Privacy Policy
This policy explains how Provenance collects, uses, and protects personal data provided through our website and event registration processes.
Last Updated: 28 April 2025 · Effective Date: 28 April 2025
1. Introduction
Provenance ("we", "us", "our") is an event production and conference programming organisation based in Singapore. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 (Singapore) ("PDPA") and other applicable data protection requirements.
This Privacy Policy applies to information collected through our website at provenance.sbs, our delegate registration processes, enquiry forms, and any other interactions you may have with us in connection with our conference and event services.
For questions regarding this policy or your personal data, please contact us at [email protected].
2. Data We Collect
Information You Provide Directly
- Full name and professional title when registering as a delegate or submitting an enquiry
- Business email address and telephone number
- Organisation name and role, where provided for delegate badging or programme materials
- Dietary requirements or accessibility needs submitted ahead of an event
- Messages sent to us via the contact form on our website
Information Collected Automatically
- Browser type, device type, and operating system
- Pages visited, time on page, and referring URL
- IP address (used in anonymised analytics)
- Cookie identifiers (see Section 5)
Legal Basis for Processing
- Consent — for marketing communications and optional analytics cookies
- Contract — to process delegate registrations and deliver event services
- Legitimate interest — for website security, fraud prevention, and service improvement
- Legal obligation — where required by Singapore law or regulatory requirement
Retention Periods
Event registration records are retained for up to 3 years following an event. Enquiry and marketing preferences data is held for up to 2 years from last interaction. Website analytics data is retained for up to 14 months.
3. How We Use Your Data
Personal data collected through our website and registration processes is used for the following purposes:
- Processing delegate registrations, producing name badges and programme booklets
- Coordinating dietary and accessibility arrangements with venue partners
- Sending pre-event information, programme updates and post-event recap notes
- Responding to enquiries submitted through our contact form
- Sending information about forthcoming events where you have opted in
- Analysing website usage to improve content and user experience
- Producing anonymised aggregate reports for sponsor and partner organisations
Data Sharing
We do not sell personal data. We may share data with trusted third parties in the following limited circumstances:
- Venue operators — to arrange room set-up, catering and access requirements
- Print and badge suppliers — for programme booklet and delegate credential production
- Analytics providers — Google Analytics (anonymised usage data)
- Regulatory authorities — where required by law or lawful request
All third-party processors are bound by confidentiality obligations consistent with Singapore's PDPA requirements.
4. Data Protection Measures
We apply reasonable organisational and technical measures to protect personal data against unauthorised access, loss, or misuse:
Encryption in Transit
All data transmitted between your browser and our website is protected by TLS/HTTPS encryption.
Access Controls
Internal access to personal data is restricted to staff members who require it for specific event or operational purposes.
Regular Reviews
Our data handling practices and access permissions are reviewed periodically as part of routine operational checks.
Breach Procedures
In the event of a data breach, we will notify affected individuals and the PDPC where required under Singapore law.
6. Your Rights
Under the PDPA, you have the following rights in relation to your personal data:
Right of Access
Right to Correction
Right to Withdrawal of Consent
Right to Data Portability
Right to Lodge a Complaint
To exercise any of these rights, please write to us at [email protected].
7. Third-Party Links
Our website may contain links to speaker profiles, venue websites, or industry resources operated by third parties. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site before submitting personal data to it.
8. Children's Privacy
Our events and website are directed at legal industry professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will arrange for its deletion.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable requirements. Material changes will be communicated by posting an updated version on this page with a revised "Last Updated" date.
Continued use of our website or event services following any update constitutes acknowledgement of the revised policy. We encourage you to review this page periodically.
10. Contact Information
For any questions about this Privacy Policy or to exercise your data rights, please reach out to us using the details below.