Your information.Handled with care.

Who is responsible?

UPWARD Insights (Laura Smith), Helsinki, Finland, is the controller of personal information collected on the Friendship Fair website. Business ID: 3213526-8. VAT ID: FI32135268.

For privacy questions or requests, email contact@workupward.com.

What we collect, and why

• Tickets and orders: buyer email, order details, ticket allocation, payment references and billing information you provide. We use these to process purchases, issue tickets, manage cancellations and meet accounting obligations. Stripe handles card details; this website does not store them.
• Attendee registration: name, email, Research ID, verification status, ticket and attendance status. We use these to administer your place and communicate about the event.
• Interest and waiting lists: name, email, city or ticket preferences where requested, optional Research ID, referral source, comments and list status. We use these to respond to interest and send relevant ticket-availability messages.
• Collaboration and partner enquiries: contact details, organization, proposed contribution and messages. Contributor submissions may include a bio, links, logo or photo. Material intended for publication is reviewed before being displayed.
• Site operation: referral links, outgoing-link events, a browser-generated session identifier and technical error records. These help us understand which invitations work and maintain the site.

Our legal bases are performing a contract or taking steps you request before one (tickets and enquiries), legal obligations (accounting), and legitimate interests (event administration, security and limited referral measurement). Optional research participation and publication permissions are handled separately; buying a ticket is not blanket consent to publish your details.

Connection is separate

The Fair stores your Research ID and confirmation that the Connection profile belongs to you. The verification handoff is digitally signed and transmitted over HTTPS; it does not transfer your raw survey answers.

Raw Connection answers are not imported into the Friendship Fair website. Research, suggestions and matching permissions are governed by the separate notice and choices on UPWARD Connection. This notice covers the Fair’s event administration, not the full research study.

Other attendees do not receive your ticket tier or purchase price through claim pages or Connection. Those details are available to the buyer and authorized owner-level administration, not to other guests.

Who can see it?

Access is limited by role. The event producer’s guest overview excludes participant emails and Research IDs. Share sensitive participation requests directly with the organizer: tell us what would help, rather than sending medical records or a diagnosis. We use those requests to discuss practical arrangements with you.

We use Lovable Cloud for hosting, application data and file storage, Stripe for checkout and payment processing, and Postmark for transactional email. Stripe also processes some information for its own fraud-prevention and legal obligations. We do not sell personal information or give sponsors an attendee mailing list.

Service providers may process information outside the European Economic Area under their applicable data-processing and transfer terms. Contact us for information about the safeguards relevant to your data.

Cookies, browser storage and links

We do not use advertising pixels or Google Analytics in this site’s code. Browser storage supports staff sign-in, ticket recovery and referral-session identification. The ticket-recovery session is stored in your browser tab and lasts up to 12 hours; recovery links are single-use and expire after 20 minutes.

Private order, claim, waiting-list and Attendee Pass links grant access to particular information or actions. Treat them like private keys: do not post them publicly. External services, including Connection and Stripe, have their own notices and storage practices.

How long do we keep it?

We retain event-administration information while needed to deliver the event, manage ticket issues and respond to enquiries. Accounting and payment records must be retained for applicable Finnish statutory periods; records we are legally required to keep cannot be erased on request.

Leaving the waiting list stops further place offers but does not automatically delete its record. Contact us if you also want the information erased. The Fair does not currently apply a single automatic deletion deadline to all event records; research retention is described separately by Connection.

Your choices and rights

You can request access, correction, erasure, restriction or, where applicable, portability of your information. You can object to processing based on legitimate interests and withdraw consent where processing relies on it. These rights have legal limits; withdrawal does not undo earlier lawful processing.

Email contact@workupward.com. We may need to verify your identity and normally respond within one month. You can also complain to the Finnish Data Protection Ombudsman.

For participation and website access, see our accessibility page.