Last Updated: June 25, 2025
Business Ground Group, the organizer of the Business International Petroleum and Energy Conference BIPEC EXPO 2027 (“we,” “us,” or “our”), is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of personal information when you interact with our website bipec.iq , register for BIPEC EXPO 2027, use the BIPEC EXPO mobile application, or engage with our services, including event-related activities such as exhibitions, B2B meetings, and networking. By accessing or using our services, you consent to the practices described herein, in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Iraq’s Law No. 6 of 2017 on IT Crimes. This policy is designed to provide robust legal protection for all stakeholders in the energy and petroleum industry.
Definitions
For clarity, the following terms are used in this Privacy Policy:
- Personal Information: Any information that can identify you, directly or indirectly, such as name, email address, phone number, or organization details.
- Usage Data: Automatically collected information about your interactions with our services, such as IP address, browser type, or pages visited.
- Data Controller: Business Ground Group, responsible for determining the purposes and means of processing your personal information.
- Data Processor: Third-party service providers processing personal information on our behalf, under strict confidentiality agreements.
- Services: Our website, mobile app, event registration, B2B meeting platform, exhibitions, conferences, and related activities for BIPEC EXPO 2027.
Information We Collect
We collect various types of information to deliver our services and enhance your experience at BIPEC EXPO 2027. The categories include:
- Personal Information Provided by You:
- Registration Details: When registering as a visitor, delegate, exhibitor, sponsor, or speaker, we collect your full name, email address, phone number, job title, company/organization name, billing address, and payment information (e.g., credit card details).
- Event Preferences: Information such as session selections, B2B meeting requests, dietary requirements, accessibility needs, or visa support requests submitted via forms or the BIPEC EXPO app.
- Contact Form Submissions: Messages or inquiries submitted through our Contact Us form, including establishment type (e.g., NGO, company, per June 25, 2025, 00:12:54) and additional details.
- Sponsorship/Exhibitor Materials: Branding assets (e.g., logos, company profiles, videos) provided for inclusion in event materials.
- Registration Details: When registering as a visitor, delegate, exhibitor, sponsor, or speaker, we collect your full name, email address, phone number, job title, company/organization name, billing address, and payment information (e.g., credit card details).
- Automatically Collected Information:
- Usage Data: IP address, device type, operating system, browser type/version, pages visited, time/date of visits, and clickstream data, collected via cookies, web beacons, or analytics tools (e.g., Google Analytics, per June 25, 2025, 00:12:54).
- Mobile App Data: Unique device identifiers, mobile operating system, and app interaction data when using the BIPEC EXPO app for B2B meetings or event navigation.
- Usage Data: IP address, device type, operating system, browser type/version, pages visited, time/date of visits, and clickstream data, collected via cookies, web beacons, or analytics tools (e.g., Google Analytics, per June 25, 2025, 00:12:54).
- Third-Party Information:
- Service Providers: Data from payment processors (e.g., Stripe, PayPal), event management platforms, or social media platforms when you engage with our content (e.g., LinkedIn shares).
- شركائنا: Information shared by Our Partners (e.g., exhibitors, sponsors, per June 25, 2025, 00:12:54) for coordinating B2B meetings or sponsorship activities, with your consent.
- Service Providers: Data from payment processors (e.g., Stripe, PayPal), event management platforms, or social media platforms when you engage with our content (e.g., LinkedIn shares).
How We Collect Information
We collect information through the following methods:
- Direct Interactions: Forms on our website or app (e.g., registration, Contact Us, sponsorship/exhibitor applications), email correspondence, or in-person registration at the event.
- Automated Technologies: Cookies, web beacons, and analytics tools track usage data. See our سياسة ملفات تعريف الارتباط for details on managing cookies, including essential, performance, functionality, and marketing cookies (per June 25, 2025, 00:12:54).
- Third-Party Sources: Payment processors, event platforms, or social media integrations provide data when you interact with our services, subject to their privacy policies.
Purposes and Legal Bases for Processing
We process your personal information for the following purposes, with legal bases under applicable laws (e.g., GDPR Article 6, CCPA):
- Event Management: To process registrations, issue badges, facilitate B2B meetings, and coordinate sessions, exhibitions, or networking events (Legal Basis: Performance of a contract, Consent).
- Payment Processing: To handle registration fees, sponsorship payments, or exhibitor bookings, including secure transactions via third-party processors (Legal Basis: Performance of a contract, Legitimate interests).
- Personalization: To tailor your experience, such as recommending sessions or matching B2B meeting partners based on your preferences (Legal Basis: Consent, Legitimate interests).
- Marketing and Communications: To send event updates, newsletters, or promotional materials about BIPEC EXPO 2027 or future events, with opt-in consent (Legal Basis: Consent).
- Analytics and Improvement: To analyze website/app usage, track engagement, and enhance our services using tools like Google Analytics (Legal Basis: Legitimate interests, Consent for non-essential cookies).
- Legal Compliance: To comply with legal obligations, such as visa processing, tax reporting, or responding to regulatory inquiries (Legal Basis: Legal obligation).
- Security: To protect our services from fraud, spam, or unauthorized access, using measures like reCAPTCHA (per June 25, 2025, 00:12:54) (Legal Basis: Legitimate interests).
How We Share Your Information
We share your personal information only as necessary and with appropriate safeguards:
- Service Providers: Third-party processors (e.g., payment gateways, analytics providers, event platforms) process data on our behalf, bound by data processing agreements ensuring confidentiality and compliance with GDPR/CCPA. Examples include Stripe for payments, Mailchimp for newsletters (per June 25, 2025, 00:12:54), and Google Analytics for usage tracking.
- Event Partners: Our Partners (e.g., exhibitors, sponsors, per per June 25, 2025, 00:12:54) may receive limited data (e.g., name, job title) for B2B meeting coordination or sponsorship branding, only with your explicit consent.
- Legal Authorities: We may disclose data to comply with legal obligations (e.g., visa support letters, tax audits) or respond to law enforcement requests, in accordance with Iraq’s Law No. 6 of 2017 and other applicable laws.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to a successor entity, with prior notice and consent where required.
- Public Disclosures: With your consent, we may display your name, organization, or profile (e.g., speaker bios, exhibitor listings) on our website, app, or event materials.
We do not sell your personal information to third parties, as prohibited by CCPA and aligned with industry standards for energy sector events.
International Data Transfers
BIPEC EXPO 2027 is a global event, and your personal information may be transferred to countries outside Iraq, including the European Union, United States, or United Arab Emirates, where our service providers or partners operate. We ensure compliance with international data transfer requirements:
- GDPR Safeguards: For transfers to non-EEA countries, we use Standard Contractual Clauses (SCCs) or rely on adequacy decisions by the European Commission.
- CCPA Compliance: For California residents, we disclose cross-border transfers and ensure equivalent protections.
- Iraq Regulations: Transfers comply with Iraq’s data protection framework, prioritizing secure transmission and storage.
Your consent to this policy signifies agreement to such transfers, with safeguards in place to protect your data.
Data Security
We implement robust security measures to protect your personal information, particularly given the energy industry’s sensitivity to data breaches:
- Technical Measures: Encryption (e.g., TLS/SSL for website data), firewalls, secure servers, and reCAPTCHA to prevent spam (per June 25, 2025, 00:12:54).
- Organizational Measures: Access controls, employee training, and regular security audits to ensure compliance with GDPR, CCPA, and Iraq’s Law No. 6 of 2017.
- Payment Security: Payment data is processed via PCI DSS-compliant providers (e.g., Stripe), with no storage of full credit card details on our servers (per June 25, 2025, 00:12:54).
Despite these measures, no internet transmission or storage is 100% secure. We strive to use commercially acceptable means but cannot guarantee absolute security. In case of a data breach, we will notify affected users and regulators within 72 hours, as required by GDPR.
Your Data Protection Rights
Depending on your location and applicable laws, you have the following rights regarding your personal information:
- Access: Request a copy of your personal data we hold (GDPR Article 15, CCPA).
- Rectification: Correct inaccurate or incomplete data (GDPR Article 16).
- Erasure: Request deletion of your data, subject to legal obligations (GDPR Article 17, CCPA).
- Restriction: Limit processing in certain circumstances (GDPR Article 18).
- Objection: Object to processing based on legitimate interests or marketing (GDPR Article 21).
- Data Portability: Receive your data in a structured, machine-readable format (GDPR Article 20).
- Opt-Out of Sale/Sharing: California residents can opt out of data sharing (CCPA).
- Non-Discrimination: We will not discriminate against you for exercising your rights (CCPA).
To exercise these rights, contact us at info@bipecexpo.com. We will respond within 30 days (GDPR) or 45 days (CCPA), with extensions where permitted. Identity verification may be required to process requests securely.
Data Retention
We retain personal information only as long as necessary for the purposes outlined in this policy, unless a longer period is required by law:
- Registration Data: Retained for up to 5 years post-event to manage follow-ups, future events, or legal obligations (e.g., tax records).
- Marketing Data: Kept until you unsubscribe, with consent refreshed every 2 years.
- Usage Data: Retained for up to 2 years for analytics, unless anonymized for longer-term trends.
- Legal Compliance: Data required for visa processing or audits may be kept for up to 7 years, per Iraqi regulations.
After retention periods, data is securely deleted or anonymized, in line with GDPR and CCPA requirements.
Cookies and Tracking Technologies
Our website and app use cookies and similar technologies (e.g., web beacons, pixels) to enhance functionality, analyze usage, and deliver personalized content. Categories include:
- Essential Cookies: Required for website operation (e.g., navigation, form submissions).
- Performance Cookies: Track anonymous usage data (e.g., Google Analytics).
- Functionality Cookies: Remember preferences (e.g., language, login).
- Marketing Cookies: Deliver targeted ads or track campaign performance.
You can manage cookie preferences via our cookie banner or browser settings. For details, see our سياسة ملفات تعريف الارتباط.
Third-Party Links and Services
Our website and app may link to third-party services (e.g., payment gateways, social media, Our Partners’ websites). These services have their own privacy policies, and we are not responsible for their practices. Review their policies before sharing data (e.g., Stripe, Mailchimp, LinkedIn).
Children’s Privacy
BIPEC EXPO 2027 is not intended for individuals under 16. We do not knowingly collect personal information from children. If we discover such data, we will promptly delete it. Contact us at info@bipecexpo.com if you believe a child has provided data.
Changes to This Privacy Policy
We may update this policy to reflect changes in our practices, legal requirements, or event operations. Updates will be posted on this page with a revised “Last Updated” date. Significant changes will be communicated via email or website notice, with consent sought where required by law.
Contact Us
For questions, concerns, or to exercise your data protection rights, contact our Data Protection Officer:
Business Ground Group
Name of person responsible: Ahmed Hasan Ali
Official email: info@bipecexpo.com
Phone number: +9647706441122
Location of company: Baghdad – Al-Karrada, Salman Faeq Street / Al-Rafeef Building, 2nd Floor, Apartment 15
Industry-Specific Considerations
As a leading event in the energy and petroleum industry, BIPEC EXPO 2027 recognizes the sector’s unique data protection challenges, including sensitive commercial data, intellectual property, and geopolitical considerations. We:
- Adhere to industry best practices, drawing from standards set by events like ADIPEC and IPTC (,,).
- Protect exhibitor and sponsor data (e.g., branding assets, per June 25, 2025, 00:12:54, with enhanced encryption and access controls.
- Ensure compliance with international sanctions and trade regulations affecting energy sector data transfers.
- Conduct regular risk assessments to mitigate threats specific to high-profile industry events.
Consent and Your Responsibilities
By providing personal information, you confirm that it is accurate and that you have the authority to share it (e.g., on behalf of your organization). You may withdraw consent for non-essential processing (e.g., marketing) at any time by unsubscribing or contacting info@bipecexpo.com. Withdrawal does not affect the lawfulness of prior processing.