MIOS 2026 Privacy Policy

1. Data Controller

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is:

Manchester Ophthalmic Imaging & Ophthalmology Education Group (MOIEG)
Email: [insert contact email]
Location: United Kingdom

If you have any questions about this Privacy Policy or how your data is handled, please contact us using the details above.

2. What Information We Collect

When you register for MIOS 2026, we may collect:

Full name
Professional title and organisation
Email address
Contact details
Dietary or accessibility requirements (if provided)
Payment confirmation details
Student status verification (if applicable)

We do not store full credit or debit card details.

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

Contractual necessity: to process your registration and manage your attendance at MIOS 2026.

Legitimate interests: to administer the event effectively and communicate essential conference information.

Where dietary or accessibility information is provided, this is processed only for the purpose of accommodating your requirements during the event.

4. How We Use Your Information

Your information is used solely to:

Process your registration
Issue invoices (where requested)
Confirm payment
Provide event updates and logistical information
Issue certificates of attendance (if applicable)
Manage on-site attendance

We do not send marketing communications.

5. Payment Processing

All payments are securely processed via our third-party payment provider, Square, Inc..

Payment information is transmitted directly to Square and is not stored on our servers. Square processes payment data in accordance with its own privacy and security policies.

6. Data Sharing

We do not sell or share your personal data for marketing purposes.

Your data may be shared only where necessary with:

Payment processors (Square)
Event venue staff (for access or catering purposes only)
Professional service providers supporting event administration

All third parties are required to process your data securely and lawfully.

7. Data Retention

We retain personal data only for as long as necessary to:

Administer the conference
Meet accounting and legal obligations
Maintain financial records (typically up to 6 years in line with UK tax requirements)

Data that is no longer required will be securely deleted.

8. Your Rights Under UK GDPR

You have the right to:

Access your personal data
Request correction of inaccurate data
Request erasure of your data (where applicable)
Restrict or object to processing
Request data portability

If you are dissatisfied with how your data is handled, you have the right to lodge a complaint with the:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.