Privacy Policy
Last updated: February 2026
1. Information We Collect
We collect information you provide directly to us when you create an account, including your name, email address, and role (customer or vendor). Vendors additionally provide business information such as business name, category, location, pricing, and portfolio images. We also collect information automatically through your use of the Platform, including pages visited, search queries, and device information.
2. How We Use Your Information
We use your information to: provide and maintain the Platform; connect Customers with Vendors; send notifications about bookings, messages, and account activity; improve and personalise your experience; analyse usage patterns to improve the Platform; and communicate important updates about our services.
3. Information Sharing
We share your information in the following ways: Vendor profiles (business name, category, location, pricing, portfolio) are publicly visible on the Platform. Customer names are shared with Vendors when booking requests or messages are sent. We do not sell your personal information to third parties. We may share information with service providers who help us operate the Platform (e.g., hosting, email delivery).
4. Data Storage and Security
Your data is stored securely using industry-standard encryption and security measures. We use Supabase for authentication and database services, which provides enterprise-grade security. While we take reasonable measures to protect your information, no method of transmission over the Internet is 100% secure.
5. Cookies and Local Storage
We use cookies and browser local storage to maintain your login session, remember your preferences (such as location settings and recently viewed vendors), and improve your experience. You can control cookie settings through your browser, though disabling cookies may affect Platform functionality.
6. Email Communications
We send transactional emails for booking confirmations, new messages, quote updates, and other important account activity. These emails are essential to the service and cannot be opted out of while maintaining an active account. We use Resend as our email delivery provider.
7. Your Rights
Under UK data protection law (UK GDPR), you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to processing of your data; request restriction of processing; and data portability. To exercise any of these rights, contact us at hello@eventnestgroup.com.
8. Data Retention
We retain your personal data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes. Anonymised, aggregated data may be retained for analytics purposes.
9. Third-Party Services
The Platform integrates with the following third-party services: Supabase (authentication and database), Resend (email delivery), and Vercel (hosting). Each of these services has its own privacy policy governing how they handle data. We also use OpenStreetMap's Nominatim service for location geocoding.
10. Children's Privacy
The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after any changes constitutes acceptance of the new policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at hello@eventnestgroup.com.