Privacy Policy

1. Introduction & Scope

The 16th Professional Development Conference & Exhibition (PDC&E 2027), organized in the Kingdom of Bahrain, is committed to safeguarding your privacy and ensuring the security of your personal information.

This Privacy Policy applies to all personal data collected through the official PDC&E 2027 website (pdce2027.com), conference registration portal, administrative dashboards, and the PDC&E 2027 Mobile Application available on Apple iOS and Google Android.

2. Information We Collect

To facilitate conference registration, digital badge generation, workshop reservations, and event access control, we collect the following categories of information:

• Delegate Identification: First name, last name, job title, company/organization name, professional designation, and national ID / passport number (collected solely where mandatory for venue security, accreditation, or corporate visa sponsorship).
• Contact Information: Personal email address, corporate/business email address, mobile phone number, office telephone number, and country of residence.
• Event Credentials & Badges: Digital attendee pass identifiers, cryptographic QR tokens generated for secure badge scanning, and password hashes for mobile app access.
• Session & Workshop Participation: Workshop selections, attendance logs recorded at venue entrance checkpoints, interactive questions submitted to session moderators, and raffle/prize draw participation logs.
• Technical & Device Data: IP address, device operating system version, browser user agent, mobile device identifiers, and crash logs to maintain platform stability and detect malicious activity.

3. How We Use Your Information

We process personal data only for lawful, legitimate conference administration purposes:

• Generating and displaying your digital conference admission pass and personal QR badge.
• Managing workshop seating allocations and real-time venue room capacity limits.
• Recording verified session attendance required for Continuing Medical Education (CME) and professional certification issuance.
• Transmitting order confirmations, tax invoices, and credential updates via secure email.
• Enabling in-app mobile features such as viewing the interactive 3D floorplan, submitting panel questions, and receiving urgent schedule notices.

4. Information Sharing & Third-Party Processors

We never sell, rent, monetize, or trade attendee personal data or badge scans to third-party data brokers or marketing agencies.

Data is disclosed strictly on a need-to-know basis to certified infrastructure partners supporting event execution:

• Cloud Database & Hosting: Supabase and Vercel for high-availability, encrypted cloud hosting.
• Payment Processing: Tap Payments (Tap.company) for secure electronic payment authorization.
• Transactional Notifications: Certified SMTP relay providers for delivery of registration confirmations and invoices.
• Accreditation Authorities & Host Venue: Official continuing professional development boards and The Gulf Hotel venue security when required by Bahrain regulations.

5. Mobile Application Permissions & Apple Store Compliance

In full accordance with Apple App Store Review Guidelines (Guideline 5.1.1):

• Camera Permission: Used exclusively within the mobile application when event staff or authorized exhibitors scan attendee QR badges for workshop admission or lead retrieval. The camera is never accessed without explicit in-app user consent.
• Push Notifications: Used solely to alert delegates of session schedule updates, keynote timings, or emergency venue advisories. You can toggle notifications off at any time in your iOS Settings.
• No Tracking / Ad ID: The PDC&E 2027 Mobile App does not use Apple IDFA (Identifier for Advertisers), does not track user activity across other companies’ apps, and contains zero third-party advertising tracking SDKs.

6. Account & Personal Data Deletion

7. Data Retention & Cryptographic Security

We deploy enterprise-grade security standards to protect your information:

• All network traffic is encrypted using Transport Layer Security (TLS 1.3).
• Account passwords are never stored in plaintext and are hashed using bcrypt with adaptive cryptographic salt factors.
• Database tables are protected by Row Level Security (RLS) policies and strict role-based access controls.
• Digital badge QR tokens are signed with cryptographic random nonces to prevent badge forgery or enumeration.

8. Children's Privacy

PDC&E 2027 is a professional conference and exhibition intended exclusively for professionals, industry practitioners, and students aged 18 and older. We do not knowingly solicit or collect personal information from individuals under the age of 18.

9. Contact Our Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy, your personal data, or compliance with applicable privacy regulations, please contact:

PDC&E 2027 Data Protection Team
Email: info@pdce2027.com
Host Location: The Gulf Hotel Bahrain, Kingdom of Bahrain