.

5. Smart matchmaking and personalization

Bendie may use attendee profile details, stated interests and event context to suggest relevant people, sessions or content. Match suggestions support introductions and do not make decisions that produce legal or similarly significant effects. Users may update their preferences or contact support@bendie.app for assistance with available matchmaking controls. Bendie does not use sensitive information for matching unless this is necessary, lawful, transparent and specifically authorized.

6. How information is shared

Bendie does not sell personal information for money. We will provide any additional notices or choices required if applicable law treats a particular disclosure or advertising activity as a sale or similar regulated activity.

• With the relevant event organizer and its authorized event team, according to assigned roles and event needs.
• With other attendees when information or activity is designed to be visible to them, subject to visibility controls and event rules.
• With speakers, exhibitors, sponsors or partners where authorized for the event experience and supported by an appropriate legal basis and notice.
• With contracted vendors that host, secure, analyze, support or deliver the Services.
• With professional advisers, auditors, insurers, regulators, courts or law-enforcement bodies when required or permitted by law.
• In connection with a merger, financing, acquisition, reorganization or sale of assets, subject to confidentiality and legal requirements.

7. Visibility and user content

Some information is intended to be seen by others at an event. Depending on event configuration, this may include profile details, professional interests, connections, leaderboard position, ratings, comments, chat messages, photos and reactions. Users should review the audience and event rules before posting. Bendie and organizers may moderate or remove content that violates the Terms and Conditions, event rules, law, safety or the rights of others.

8. International transfers

Bendie, organizers and service providers may process information in countries other than the country where it was collected. Where required, Bendie uses recognized transfer mechanisms, contractual safeguards, risk assessments, consent or another lawful basis and takes reasonable steps to protect the information. Information about material transfer safeguards may be requested through support@bendie.app.

9. Retention

Bendie retains personal information only for as long as reasonably necessary for the relevant event or service, contractual and organizer instructions, security, support, legal obligations, disputes and legitimate operational needs. Retention periods vary by category. Organizer-controlled event data will be returned, deleted or de-identified according to the organizer agreement and applicable law. Backups may remain for a limited period under controlled deletion schedules.

We periodically review retention for attendee profiles, access and security logs, chat, gallery content, ratings, matchmaking data, travel and accommodation information, planner operations, enquiries, support records, analytics and backups. When information is no longer required, we delete or de-identify it unless continued retention is required by law or a legitimate dispute, security or contractual need.

10. Security

Bendie uses administrative, technical and organizational measures designed to protect personal information, including access controls, role-based permissions, authentication, encryption where appropriate, logging, backups, vendor management, secure development and incident response. No system is completely secure. Users must protect their devices, access codes and account credentials and notify Bendie or the organizer of suspected misuse.

11. Your choices and rights

Depending on location and applicable law, individuals may have rights to be informed; request access; correct inaccurate information; request deletion; object to or restrict processing; withdraw consent; receive portable information; complain to a regulator; and request information about or challenge certain automated decisions. Some rights are subject to legal exceptions.

Requests may be sent to support@bendie.app. Bendie may need to verify identity and authority before responding. If the information is controlled by an event organizer, Bendie may direct the request to that organizer or assist the organizer. Individuals may also complain to the data-protection authority in their country. In Kenya, this is the Office of the Data Protection Commissioner.

12. Communications and notifications

Service and event notifications may be necessary to provide the event experience. Users can manage device-level push settings, although disabling them may cause important updates to be missed. Marketing communications will include the choices required by applicable law. An organizer's communications are governed by the organizer's instructions and privacy responsibilities.

13. Cookies and similar technologies

The Bendie website and applications may use necessary technologies for operation, security and preferences, and optional technologies for analytics or marketing where approved. Where non-essential cookies or similar technologies are used, Bendie provides information about their categories, providers, purposes and duration and offers consent choices where required. Refusing optional technologies will not block core content or necessary event access.

14. Children

The Services are intended primarily for professional event participants aged 18 or older. A person under 18 may use the Services only where the relevant event permits it and a parent, guardian or organizer provides any authorization required by law. Bendie and the organizer will use age-appropriate notices, limit collection and apply enhanced safeguards when processing a child's information.

15. Third-party services and app stores

The Services may link to event organizers, exhibitors, sponsors, external websites, Apple App Store, Google Play or other third parties. Their privacy practices are governed by their own notices. Bendie is not responsible for independent third-party practices, but remains responsible for vendors processing information on Bendie's behalf as required by law and contract.

16. Changes to this policy

Bendie may update this policy to reflect service, legal or operational changes. The current version will display its effective date. If a change materially affects individual rights or the use of personal information, Bendie will provide additional notice or seek consent where required.

17. Contact and complaints

Privacy questions, requests and complaints may be directed to Stawi Experiences Limited, trading as Bendie.

• Privacy email: support@bendie.app
• Privacy lead: Stawi Experiences Limited privacy team, support@bendie.app
• Physical address: Muchai Road, off Ngong Road, opposite Aki Centre, Nairobi, Kenya
• Postal address: P.O. Box 38173-00100, Nairobi, Kenya
• Telephone: +254 710 800 100
• Relevant regulator: Office of the Data Protection Commissioner, Kenya (www.odpc.go.ke)