1. Introduction

Outstandico Ltd ("we", "us", "our") is committed to protecting the personal data of all individuals who interact with our website and services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This Policy applies to all visitors of the Website (conference-support.super.site) and to our clients and their representatives who use our conference support services.

We process personal data in accordance with the Gibraltar Data Protection Act 2004 (as amended) and, where applicable, the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR 2016/679).

2. What Personal Data We Collect

2.1 Data collected from Website visitors

• Name and email address (submitted via the "Schedule a call" form or any contact form)
• LinkedIn profile URL (if provided voluntarily)
• Company name and job title (if provided voluntarily)
• IP address, browser type, device type, and pages visited (collected automatically via cookies and analytics tools — see our Cookie Policy)
• Any other information you voluntarily provide in messages or enquiries

2.2 Data collected from Clients and their representatives

• Full name, job title, company name, and contact details
• LinkedIn profile and event app credentials (access granted for service delivery purposes)
• Calendar access data (Google Calendar or Calendly, used for meeting scheduling)
• Content assets: profile photo, short video, offer materials, lead magnet files
• Meeting notes, conversation insights, and follow-up materials shared with us during service delivery
• Billing and payment information (processed via our payment provider — we do not store full payment card data)

2.3 Data about third-party contacts (leads)

In the course of providing our services, we identify and contact potential leads on behalf of our Clients. This may involve processing publicly available data from LinkedIn, conference applications, and other professional directories, including names, job titles, companies, and contact details of such individuals. This processing is carried out on behalf of our Clients, who are responsible for ensuring an appropriate legal basis for such outreach in their jurisdiction.

3. Legal Basis for Processing

We process personal data on the following legal grounds:

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted via the Website or email
• To deliver our conference support services in accordance with the Public Offer Agreement
• To schedule and manage meetings on behalf of Clients
• To conduct outreach to conference leads identified as part of service delivery
• To prepare reports, lead lists, meeting summaries, and follow-up materials
• To process payments and issue invoices
• To improve the Website and our services through analytics
• To send service-related communications (e.g., updates, reminders, reports)
• To comply with legal and regulatory obligations
• To publish case studies referencing Clients (subject to the terms of our Public Offer Agreement, Section 12.4)

5. Sharing of Personal Data

We do not sell personal data. We may share personal data with the following categories of recipients:

• Service providers and subcontractors who assist us in delivering our services (e.g., scheduling tools, CRM platforms, email providers), bound by appropriate data processing agreements
• Payment processors, for billing purposes — they operate under their own privacy policies
• Professional advisors (lawyers, accountants) where necessary
• Competent authorities, if required by applicable law

Where personal data is transferred outside Gibraltar or the European Economic Area, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions).

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Client and service delivery data: retained for 5 years following the end of the contractual relationship, for legal and accounting purposes
• Website enquiry data: retained for 12 months from the date of last contact, unless a service agreement is entered into
• Analytics and technical data: retained in accordance with our Cookie Policy
• Lead contact data processed on behalf of Clients: retained for the duration of the service engagement and deleted or returned to the Client upon completion

After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights

Under applicable data protection law, you have the following rights in relation to your personal data:

• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restriction of processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at: inquiries@outstandico.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Gibraltar Regulatory Authority (GRA) or the relevant supervisory authority in your country of residence.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These include access controls, encrypted communications, and regular review of our data handling practices.

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Third-Party Links

The Website may contain links to third-party websites (e.g., LinkedIn, conference platforms). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

10. Children's Data

Our services are directed exclusively at business professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been collected, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on the Website. Material changes will be notified to active Clients via email. Continued use of the Website or our services after the effective date of any changes constitutes acceptance of the updated Policy.

12. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

© 2026 Outstandico Ltd. All rights reserved.