Privacy policy
Last updated September 1, 2026
Who we are
Expola provides an event platform to organizers (our customers) who use it to run websites, ticketing, apps, marketing and exhibitor sales for their events. This policy explains how we handle personal data as a controller for our own site and services, and how data is handled when we process it on behalf of organizers.
Data we collect
When you visit expola.com, request a demo or contact us, we collect the details you provide (name, work email, event name, message) and technical data such as IP address, browser and pages visited. When an organizer uses Expola to run an event, attendee and exhibitor data (names, emails, orders, badges, scans) is collected on the organizer's behalf; the organizer is the controller of that data and Expola is the processor.
How we use it
We use your data to respond to enquiries, provide and secure the service, send product updates you have asked for, and improve the platform. We do not sell personal data and we do not market to attendees of our customers' events.
Legal bases
We process data to perform a contract, with your consent where required (for marketing), and for our legitimate interests in operating and securing the service.
Sub-processors
We use infrastructure and service providers (hosting, payments, email delivery, analytics) under written agreements. A current list of sub-processors is available on request and is incorporated into our data processing agreement with organizers.
Retention
Enquiry data is kept for as long as needed to respond and for a reasonable period afterwards. Event data is retained for the life of the organizer's account and deleted or returned at contract end, in line with the data processing agreement.
Your rights
Depending on where you live, you may have rights to access, correct, delete or port your data, or to object to or restrict its processing. Attendees of an event should contact the organizer first; we will assist the organizer in responding. You can contact us at privacy@expola.com.
International transfers
Data may be processed in the EU and the United States. Where data is transferred outside the EEA or UK, we rely on standard contractual clauses or equivalent safeguards.
Changes
We will post any changes to this policy on this page and update the date above.