Legal & GDPR
Benjamin Dell avatar
Written by Benjamin Dell
Updated over a week ago

Attendees, Speakers, and other users on the platform will always see HeySummit's terms and conditions. However, you can also add your terms and conditions and privacy policy to your summit.

By adding your T&C and PP it won't remove HeySummit's. It will only prioritise yours over the platforms.

Simply navigate to Event Setup> Settings> Legal & GDPR to customise this information.


Click here to access our knowledge base article for adding your T&C.

Option to turn off cookie consent popup

By default, we will show a cookie consent popup to your event visitors. In most regions, this is a legal requirement. However, if you are in a region that does not have a legal requirement and you would prefer not to show the consent popup, then you can now turn this feature off by unticking the "Show Cookie Consent Popup?" button.

This is your sole responsibility and should only be done if you are confident that it is not a legal obligation in your region.

GDPR Compliance with Optional Attendee Opt-In

This is an optional feature designed to enhance GDPR compliance by allowing Event Organizers to request explicit attendee opt-in for sharing their email addresses with select partners. This is particularly beneficial for organizers requiring additional data protection measures based on their geographical location.

Just a reminder that the default setting is off, meaning that attendee acceptance of terms and conditions is implied when they provide their email address. This offers flexibility for event organizers who may need to comply with stricter data protection regulations, providing an extra layer of consent if necessary.

To enable this feature simply go to Event Setup > Legal & GDPR > Require Explicit GDPR Opt-in?


This means that attendees must explicitly grant permission if they're willing to share their details with select partners. By default, attendees haven't provided permission to share their email addresses. With this feature enabled, they must explicitly opt-in to agree to have their details shared. It's important to note that this pertains to the Event Organiser and their operations. Ultimately, it's the Event Organiser's responsibility to handle attendee emails responsibly and in compliance with regional laws.

Did this answer your question?