Privacy Policy

Who this applies to

This policy covers the personal data collected through this event registration site, operated by the Asia Tea Alliance (“ATA”, “we”, “us”) for the EU – Asia Tea: Trade, Trust and a Low-Carbon Future summit and related ATA events. If you have questions about how your data is handled, contact us at info@nucleus.lk.

What we collect and why

• Full name, email, and phone number — to confirm your registration, send your ticket, and contact you with event-related updates.
• Passport number — this is an international, multi-country summit; passport details are collected for delegate identity verification and venue/security check-in, consistent with standard practice for cross-border conferences.
• Designation and organization — to prepare delegate lists, name badges, and session materials appropriate to your role.
• Payment information — when a paid registration is processed, payment details are handled directly by our payment gateway provider; we do not receive or store your card details ourselves.

Legal basis

We process this data based on your consent (given at registration) and our legitimate interest in administering the event securely. For delegates registering from the European Union, this is handled in line with GDPR principles: data minimization, purpose limitation, and your right to access, correct, or request deletion of your data (see below).

Where it's stored

Registration data is stored in a managed Postgres database (Supabase), encrypted in transit and at rest. Access is restricted to authorized event organizers through a password-protected admin dashboard — it is never made public or sold.

Who we share it with

• Our payment gateway, solely to process your registration payment.
• Our email provider, solely to deliver your registration confirmation and ticket.
• We do not sell your data or share it with third parties for marketing purposes.

How long we keep it

Registration data is retained for the duration of event planning and for up to 12 months afterward for reporting, reconciliation, and compliance purposes, after which it is deleted or anonymized unless you've asked us to keep it longer for a recurring registration.

Your rights

You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it (subject to any records we're required to keep for financial or legal reasons) by emailing info@nucleus.lk.