Privacy Policy

Last updated: 4 October 2026

This privacy policy explains what personal data Unleash & Believe collects when you use our website and sign up for our conferences, why we need it, who can see it and what your rights are. We follow the EU General Data Protection Regulation (GDPR).

1. Who we are

Unleash & Believe organises conferences and activities for young single adults. We are run by volunteers. The data controller is:

• Unleash & Believe, c/o Joep Boom
• Schoonveld 60, 3085 BT Rotterdam, the Netherlands
• E-mail: info@unleashandbelieve.eu

For any question about your data, e-mail us at the address above.

2. What data we collect

When you register for a conference, an account is created on our website. We collect:

Account and profile

• First and last name, e-mail address and phone number
• Password (stored only in encrypted, hashed form; we cannot read it)
• Gender and date of birth
• Whether you are a member of the Church (yes/no)
• Country, stake and ward
• T-shirt size

Conference registration

• The conference and the days you selected
• Dietary restrictions, and allergies or medical needs you choose to share (see section 4)
• Travel arrangements, including whether you can offer or need a ride
• Any remarks you add
• That you agreed to our Terms and Conditions, and when
• Payment status and amount (for paid events)
• An emergency contact (name and phone number), if we ask for it before the event

Other

• E-mails you send us
• Which of our conferences you attended, from 2022 onwards (see section 5)
• Photos and video taken at our events (see section 7)
• Basic technical data needed to run the website, such as login cookies (see section 8)

For the conferences from 2022 to 2025, we added who attended from the organisers’ own registration lists, but only for people who have an account on our website. We matched people by e-mail address. For this we do not store the e-mail address itself, only a one-way fingerprint: a code that cannot be turned back into your address.

3. Why we use your data and on what basis

• To create and manage your account (contract): so you can sign up, see and update your details, and register again more easily.
• To register you for a conference and run it (contract): planning rooms, food, T-shirts, groups and the programme, and checking that you meet the age requirement in our Terms.
• To send you e-mails about your registration (contract): booking confirmations and practical information about the event you signed up for.
• To handle payments and refunds (contract and legal obligation): for paid events, and to keep financial records.
• To keep you safe and cater for your diet (explicit consent): your allergies, medical needs and dietary needs, see section 4.
• To help with carpooling (contract, at your request): if you say you can offer or need a ride.
• To organise with local leaders (legitimate interest): ward and stake YSA leaders and the Area Young Adult Advisor help organise and follow up, see section 5.
• To help leaders invite you personally (legitimate interest): ward YSA leaders can see the first names of people from their ward who came to earlier conferences, so they can invite them again, see section 5.
• Event group chat (legitimate interest, you can opt out): we add participants to a group chat for the event they attend, so we can share practical updates. Other members of the group can see your phone number. If you would rather not be added, mention it in the remarks field when you sign up or e-mail info@unleashandbelieve.eu. You can leave the group at any time.
• Photos and video (legitimate interest): to share the conference experience and promote future events, see section 7.

We do not sell your data, we do not use it for advertising, and we do not make automated decisions about you.

4. Allergies, medical needs and dietary needs

Information about allergies, medical needs and some dietary needs is health data, a special category of personal data under the GDPR. We only process it with your explicit consent, which you give by filling it in (for example in the “Allergies or medical needs” field), and only to prepare safe meals and first aid.

• Only the people who need it see it: the conference coordinators, stake YSA leaders and the Area Young Adult Advisor where needed to run the event, and the kitchen and first-aid team as far as needed. Ward YSA leaders and the support couple do not see it.
• Leaving these fields empty is your choice, but then we cannot take your needs into account.
• You can change or remove this information in your profile at any time, or withdraw your consent by e-mailing us.

5. Who can see your data

• The organising team: the volunteers who organise the conference, only as far as they need it for their task.
• Ward YSA leaders: can see who from their own ward has signed up for a conference, which days you come and whether your payment went through, but not your date of birth, dietary needs, allergies, medical needs or remarks. So they can invite people personally, they also see the first name and ward of people from their ward who came to an earlier conference (from 2022) and have not signed up for the current one. People aged 36 or older are not shown on that list. Ward YSA leaders cannot see other wards.
• Stake YSA leaders, conference coordinators and the Area Young Adult Advisor: can see the sign-ups for a conference, including dietary needs, allergies and medical needs where needed to run the event.
• The conference support couple (“camp parents”): can see the names and ward of participants and overall numbers, such as how many people come each day. They do not see your contact, payment or health details.
• Other participants: if you offer or need a ride, we may share your name and contact details with the participants you carpool with. Other members of the event group chat can see your phone number (see section 3). A carpool is a private arrangement between participants (see our Terms and Conditions).
• The venue kitchen and first-aid team: dietary needs, allergies and medical needs, as far as needed (see section 4).
• Service providers who process data for us:
  • Stripe, for online payments (see section 6).
  • Our hosting provider, which stores the website and its database. Booking confirmation e-mails are sent from our website.

We only share data with others if the law requires us to, for example at the request of the police.

6. Payments

Payments for paid events are handled by Stripe. You enter your card or bank details directly with Stripe; we never see or store them. We only receive the payment status, amount and a reference. Stripe processes your payment data under its own privacy policy and may transfer data outside the European Economic Area with appropriate safeguards. Free events involve no payment at all.

7. Photos and video

Our team may take photos and videos at our conferences. We use them to share the conference experience and promote future events, for example on our website, our Instagram and other Unleash & Believe channels, and in announcements to Church units. We choose images respectfully.

• Don’t want to be photographed or published? Write it in the remarks field when you sign up, e-mail info@unleashandbelieve.eu, and tell the photographer at the event.
• Want a published photo removed? E-mail us and we will remove it from our own channels as soon as possible.

See also section 9 of our Terms and Conditions.

8. Cookies

When you first visit our website, a cookie banner lets you accept or refuse non-essential cookies. You can change your choice at any time through the cookie settings.

We currently only use cookies that are strictly necessary for the website to work. These do not need your consent:

We do not use analytics, advertising or social media tracking cookies. If we ever start using them, we will update this policy and only place them after you have accepted them in the cookie banner.

9. How long we keep your data

• Your account and profile: as long as you have an account. You can ask us to delete it at any time, also from your account (see section 11). We delete accounts that have not been used for three years.
• Conference sign-ups: up to two years after the event, to plan future conferences and handle questions.
• Attendance history (which conference you attended): five years after that conference, then deleted automatically.
• Allergies, medical needs, dietary needs and travel details that are only needed for one event: deleted or anonymised within three months after that event, unless they are saved in your profile.
• Payment and refund records: as long as the law requires, usually seven years.
• Photos and video: as long as they are useful for sharing the conference experience, unless you ask us to remove them.

10. Security

We take appropriate technical and organisational measures to protect your data, such as a secure (HTTPS) connection, hashed passwords, access limited to people who need it, ward YSA leaders who can only see their own ward, and e-mail addresses from older registration lists stored only as a one-way fingerprint.

11. Your rights

Under the GDPR you have the right to:

• Access the data we hold about you. In your account, choose “Download a copy”.
• Correct your data. You can update most of it yourself in your account. For changes or questions about a booking, you can e-mail info@unleashandbelieve.eu from your account page.
• Delete your data or your account. In your account, choose “Delete my account”.
• Restrict how we use your data.
• Object to our use of your data based on legitimate interest (for example photos or the event group chat).
• Data portability: receive your data in a common, machine-readable format.
• Withdraw your consent at any time, for example for your allergy or medical information. This does not affect what we did before you withdrew it.

When you choose “Download a copy” or “Delete my account”, we first send you an e-mail to confirm the request. After you confirm, one of our organisers handles it. If you delete your account, we may keep your sign-ups and payment records for past conferences as long as needed for our financial records (see section 9).

You can also use any of these rights by e-mailing info@unleashandbelieve.eu. We respond within one month. We may ask you to confirm your identity.

If you are not happy with how we handle your data, please contact us first. You also have the right to file a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

12. Age

Our conferences are for young single adults aged 18 to 35 (see our Terms and Conditions). We do not knowingly collect data from children.

13. Changes to this policy

We may update this privacy policy when our website or our way of working changes. The latest version is always on this page, with the date at the top. If a change is important, we will let registered participants know.