REWIRE Privacy Policy

1. Who We Are

REWIRE is produced by Offsight Inc, a corporation incorporated under the laws of Ontario / Canada and based in Toronto, Canada. Offsight Inc is accountable for the personal information described here.

Privacy Officer — hello@rewiresummit.co

Contact us at that address with any privacy question, request or complaint. If you prefer to write by post, email us and we will provide a mailing address.

2. Scope

This Privacy Policy covers personal information collected through the REWIRE website, registration and ticketing, applications, newsletters, surveys, event platforms, correspondence and REWIRE events.

It is intended to comply with PIPEDA, Quebec's Act respecting the protection of personal information in the private sector (Law 25), the Alberta and British Columbia Personal Information Protection Acts, Canada's Anti-Spam Legislation (CASL).

"Personal information" means information about an identifiable individual.

3. What We Collect

Identity and contact — name, email, phone, mailing address, country.

Professional — employer, job title, industry, biography, headshot, LinkedIn and other professional profiles.

Registration and participation — ticket type, badge and accreditation details, session selections, attendance history.

Accessibility and dietary requirements — treated as sensitive, used only to arrange what you asked for, restricted to staff who need it, deleted per Section 9. Tell us what you need, not why.

Applications and ticket categories — what we ask depends on the category. Some require commercially sensitive business information; a startup pavilion applicant may be asked about funding raised, traction, customers and competitive positioning. Application information is used only to assess that application. It is never shared with sponsors, investors or other participants unless you ask us to, and never used for marketing.

Transactions — purchase records and billing details. Payment cards are processed directly by Stripe under PCI DSS. REWIRE does not receive or store card numbers.

Visa support letters — REWIRE issues these only to confirmed speakers and to members of a sponsor's team. We do not issue visa support letters to general attendees or volunteers. Where you are eligible and request one, we collect your full legal name as shown in your passport, date of birth, nationality, passport number and expiry, and travel dates. This is treated as sensitive, held separately, with restricted access. We issue the letter to you and you submit it yourself. REWIRE does not contact any immigration authority on your behalf and has no role in the outcome.

Voluntary demographic information — [IF APPLICABLE] where REWIRE receives public funding, we may invite demographic information on a strictly voluntary basis. It never affects registration, pricing or access, is reported only in aggregate, and is deleted once the reporting obligation is met.

Technical — IP address, browser, device, operating system, referring URLs, pages viewed, approximate location from IP.

From others — we sometimes receive your information from sponsors submitting delegate names, speaker representatives submitting biographies, PR agencies submitting media accreditation, partners making introductions, and public professional sources. We require the providing party to have the authority to share it.

4. Why We Collect It

To register you and administer your participation; issue visa support letters on request; arrange accessibility and dietary requirements; provide support; manage event security and access; run networking functions; assess applications; communicate with you about your registration; send marketing where you have consented; invite you to future REWIRE editions; analyze participation and improve our programming; prevent fraud and misuse; keep business, financial and tax records; enforce our agreements and Code of Conduct; and comply with legal obligations.

Aggregated data. We may aggregate or de-identify information so it can no longer identify you, and share aggregate audience data — attendee counts by industry, seniority or region — with sponsors, partners, funders and media.

We will not use your information for a materially different purpose without any consent the law requires.

5. Consent, Marketing and Cookies

Consent is asked for separately per purpose. The online registration form asks separately whether you consent to REWIRE marketing communications. It is off by default and optional, and you are never required to consent in order to attend. We obtain express consent for sensitive information. You may withdraw consent at any time by contacting the Privacy Officer, subject to legal and contractual limits.

Marketing. Every marketing message identifies REWIRE, gives our contact information, and carries a working unsubscribe link actioned within ten business days. Unsubscribing does not stop messages needed to administer your registration or purchase. We keep your email on a suppression list solely to ensure we do not contact you again.

Cookies. The website uses strictly necessary cookies, and — only with your consent — analytics, marketing and functional technologies:

Non-essential technologies are blocked until you choose. Change your choices any time via "Cookie Settings" in the footer, or through your browser. Some of these build an interest profile for advertising; these controls are how you turn that off. We honour Global Privacy Control signals where the law requires.

Automated processing. We may use automated tools, including AI, to sort and summarize applications. No decision affecting you is made solely by automated means — a person makes every such decision. You may ask what information was used, the reasons and principal factors, and submit observations to a human reviewer.

6. Who We Share It With

Service providers acting on our instructions under written agreements: registration and ticketing, payments, hosting, CRM, email, event platforms, analytics and marketing. Also professional advisers; venues, accessibility and security providers and operational contractors; authorities where required by law; and prospective purchasers or investors in a corporate transaction, subject to PIPEDA's business transaction conditions.

REWIRE does not sell personal information.

Published profiles. Confirmed speakers, startup pavilion companies, sponsors, partners and accredited media have their name, title, organization, biography, headshot and company links published on the website, in the programme, in the event platform and in REWIRE marketing. This is public, search-indexed and remains in the archive of past editions. We confirm material with you before publication. General attendee names are not published.

Sponsors and lead capture

Badge scanning. Sponsors may use lead-capture tools that scan badges. A scan only happens when you present your badge for that purpose. The sponsor then receives your name, title, organization, email and country — not your phone, mailing address, ticket type, transaction information, or accessibility or dietary information.

Meetings. If you request a meeting or send an inquiry through the event platform, the sponsor receives what you chose to share.

Participant list. REWIRE provides sponsors and exhibitors with a participant list showing attendee names, job titles and organizations only. It contains no email addresses, telephone numbers or other contact details, and sponsors cannot use it to contact you. Its purpose is to let sponsors see who is attending and prepare for the event. If you would rather not appear on it, say so at registration or email hello@rewiresummit.co at any time before the event, and we will leave you off.

REWIRE does not give sponsors, exhibitors or partners attendee contact details in any other way. Once a sponsor holds your information it is independently responsible for it. As a condition of participating, sponsors must contractually comply with privacy and anti-spam law, use lead data only as disclosed, and honour your opt-out. If a sponsor contacts you unexpectedly, tell our Privacy Officer.

7. Event Platform and Networking

REWIRE may use an event platform where participants create profiles, message attendees and arrange meetings. What others see depends on the platform and your settings; we will explain defaults before it opens. You may decline a profile or make it non-discoverable without affecting your attendance. Push notifications can be turned off in your device settings or the platform's preferences.

8. Photography, Video and Livestreaming

REWIRE operates photography, video and livestreaming services throughout its events. Sessions, stages and public event areas are recorded. Footage is used for event documentation and archives, session distribution, reporting, and the marketing and promotion of REWIRE and future editions.

By registering for and attending a REWIRE event, you accept that you may be photographed, filmed, livestreamed and recorded, and that this material may be used for the purposes above. This is disclosed at the point of ticket purchase and forms part of the REWIRE Ticket Terms and Conditions. Signage identifies entrances and recorded areas.

9. Storage, Transfers and Retention

We use service providers in Canada, the United States and elsewhere, so your information may be processed outside your province or country and subject to those jurisdictions' laws. Before engaging any provider processing information outside Canada we assess the protection it will receive and put written protections in place. For Quebec residents we complete a privacy impact assessment before information is communicated outside Quebec.

We may keep information longer where needed to meet a legal obligation, resolve a dispute or defend a claim.

10. Security and Breaches

We use encryption in transit and at rest, role-based access, multi-factor authentication, restricted access to sensitive information, security assessment of providers before engagement, and confidentiality obligations for staff and contractors. No system is completely secure and we cannot guarantee absolute security.

Where a breach creates a real risk of significant harm we report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible, and notify the Quebec or Alberta regulator where their law applies. We keep a record of every breach for at least 24 months.

11. Your Rights

Everyone may ask what we hold, correct it, withdraw consent, unsubscribe, and complain.

Quebec residents may additionally request deletion, de-indexation, cessation of dissemination, data portability, and review of automated decisions.

To make a request, email hello@rewiresummit.co. We may ask for information to verify your identity, used for nothing else. We respond within 30 days, or tell you before then why we need longer and when we will respond. There is no charge; if a request is unusually extensive and a cost would apply, we tell you first. If we refuse, we explain why in writing and tell you how to complain.

12. Minimum Age

You must be at least 18 to register for a REWIRE event. We do not knowingly collect information from anyone under 18. Any programming that may involve under-18 participants is administered separately with age-appropriate notice and, where required, parental consent — which Quebec law requires for anyone under 14. If you believe we hold a minor's information, contact the Privacy Officer.

13. Other

Third-party sites. The website links to sites we do not control and are not responsible for.

Language. This policy is published in English, with the French version below it on this page. [In the event of inconsistency, the English version prevails. / La version française prévaut à l'égard des résidents du Québec.]

Changes. Amendments take effect when published, and the date above shows the last revision. Where a change materially affects information we already hold, we notify affected registrants, subscribers and applicants by email before it takes effect and, where consent is required, we ask for it.

14. Complaints

Email hello@rewiresummit.co. We acknowledge within [5] business days and respond in writing within 30 days.

If you are not satisfied, you may complain to:

• Office of the Privacy Commissioner of Canada — 30 Victoria Street, Gatineau, Quebec K1A 1H3 · 1-800-282-1376 · priv.gc.ca
• Commission d'accès à l'information du Québec (Quebec residents) — cai.gouv.qc.ca
• Alberta — oipc.ab.ca
• British Columbia — oipc.bc.ca