Privacy Policy

Your Privacy is Important to Us

EventfulDay privacy policy

1. About this privacy policy

This privacy policy explains how EventfulDay Limited collects, uses, stores and shares personal data when you use our website and related services at https://eventfulday.co.uk.

EventfulDay is a corporate event planning platform. It enables business users who are planning corporate events to discover curated venues, suppliers and other businesses that can support corporate events. It also enables venues, suppliers and other listed businesses to maintain a profile or listing on the platform.

This privacy policy is primarily written for business users of the website because EventfulDay is designed for business-to-business use. However, it also applies to any individual who accesses or uses the website, including any consumer who chooses to use the website.

Please read this privacy policy carefully so that you understand how and why we use your personal data.

2. Who we are

Company name	EventfulDay Limited
Company number	14688368
Registered office	41 St. Thomas’s Road, Chorley, England, PR7 1JE
ICO registration number	ZB606994
Website	https://eventfulday.co.uk
Contact details	Email: info@eventfulday.co.uk \| Telephone: 07706 300993

References in this policy to “EventfulDay”, “we”, “us” and “our” are references to EventfulDay Limited.

3. Key terms used in this policy

Planner	a business user who uses the website to research, shortlist or contact venues, suppliers or other listed businesses for a corporate event.
Listed business	a venue, supplier or other business listed on the EventfulDay website. This may also be referred to as a supplier or member in our commercial terms.
Member	a listed business that contracts with EventfulDay for a paid listing or membership.
Website user	any person who accesses or uses the website, including planners and listed businesses.
Personal data	information relating to an identified or identifiable individual.
UK GDPR	the UK General Data Protection Regulation, together with the Data Protection Act 2018 and other applicable UK data protection legislation.

4. The personal data we collect

The personal data we collect depends on how you use the website and the EventfulDay services.

4.1 Planner data

When you create an account as a planner or use planner functionality on the website, we may collect:

Identity and contact data, including your first name, surname, business email address and, where provided, telephone number.
Account data, including your username, password and account role.
Event planning data, including information you add to the “My event” area, shortlists, notes and preferences.
Communications data, including messages or enquiries you send through the platform.
Review and user generated content, including reviews or feedback you submit for publication on the website.
Technical and usage data, including information about how you access and use the website.

4.2 Listed business and member data

When you apply for or manage a listing, membership or supplier account, we may collect:

Business information, including business name, trading name, registered or trading address, business category, venue or supplier type, service descriptions and profile information.
Account contact data, including the name, business email address and telephone number of account users or business contacts.
Listing content, including narrative descriptions, images, logos, links, documents, brochures, virtual tours, videos and other assets supplied by you or obtained from publicly available sources.
Contractual and onboarding data, including information collected during onboarding, contract records and electronic signatures, including through Dubsado or any replacement onboarding system.
Financial and transaction data, including billing details, invoices, payment records, payment status and subscription status, including where processed through Stripe or another payment provider.
Technical and usage data, including account metadata and information about how you use the website.

4.3 Technical and usage data

When you use the website, we may automatically collect technical and usage data, including:

IP address, browser type and version, time zone setting, approximate location, device type, operating system and platform.
Information about how you interact with the website, including pages viewed, searches, clicks, session information and account activity.
Cookie and similar technology data, where cookies or similar technologies are used.

4.4 Aggregated data

We may create, use and share aggregated data, such as statistical or demographic data. Aggregated data is not personal data where it does not directly or indirectly identify you. If we combine aggregated data with personal data so that it can identify you, we treat the combined data as personal data.

5. How we collect personal data

We collect personal data in the following ways:

Directly from you when you complete forms, create an account, apply for a listing, contact us, sign a contract, make a payment, send a message, submit a review or otherwise use the website.
Automatically when you use the website, through cookies, logs, analytics tools and similar technologies.
From third parties and public sources where relevant to listed business profiles, including publicly available business websites, Companies House, Google Business Profiles, social media pages and review platforms.
From service providers who support our website, onboarding, payment and administration processes, including Dubsado and Stripe where relevant.

6. How and why we use personal data

We only use personal data where we have a lawful basis to do so. The main lawful bases we rely on are:

Performance of a contract, where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate interests, where processing is necessary for our legitimate business interests or those of a third party and your interests and rights do not override those interests.
Consent, where you have given consent for a specific purpose, such as non-essential cookies or certain marketing communications.
Legal obligation, where processing is necessary to comply with a legal or regulatory obligation.

We may rely on more than one lawful basis depending on the purpose for which we use your personal data.

7. Purposes and lawful bases

Purpose	Personal data used	Lawful basis
Operate, maintain and secure the website	Planner data, listed business data, technical and usage data	Legitimate interests: operating, securing and improving the website.
Create and manage planner accounts	Planner identity, contact, account and event planning data	Performance of a contract or steps prior to a contract. Legitimate interests in providing platform functionality.
Create and manage listed business or member accounts	Business information, account contact data, listing content, contractual data	Performance of a contract or steps prior to a contract.
Review and publish listed business profiles	Business information, listing content, images, logos, links and contact information	Performance of a contract. Legitimate interests in operating a curated corporate event planning platform.
Enable planners to shortlist venues and suppliers and manage event planning activity	Planner event planning data, shortlists, notes and usage data	Performance of a contract. Legitimate interests in providing useful planning functionality.
Enable platform messaging between planners and listed businesses	Planner first name, message content, listed business contact data and communications data	Legitimate interests in enabling business enquiries through the website.
Publish and manage reviews and other user generated content	Planner identity data, review content, rating information and moderation records	Legitimate interests in providing trust, transparency and platform quality. Consent where required by the review mechanism.
Onboard members and manage contracts	Business information, account contact data, onboarding information, contract records and signatures	Performance of a contract. Legal obligation where record keeping is required.
Process payments, subscriptions, billing and financial records	Billing data, transaction data, payment status and account contact data	Performance of a contract. Legal obligation for tax, accounting and financial records.
Respond to enquiries and provide support	Contact data, account data and communications data	Legitimate interests in responding to enquiries and supporting website users.
Send service related communications	Contact data, account data and subscription or billing information	Performance of a contract. Legitimate interests in keeping users informed about the service.
Send marketing communications where permitted	Contact data, communications preferences and usage data	Consent, or legitimate interests where business-to-business soft opt-in or other lawful marketing rules apply.
Improve and develop the website and services	Technical data, usage data, feedback and aggregated data	Legitimate interests in improving the website, user experience and services.
Comply with legal, regulatory, tax and accounting obligations	Any relevant personal data required for compliance	Legal obligation.

8. Messaging and sharing through the website

EventfulDay is primarily a discovery and planning platform. We do not usually become a party to any contract between a planner and a listed business. Planners and listed businesses are expected to communicate and contract directly with each other outside the website unless a specific platform feature states otherwise.

At the date of this policy, when a planner uses the platform’s direct messaging feature to contact a listed business, the listed business will receive the content of the message and limited information needed to identify and respond to the enquiry. Based on the current intended platform process, this is limited to the planner’s first name and message content unless the planner chooses to include further contact details in the message.

EventfulDay does not currently share a planner’s full name, business email address or other full account details with listed businesses as part of standard website browsing or shortlisting activity. If this changes in the future, we will update this privacy policy and, where required, obtain any necessary consent or provide any required notices.

Where a planner contacts a listed business directly outside the website, such as by email, telephone, the listed business’s own contact form or a third-party booking page, the listed business will process the personal data it receives in accordance with its own privacy policy. EventfulDay is not responsible for how listed businesses use personal data that planners provide directly to them outside the website.

9. Sharing personal data with service providers and third parties

We may share personal data where necessary for the purposes described in this policy. This may include sharing personal data with:

Necessary website hosting, infrastructure, website development and IT support providers, where they process personal data for website operation and security.
Customer management, onboarding and contract administration providers, currently Dubsado or any replacement system.
Payment processing and subscription management providers, currently Stripe or any replacement payment provider.
Email, communications, cookie consent, analytics and marketing service providers where used. The exact cookie, analytics and tracking tools used by the website should be confirmed before publication. As currently understood, Google Analytics, Google Ads remarketing, Meta pixel and similar tracking tools are not intended to be active at launch, but may be introduced in the future once appropriate cookie controls and notices are in place.
Professional advisers, including lawyers, accountants, insurers and consultants.
HMRC, regulators, law enforcement agencies, courts or public authorities where we are legally required or reasonably entitled to do so.
Third parties in connection with a proposed or actual sale, transfer, restructuring, merger, investment or acquisition of all or part of our business or assets.

Where service providers process personal data on our behalf, we require them to process it only for specified purposes, in accordance with our instructions and with appropriate technical and organisational security measures.

10. Reviews and user generated content

If you submit a review, rating or other user generated content, that content may be published on the website and visible to other website users. We may moderate, edit, refuse or remove reviews or user generated content where we reasonably consider this necessary to maintain platform quality, comply with law, enforce our website terms or protect the rights of others.

You should not include personal data about other people in reviews or other user generated content unless you have a lawful basis and any necessary permission to do so.

11. Cookies and similar technologies

Cookies are small text files placed on your device when you visit a website. We may use cookies and similar technologies to support website functionality, improve user experience, understand how the website is used and, where applicable, support advertising or remarketing activity.

We may use the following types of cookies, depending on the functionality enabled on the website from time to time:

Strictly necessary cookies, which are required for the website to operate and cannot usually be switched off.
Functionality cookies, which help the website remember choices and improve your experience.
Analytics cookies, which help us understand how users interact with the website and how the website performs.
Advertising or remarketing cookies, which may be used to show relevant adverts to users who have previously visited the website or to help us measure the effectiveness of advertising activity.
Where cookies are not strictly necessary, we will request your consent before placing them on your device. You can manage your cookie preferences through [insert cookie preference mechanism] or through your browser settings. If you disable essential cookies, parts of the website may not work properly.

We are still confirming the exact cookies and similar technologies currently used by the website. As currently understood, Google Ads remarketing, Meta pixel, Google Analytics and similar tracking tools are not intended to be active at launch. If any non-essential analytics, advertising or remarketing technologies are used at launch or introduced later, we will ensure that appropriate cookie information, consent controls and privacy wording are in place before or at the point those technologies are used.

12. Marketing communications

We may send business users updates, newsletters, invitations, platform news and information about EventfulDay services that we believe may be relevant to them.

We will only send electronic marketing communications where permitted by law. This may be because you have consented, because you are an existing business customer or contact and the law permits us to contact you about similar services, or because another lawful basis applies for business-to-business communications.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails, adjusting your account preferences where available, or contacting us using the details in this policy. You will still receive service, billing, account and administrative communications where these are necessary.

13. Third-party links and external websites

The website may include links to third-party websites, plug-ins and applications, including listed business websites, contact forms, booking pages, PDFs, videos, virtual tours, maps and review platforms. This privacy policy does not apply to those third-party websites or services.

Clicking on links or enabling connections to third-party websites may allow those third parties to collect or share personal data about you. We do not control third-party websites and are not responsible for their privacy notices, policies or practices. You should read the privacy policy of every website you visit.

14. International transfers

At launch, EventfulDay does not intend to transfer personal data outside the United Kingdom through third-party systems.

If this changes in the future, and any service provider processes personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place as required by applicable data protection legislation. This may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.

15. Data security

We have put in place appropriate technical and organisational security measures designed to prevent personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way.

We limit access to personal data to employees, officers, contractors, service providers and professional advisers who have a business need to know it. They will only process personal data for authorised purposes and, where appropriate, are subject to duties of confidentiality.

We have procedures to deal with suspected personal data breaches and will notify affected individuals and the Information Commissioner’s Office where we are legally required to do so.

16. How long we keep personal data

We keep personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting or reporting requirements.

Category	Indicative retention position
Planner account data	For the life of the account and for a reasonable period after account closure, unless a longer period is required for legal, complaint, audit or security purposes.
Member and listed business account data	For the life of the commercial relationship and for a reasonable period after it ends.
Contract, billing and transaction records	Usually six years after the end of the relevant financial year or relationship, where required for tax, accounting or legal purposes.
Marketing suppression records	As long as necessary to ensure we respect opt-out requests and do not send further marketing communications.
Technical and security logs	For a limited period consistent with website security, fraud prevention, troubleshooting and operational needs.
Reviews and published content	For as long as the content remains relevant to the website, unless removed earlier in accordance with our terms, moderation processes or legal obligations.

When personal data is no longer required, we will delete, anonymise or securely dispose of it. In some circumstances, we may anonymise personal data so that it can no longer identify you and use it for research, statistical or service improvement purposes.

17. Your legal rights

Under UK data protection law, you may have the following rights in relation to your personal data:

The right of access to the personal data we hold about you.
The right to rectification of inaccurate or incomplete personal data.
The right to erasure of personal data in certain circumstances.
The right to restrict processing in certain circumstances.
The right to data portability in certain circumstances.
The right to object to processing in certain circumstances, including certain processing based on legitimate interests and direct marketing.
The right to withdraw consent where we rely on consent as the lawful basis for processing.

These rights do not apply in every circumstance. We may need to verify your identity before responding to a request and may refuse a request where the law allows us to do so.

To exercise your rights, please contact us using the contact details in this policy.

18. Contact details

If you have any questions about this privacy policy or how we use personal data, or if you wish to exercise your legal rights, please contact us:

Email: info@eventfulday.co.uk
Telephone: 07706 300993

19. Complaints

You have the right to make a complaint to the Information Commissioner’s Office, the UK regulator for data protection issues. Further information is available at www.ico.org.uk.

We would appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us first where possible.

20. Changes to this privacy policy

This privacy policy was last updated in May 2026.

We may update this privacy policy from time to time to reflect changes in our website, services, technology, legal requirements or business practices. The latest version will be published on the website.