Stripe YSTE privacy notice
This privacy notice (“Notice”) describes how we collect, use, and share the personal data about you in relation to your interest in, or attendance of, the Stripe Young Scientist & Technology Exhibition (“StripeYSTE”).
Who we are
Stripe Technology Company Limited and its affiliates (“Stripe,” “we,” and “us”) care about your privacy. Stripe is a “data controller,” which means that we are responsible for deciding how we hold and use personal data about you.
How is your personal data collected?
We will collect data directly from you if you provide it as part of StripeYSTE (through your purchase of tickets, emails to StripeYSTE, and your interaction with our website) or if you are working with Stripe as a volunteer, sponsor, or partner. In some circumstances, we may collect data indirectly from third parties such as the YSTE Board.
What personal data do we collect?
We may collect, store, and use the following categories of personal data about you:
- Registration data. When you purchase tickets from us or register to attend StripeYSTE, we may collect or receive your contact information as a student, teacher, judge, or attendee—including information such as your name, role, school name and county, organisation, and any other information provided to us.
- Transaction data. When you are purchasing tickets for StripeYSTE, we will collect transaction data, including your name, email address, contact number, billing address, payment method information (such as debit card number), amount, and date of purchase.
- Communications data. We may communicate with you using the contact information we have about you to provide necessary information about StripeYSTE.
- Marketing data. We may invite you to participate in our events or surveys, or otherwise communicate with you for marketing purposes based on your consent.
- Photo and audio-visual data. We may use data such as photographs and recordings taken during StripeYSTE. We may use photographs or videos from events on our website, social media, and other media channels.
- Third-party data. We may collect information to coordinate with sponsors and partners of the event and third parties who help us run the event, including name, email address, contact number, role, and organisation.
- CCTV data. We will use CCTV cameras throughout the event premises for the purposes of health and safety, to ensure the security of the venue and property, and for the prevention and detection of crime. Footage is retained for a limited period; however, it may be held for longer where necessary for an investigation or legal claim.
- Accessibility data. We do not proactively collect any special categories of personal data about you (such as health information). We will collect this information where we are making special accessibility arrangements for you.
Why do we use your personal data?
In the context of StripeYSTE, the table below describes the categories of personal data that we will collect from time to time, as well as the legal basis that applies to our purposes for processing your personal data:
Who do we share information with?
We share personal data with other Stripe entities that help us run and administer StripeYSTE and for internal administration purposes.
We will share your personal data with external third parties who help us run StripeYSTE, with services including ticketing (Tito), web hosting, and communications. For more information about how we disclose personal data, please click here.
International transfers
Personal data may be shared or transferred to external third parties and Stripe affiliates who operate outside of Ireland. These countries may have data protection rules that are different from your country. When we transfer your personal data across borders, we will take measures to comply with applicable data protection laws. Stripe relies on a number of data transfer mechanisms to lawfully transfer personal data outside of the European Economic Area such as adequacy decisions approved by the European Commission, the EU-U.S. Data Privacy Framework, the EU Standard Contractual Clauses, and/or UK International Data Transfer Addendum with a data recipient outside the EEA, UK, or Switzerland, or other alternative legal methods available to us under applicable law.
Learn more about how we deal with international data transfers here.
How do we keep information safe?
We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of your personal data. We maintain organisational, technical, and administrative measures designed to protect personal data covered by this Notice against unauthorised access, destruction, loss, alteration, or misuse. Personal data is only accessed by a limited number of personnel who need access to the information to perform their duties. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure.
To learn more about how we keep your data secure, click here.
Do we send marketing communications?
With your consent, we may send you email marketing communications about StripeYSTE (e.g., feedback surveys), or otherwise communicate with you for marketing purposes. We do not share your information with third parties for marketing purposes.
You can ask us to stop sending you marketing information at any time by contacting yste@stripe.com, or by clicking on the unsubscribe link in the email.
How long do we keep personal data for?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may hold on to your personal data for a longer period if we need it for legal reasons.
Device data
Stripe uses the Accessibly service to provide accessibility tools on the StripeYSTE website. All storage used is strictly necessary for our accessibility features to function properly. For more information, please see Accessibly’s policy.
We use Plausible Analytics to collect anonymised usage data on the StripeYSTE website for analytical purposes. Cookies are not used and no personal data is collected. For more information, please see Plausible’s policy.
What are my rights?
Under applicable law, you may have the right to ask us things about your personal data. You can ask to receive it, delete it, change it, or stop using it. These are not absolute rights and are subject to certain restrictions and exemptions.
If you are not happy with how we use your data, please contact yste@stripe.com. You can also contact your local data protection authority.
Who should I contact with questions?
If you have any questions about this Notice, please contact us at yste@stripe.com.
If you wish to reach Stripe’s Data Protection Officer, you can contact us at dpo@stripe.com. For more information, please see Stripe’s Privacy Policy.
Changes to this Notice?
We may change or update this Notice at any time. If we make any substantive changes, we will show a notice on this website or otherwise let you know, as required by law. Please check this page for the latest version of this Notice.
Last updated: 3 September 2025