Privacy Policy

Draft policy — pending review by Beaconhouse's administration before this event goes live.

Who this covers

This policy covers information collected through the Accord 6.0 website (this site): the accounts people create, and the registration, payment and sponsorship forms. Accord 6.0 is a student event organized by Beaconhouse at its Cantt Campus, Multan. "We" / "us" below refers to the Accord 6.0 organizing committee.

What we collect

We only collect what you give us directly:

• Your account: your name, your email address and a password. Your password is never saved as you typed it. It is scrambled (hashed) with a secret key before it is stored, so nobody on our team can read it.
• Your registration: whether you're a student, group leader, parent/guest or sponsor, how you heard about Accord, which pass you chose and how you're paying. For group leaders, the number of people and the names of everyone in the group. For sponsors, the tier you're interested in.
• Your payment: if you pay by JazzCash or bank transfer, a photo or screenshot of your payment receipt. A receipt can show your name, account details and a transaction ID, so please crop out anything that isn't needed. We also record the amount due and whether your payment is pending or confirmed.
• Your tickets: when your payment is confirmed we create one ticket for each person in your registration, with the name on it (for a group, the names you gave us). We record when a ticket is scanned at the gate.
• Email we send you: verification codes (to sign up, reset a password or change your email), a message when we receive your registration, a message when your payment is confirmed (with your tickets), a notice when your password or email address is changed, a "new device signed in" alert if you turn that on, and a message if you delete your account.
• The sponsorship inquiry form: if you use the form on the Sponsors page (no account needed) we keep your name, email, company, the tier you chose and your message, after you confirm your email with a code. They are read only by the committee. Email us if you want them removed.
• Your agreement: the date and time you accepted the Terms and this Privacy Policy when you created your account, and which version of them it was.
• Where you're signed in: for each device you sign in on, the browser and operating system it reports, the country your connection comes from, and when you signed in and were last active. We show this on your Account page so you can sign out of a device you don't recognise. If you turn on sign-in alerts, we also keep a scrambled fingerprint of each browser, system and country combination you have used, so we can email you when a new one signs in. We do not store your IP address in your account.
• On your device: a sign-in token stored in your browser, so you stay signed in for up to 7 days. It is removed when you sign out.
• Abuse protection: to stop people guessing codes and passwords, we keep short-lived counters of attempts tied to a network address. They expire within an hour.

We don't use analytics or advertising trackers on this site. Like any website, the services that deliver the pages can see your IP address when you visit: GitHub, which hosts the pages. The small animation libraries the pages use are served from the same site, not from an outside network. The map on the Info page is Google Maps; it is only loaded if you press "Show the map", and Google may then set cookies.

How we use it

To run your account, check your payment against your name and email, confirm your place, email you about it, and coordinate attendance or sponsorship logistics for Accord 6.0. We don't sell your information, and we don't use it for unrelated marketing.

Who sees it

The Accord 6.0 organizing committee members who check payments can see your name, email, registration details and receipt image. Relevant Beaconhouse staff involved in running the event may see attendee lists (for example, for venue coordination). Committee members can also export the registrations to a spreadsheet file for logistics; those files stay on the committee's own computers. how long they are kept: to be confirmed

Door staff at the gate sign in separately. When they scan a ticket, so they can check it is you, they see: the name on the ticket, a short reference, the pass, which ticket it is in the booking, the type of registration, how it was paid, when the payment was confirmed, who bought it and their email address with most of it hidden (for example g••••••@gmail.com), and, for a group, the names on the same booking and who has already come in. They can also search tickets by name. They cannot see receipts or the full list of registrations. Your password is not visible to anyone.

To run the site we use outside services that handle your information on our behalf: Cloudflare, which hosts the site's back end, stores accounts, registrations and receipts, and runs the "I'm human" check on the sign-up and sponsor forms (Cloudflare Turnstile, which looks at your browser to tell people from bots), and EmailJS, which delivers the emails we send you. These companies' servers may be outside Pakistan. We don't share your information with other companies except where necessary to run the event itself.

If you're under 18

Accord 6.0 is for BSS and non-BSS students in classes VI to XI (ages 11 to 17). If you're registering as a minor, we encourage doing so with a parent, guardian, or teacher's awareness. A parent or guardian can contact us at any time to review or remove a minor's information.

How long we keep it

Account, registration and receipt information is kept for as long as it's needed to organize this year's event, check payments and resolve any questions afterward, and is then deleted unless you've asked us to keep it for a future edition. If you replace a receipt before your payment is confirmed, the earlier receipt is kept with your registration until then, so it isn't lost, and is deleted with it.

We also keep an automatic backup of this information on a computer held by the organising committee. Backups are deleted after 30 days, so anything you ask us to delete disappears from backups within 30 days.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, at any time. From the Account page you can change your name, email address and password, sign out of other devices, download a copy of everything we hold about you, and delete your account yourself. When you delete your account we remove your sign-in, registration, receipts and tickets, and email you to confirm. Once your payment has been confirmed, the account can't be deleted online because we keep the record of that payment and your tickets. Contact us instead using the details below.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Email accord22@bh.edu.pk or call 0302 7778889 or 0303 2338989.