Privacy Policy

1. Data controller

Build My Event is operated by Division 1 Systems Ltd (registered in England and Wales, company number 17300786), which is the data controller for the personal data described in this policy. Our registered office is 128 City Road, London, EC1V 2NX.

For any privacy question or to exercise your rights, contact us at support@buildmyevent.co.uk.

2. Personal data we collect

• Account details: name, email address, and password credentials.
• Business information: for suppliers, company name, service details, and profile content.
• Event information: details you enter about events, proposals, contracts, and messages.
• Payment identifiers: information needed to process payments through Stripe. We do not store full card numbers.
• Identity verification data: where required, documents you submit to Stripe for verification.
• Usage data: how you interact with the service, device and log information, and IP address.

3. Legal basis for processing

We rely on the following legal bases under UK GDPR:

• Contract: to provide the service, manage your account, and process bookings and payments.
• Legitimate interests: to secure and improve the platform, prevent fraud, and communicate about your account, balanced against your rights.
• Legal obligation: to keep financial records and comply with tax and accounting requirements.
• Consent: for any optional communications or non-essential cookies, which you can withdraw at any time.

4. Third-party processors

We share data with service providers who process it on our behalf:

• Supabase: authentication and database hosting (account and platform data).
• Stripe: payment processing and identity verification (payment and verification data).
• Resend: delivery of transactional email (name and email address).

Each processor is bound by a data processing agreement and may only use the data to provide their service to us.

5. International transfers

Some processors may store or process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses incorporated into the provider's data processing agreement.

6. How long we keep data

• Active accounts: for as long as your account remains open.
• Closed accounts: personal data is purged within 30 days of a deletion request.
• Financial records: retained for 7 years to meet HMRC requirements, anonymised where possible.

7. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, subject to our legal retention duties;
• receive your data in a portable, machine-readable format;
• object to or restrict certain processing.

To exercise any right, email support@buildmyevent.co.uk. We aim to respond within 30 days.

8. Cookies

We use essential cookies to keep you signed in and to keep the service secure. For details, see our Cookie Policy.

9. Complaints

If you have a concern about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at https://ico.org.uk.