Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
National Research & Innovation Conference 2025 ("NRIC 2025", "we", "our", "us") is organised by King Edward Medical University (KEMU), Lahore, Pakistan. We are committed to protecting your privacy and handling your personal data transparently and in accordance with:
Our dedicated privacy contact point is info@nric2025.org
| Category | Specific items | Purpose / lawful basis |
|---|---|---|
| Identity & contact | Name, email address, phone number, CNIC, university registration number, institution, year of study, city, country | Contract fulfilment (event registration & attendance); legitimate interests (event security & badge printing) |
| Payment & billing | Proof of bank transfer (reference number, amount, date, bank name) | Contract fulfilment; legal obligations (financial record-keeping) |
| Technical | IP address, browser user-agent, aggregated traffic metrics from Vercel Analytics | Legitimate interests (site performance & security) |
* As the PDP Bill is not yet law, our "legal basis" references the principles it sets out (consent, contract, legitimate interests, legal obligation). When the Bill becomes law we will align terminology accordingly.
to confirm eligibility, issue e-badges/QR codes, and facilitate on-site check-in.
to match your manual bank transfer with your registration and issue receipts. We never store or process your full card or bank-account credentials.
to send schedules, venue changes, or urgent notices via email (Resend) or WhatsApp API.
Vercel Analytics provides only aggregated, de-identified visit statistics; no individual-level tracking cookies are set.
to satisfy accounting, tax, or lawful requests from Pakistani authorities.
We do not sell, rent, or disclose your personal data to sponsors, exhibitors, or any third party. Limited service providers (Resend for email, WhatsApp Business API for payment confirmations, Vercel for hosting/analytics) receive only the information necessary to perform their services under strict confidentiality agreements.
Our primary servers are located in Vercel's EU data centres. Where data leaves Pakistan, we rely on contractual safeguards (standard contractual clauses) and industry-standard encryption to ensure a level of protection comparable to Pakistani requirements.
| Data set | Retention period |
|---|---|
| Registration records & payment proofs | Up to 3 years after the conference (audit & reporting) |
| Communications logs (email/WhatsApp) | 12 months |
| Aggregated analytics | 24 months (non-identifiable) |
Longer retention may apply if required by law or to establish, exercise, or defend legal claims.
Until the PDP Bill becomes law, we voluntarily offer the following rights in line with its draft provisions:
request a copy of the data we hold about you
correct inaccurate or incomplete data
ask us to delete data when it is no longer needed
limit certain processing under specified conditions
challenge processing based on legitimate interests
receive your data in a structured, machine-readable format
Send all requests to info@nric2025.org. We will respond within 30 days. If you believe we have not handled your request properly, you may lodge a complaint with the National Commission for Personal Data Protection once it is formally established.
NRIC 2025 accepts participants aged 16 and above. By registering, you confirm that you are at least 16 years old. If we learn that a child under 16 has registered without documented parental consent, we will delete their data promptly.
We may update this Privacy Policy to reflect legal, operational, or technological changes. Material revisions will be announced on nric2025.org 14 days before they take effect. The "Last updated" date at the top will always show the latest version.
We welcome all questions, comments, and requests regarding this policy.
Contact our privacy team for any questions or concerns about how we handle your data.
