Last updated: 10 July 2026
1.1. The data controller for this event is BPP (CI) Limited (doing business as BPP International Finance) with its registered address at Regus, Liberation Station, St Helier, Jersey, JE2 3AS ("we", "us" or "our") which forms part of BPP Education Group. This notice is provided in accordance with, where applicable, the Data Protection (Jersey) Law 2018, the Data Protection (Bailiwick of Guernsey) Law 2017, and/or to attendees based in the United Kingdom or European Economic Area, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (together the "Applicable Data Protection Law").
2.1. When you register for the BPP International Finance Granite Governance Conference 2026 in Jersey and/or Guernsey (the "Event"), we collect your name, job title, organisation, email address and telephone number ("Registration Details") for the following purposes:
(a) to manage your registration and attendance at the Event;
(b) to contact you with information about the Event and any changes to it; and
(c) if you have opted in, to share your Registration Details with our confirmed event sponsors so that they may contact you about their products and/or services related to the nature of the Event.
2.2. Our lawful basis for the purposes set out at clauses 2.1(a) and 2.1(b) is our legitimate interests in organising and running the Event. Our lawful basis for the purpose set out at clause 2.1(c) is your consent. These lawful bases apply under, where applicable, the Data Protection (Jersey) Law 2018, Data Protection (Bailiwick of Guernsey) Law 2017 and the UK GDPR.
3.1. If you have ticked the opt-in box on the registration form, we will share your Registration Details with the following confirmed sponsors of the Event:
(a) NASDAQ - (Privacy Policy);
(b) Islands Insurance - (Privacy Policy); and
(c) Further sponsors to be confirmed.
(each a “Sponsor” and together the “Sponsors”).
3.2. Each Sponsor will use your Registration Details as an independent data controller for its own marketing purposes. You should refer to each Sponsor's own privacy policy for details of how it will use your data. We will update this notice as further sponsors are confirmed leading up to the Event.
4.1. We will retain your Registration Details for a period of [12 months] following the date of the Event, after which they will be securely deleted, unless we are required to retain them for longer by applicable law.
5.1. Under the Applicable Data Protection Law, you have the right to:
(a) withdraw your consent to sharing your data with Sponsors at any time, without affecting the lawfulness of any sharing that took place before withdrawal;
(b) access a copy of your personal data that we hold;
(c) request correction of inaccurate or incomplete data;
(d) request deletion of your data in certain circumstances;
(e) lodge a complaint with the Jersey Office of the Information Commissioner (JOIC) at www.jerseyoic.org, Office of the Data Protection Authority (ODPA) at www.odpa.gg or the ICO at www.ico.org.uk.
(f) receive your personal data in a structured, commonly used and machine-readable format (data portability), where processing is based on consent or contract and is carried out by automated means;
(g) object to processing based on legitimate interests; and
(h) request that we restrict our processing of your data in certain circumstances.
5.2. To exercise any of the above rights, please contact us at:
FAO of the Data Protection Officer
BPP Education Group
Legal Team
1 Portsoken Street
London
E1 8BT
Email address: dataprotection@bpp.com
5.3. If you withdraw your consent before we have shared your Registration Details with a Sponsor, we will not pass your details to that Sponsor. If your Registration Details have already been shared with a Sponsor, that Sponsor is an independent data controller and you will need to exercise your rights (including any right to erasure or objection to marketing) directly with that Sponsor, in accordance with their own privacy policy.
6.1. Where your Registration Details are transferred to a Sponsor based outside of Jersey, Guernsey, the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place before doing so. These safeguards may include reliance on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism, in each case in accordance with the Applicable Data Protection Law.