Privacy Notice

Last updated: 06/11/2026

We explain here what personal information QuoteMyEvent uses to operate our UK event-services marketplace, who may see it and the choices you have. QuoteMyEvent connects hosts with suppliers but is not a party to their contracts for event services. This notice covers information used by QuoteMyEvent, not a supplier's separate handling of customer information.

1. Who is responsible for your information

QuoteMyEvent operates the platform and is responsible for personal information it processes for the marketplace. Contact us at admin@quotemyevent.co.uk to ask a question about your personal information or make a data protection request. Please do not send passwords or payment-card details.

2. Who can use the service

Hosts and suppliers must be at least 18 years old to hold a QuoteMyEvent account. The service is not intended for children. We do not knowingly offer accounts to under-18s.

3. What information we collect

• Account details: your name, email, account role, sign-in and security information, and the information needed to manage your session. Our authentication provider handles passwords; we do not display them to marketplace administrators.
• Host information: event title, description, date, location and postcode, guest numbers, budget, categories requested, quotes, bookings, conversations and reviews you submit.
• Supplier information: business name, description, categories, postcode, approximate geographical coordinates and service radius, optional website and social media links, portfolio photographs, insurance certificates and other verification documents, quotes and booking history.
• Contact and communications: contact details you provide, private messages and attachments, enquiries and notification records.
• Marketplace accounts and tokens: supplier token balances, welcome and referral rewards, token movements and purchase, refund and return records. Hosts do not pay QuoteMyEvent to post events.
• Trust and safety: photograph and conversation reports, review moderation, warnings, strikes, suspensions, appeals, evidence and decisions, including attempts to share contact details before a booking.
• Technical information: session cookies, security and diagnostic information needed to operate and protect the site. The separate Cookie Notice describes cookies and optional tracking.

We receive most of this information from you and from your use of QuoteMyEvent. Some booking, review and report records are generated through interactions with other users. We use a postcode lookup service to derive approximate coordinates needed for matching.

4. Why we use it and our lawful bases

• Providing the marketplace: creating accounts, processing event posts, matching services and service areas, delivering quotes and messages, managing bookings, displaying account information and releasing contact details to the two booked parties. We use this information to perform our contract with account holders (UK GDPR Article 6(1)(b)).
• Supplier verification: checking application details and current insurance documents, reviewing renewals and controlling which suppliers can quote or appear publicly. We use this information to perform our supplier account contract and for our legitimate interest in preventing misuse and protecting hosts.
• Safety, reports and moderation: investigating misuse, preventing contact-sharing before booking, handling appeals, protecting accounts and keeping decision records. Our lawful basis is our legitimate interest in operating a safe service, protecting users and preventing abuse, or a legal obligation where applicable.
• Tokens and financial records: recording balances, supplier token use and returns, and administering token purchases if enabled. Our lawful bases are performing our supplier account contract and meeting applicable financial or legal obligations.
• Service support and security: responding to enquiries, investigating faults, detecting abuse and maintaining the availability and security of the site. We rely on performing our account contract, our legitimate interests in keeping the platform reliable and secure, or applicable legal obligations.

Where a particular activity requires consent, such as non-essential tracking where applicable, we will request it before starting that activity. We will explain any new use of personal information before beginning it where the law requires.

5. Who can see your information

• Other marketplace users: event and quote details may be visible to eligible matching participants. Personal contact details are not released to another user before a booking is confirmed; once confirmed, they are shared with the booked host or supplier.
• Public supplier pages: verified supplier business information, selected portfolio photographs and eligible visible client reviews and supplier replies are public. We do not publish reviewer identity or private verification documents through those pages.
• Private messages and files: conversation participants can access their own conversations and files, and a file is available to the other participant as soon as it is sent. Authorised administrators can access information needed for verification, safety, reports and support.
• Verification and moderation: insurance documents, case reports and decisions are restricted to the relevant user and authorised administrators, with access controlled according to their role.
• Supplier payments for event services: these take place directly between the host and supplier. QuoteMyEvent does not collect, hold, return or refund payments for those event services.

Suppliers may use contact details received after a booking to provide their services. They may have separate responsibilities for how they collect and use that information. You should ask the supplier about its own privacy practices where appropriate.

6. Service providers and information sent overseas

• Supabase: account authentication, database services and file storage.
• Vercel: website hosting and related technical operation.
• postcodes.io: postcode lookup used to derive approximate location information for matching.
• Stripe: card payments for supplier token purchases. Stripe collects and processes payment details on its own page; we do not see or store card numbers. We receive confirmation of the payment, its amount and a reference.
• Resend: sending sign-up confirmation and account emails.

We do not currently use bot-protection, SMS or website analytics services. If we introduce or change a provider, we will update this notice and any required cookie choices before using it.

We use third-party service providers to operate the website. Where personal information is transferred outside the UK, we take steps to use an applicable UK adequacy arrangement or other permitted safeguards. You can request information about transfers and safeguards by emailing us at admin@quotemyevent.co.uk.

7. How long we keep information

We keep information only for as long as we reasonably need it for the purposes described here, including providing an active account, maintaining booking and token records, responding to complaints, resolving security incidents and meeting applicable legal or accounting requirements. The relevant period depends on the type of information, whether the account remains active, whether a dispute or investigation is ongoing, and any statutory retention requirement.

When we no longer need information, we will delete it or anonymise it where appropriate, subject to legal requirements and any records needed to establish or defend claims. Deleting an account does not necessarily remove booking, financial or moderation records that we must lawfully retain.

8. Your rights and how to contact us

Depending on the circumstances, UK data protection law may give you the right to access your information, correct it, request deletion, restrict its use, object to certain uses and receive a portable copy. You may also have rights relating to decisions made solely by automated means. You can object to processing based on legitimate interests; we will assess your request in line with the law.

To make a privacy request, email admin@quotemyevent.co.uk and describe what you need. We may ask for information reasonably necessary to confirm your identity before disclosing account data. We will respond within the period required by law and explain where an exemption applies.

If you are dissatisfied with our response, you can complain to the UK Information Commissioner's Office.

9. Cookies and optional analytics

Sign-in and account-preference cookies help operate the marketplace. See our Cookie Notice for details. We will review consent requirements and update both notices before enabling any non-essential analytics or tracking.

10. Changes to this notice

We may update this notice when our services, providers or legal obligations change. The latest version and update date will appear here. Where a change materially affects the way we use personal information, we will take appropriate steps to tell affected users before introducing the new processing where required.