Privacy Policy

This Privacy Policy explains how CONEXIPRO LTD., doing business as She Builds Asia ("we", "us", "our"), collects, uses, shares and protects your personal data when you visit shebuildsasia.com, buy a ticket, register for, attend or partner with She Builds Asia events, or otherwise interact with us.

We are committed to handling personal data in line with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and, where it applies to you, the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR.

1. Who we are

The data controller responsible for your personal data is:

CONEXIPRO LTD. (dba She Builds Asia) 254 Chapman Rd, Ste 208 #24089, Newark, Delaware 19702, USA Email: shebuilds@myconexa.com

For any privacy question or request, please contact us at the email above with the subject line "Privacy request".

2. Personal data we collect

Depending on how you interact with us, we may collect:

Identity and contact data: name, email address, phone number, company, job title, country, and LinkedIn or social media profile you choose to share.
Ticket and transaction data: ticket type, order details, promo or referral codes used, and payment status. Card payments are processed by our payment provider, Stripe. We do not receive or store your full card details.
Registration and badge data: the information you provide in our attendee or badge forms, such as the name and title to print on your badge, your interests and goals for the event.
Matchmaking data: if you choose to take part in pre-event introductions, the profile information and preferences you provide to help us suggest relevant connections, which may be processed through the Conexa platform operated by CONEXIPRO LTD.
Event media: photographs, video and audio recorded at our events, which may include your image or voice.
Communications: messages you send us by email, forms or social media, and your marketing preferences.
Technical data: information sent automatically by your browser when you visit our website, such as IP address, device and browser type, and pages visited. Our website loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.
Partner and sponsor data: contact details of representatives of companies that sponsor, partner with or exhibit at our events.

We do not intentionally collect sensitive personal data (such as health, religious or biometric data). Please do not include it in forms unless we specifically ask, for example to accommodate an accessibility or dietary need, in which case we will ask for your explicit consent.

3. How we use your personal data, and our legal basis

Purpose	Legal basis (PDPA and GDPR)
Processing your ticket purchase, sending confirmations, and managing your registration and event access	Performance of a contract
Printing badges and running check-in on the day	Performance of a contract
Suggesting relevant connections through our matchmaking feature	Consent, which you can withdraw at any time
Sending event updates, practical information and changes to the programme	Performance of a contract; legitimate interests
Sending newsletters, offers and invitations to future events	Consent, or legitimate interests for existing attendees where permitted; you can unsubscribe at any time
Taking photographs and videos at the event and using them to report on and promote She Builds Asia	Legitimate interests, and consent where required by law
Sharing your contact details with a sponsor or partner	Consent only
Improving our events, website and services, including feedback surveys	Legitimate interests
Keeping records, preventing fraud and meeting accounting, tax and legal obligations	Legal obligation; legitimate interests

Where we rely on legitimate interests, we have balanced our interests against your rights. You can object at any time (see Section 8).

4. Event photography and recording

Our events are photographed and filmed. Images and recordings may be used on our website, social media, marketing materials and press coverage, and may be shared with our venue partner, sponsors and speakers to report on the event.

If you would prefer not to be photographed, please tell our team at registration or email us before the event. We will do our best to accommodate your request, although we cannot guarantee you will not appear in the background of wide or crowd shots. If you appear in a published image and would like it removed, contact us and we will remove it from channels we control where reasonably possible.

We do not sell your personal data. We share it only as needed with:

Service providers who help us run our business, such as Stripe (payments), form and email providers, website hosting, and the Conexa platform, under contracts that require them to protect your data.
Event venue and on-site suppliers, such as the venue, registration and badge printing teams, only as needed to run the event.
Sponsors and partners, only where you have given your consent, or where you choose to share your details with them directly (for example at their booth).
Photographers and media partners engaged to cover the event.
Professional advisers and authorities, where required by law, to protect our rights, or in connection with a business transfer such as a merger or acquisition.

6. International transfers

We are a company registered in the United States, and our events may take place in Thailand and other countries. Our service providers may process data in other countries. When your personal data is transferred outside Thailand, the European Economic Area or the UK, we take steps to ensure it receives an adequate level of protection, such as relying on the recipient's compliance with applicable data protection standards or using standard contractual clauses approved under the GDPR, and appropriate safeguards required under the PDPA.

7. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this policy:

Ticket, registration and badge data: up to 3 years after the event, so we can manage attendance records, answer queries and invite past attendees to future events.
Financial and transaction records: for the period required by tax and accounting laws.
Marketing data: until you unsubscribe or withdraw your consent.
Event media: may be kept in our archive and used for reporting and promotion of She Builds Asia for as long as it remains relevant, subject to your right to request removal.

When data is no longer needed, we delete or anonymise it securely.

8. Your rights

Under the PDPA and the GDPR, you have the right to:

Access the personal data we hold about you and obtain a copy.
Rectify inaccurate or incomplete data.
Erase your data in certain circumstances.
Restrict or suspend our use of your data in certain circumstances.
Object to processing based on legitimate interests, and to direct marketing at any time.
Data portability: receive your data in a structured, commonly used format, or ask us to transfer it to another controller where technically feasible.
Withdraw consent at any time, without affecting processing carried out before withdrawal.
Lodge a complaint with a supervisory authority. In Thailand, this is the Personal Data Protection Committee (PDPC). In the EU or UK, you can contact the data protection authority in your country of residence.

To exercise your rights, email shebuilds@myconexa.com. We may need to verify your identity before acting on your request. We will respond within the time required by law, normally within 30 days.

9. Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including relying on reputable providers with strong security practices. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a data breach where required by law.

10. Cookies and similar technologies

Our website does not use advertising cookies. Some third-party services we use, such as Google Fonts and our payment provider's checkout pages, may collect technical data when your browser connects to them, in line with their own privacy policies. If we introduce analytics or marketing cookies in the future, we will update this policy and ask for your consent where required.

11. Third-party websites

Our website links to other sites, such as Stripe checkout, LinkedIn, Instagram and partner websites. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

12. Children

Our events and website are intended for adults. We do not knowingly collect personal data from anyone under 18 years of age without the consent of a parent or guardian. If you believe a minor has provided us with personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with its effective date. If we make significant changes, we will notify you where appropriate.

14. Contact us