Privacy Policy
Last updated: August 2026
1. Who We Are
Event Nest Group Limited is the data controller for the personal data described in this policy. We are registered in Northern Ireland under company number NI736997, with our registered office at 38 Drumnasoo Road, Portadown, Craigavon, BT62 4EU. We are registered with the Information Commissioner's Office under reference C1881882. For any question about this policy or your personal data, contact us at hello@eventnestgroup.com.
2. Information We Collect
We collect information you provide directly to us when you create an account, including your name, email address, and role (customer or vendor). Vendors additionally provide business information such as business name, category, location, pricing, and portfolio images, and — where they take payments through the Platform — identity and bank details required for payout verification, which are collected and held by Stripe rather than by us. If you use the AI event planner, we process the event details you type into it. We also collect information automatically through your use of the Platform, including pages visited, search queries, and device information.
3. How We Use Your Information
We use your information to: provide and maintain the Platform; connect Customers with Vendors; send notifications about bookings, messages, and account activity; improve and personalise your experience; analyse usage patterns to improve the Platform; and communicate important updates about our services.
4. Our Lawful Bases for Processing
UK GDPR requires us to have a lawful basis for each use of your personal data. We rely on: performance of a contract — to create and run your account, process bookings, take payment and pay Vendors out; legitimate interests — to keep the Platform secure, prevent fraud and abuse, analyse usage so we can improve the service, and follow up with Vendors about incomplete profiles; consent — for analytics cookies and web push notifications, which you can withdraw at any time; and legal obligation — to keep records we are required by law to retain, such as transaction records for tax and accounting.
5. Information Sharing
We share your information in the following ways: Vendor profiles (business name, category, location, pricing, portfolio) are publicly visible on the Platform. Customer names are shared with Vendors when booking requests or messages are sent. We do not sell your personal information to third parties. We may share information with service providers who help us operate the Platform (e.g., hosting, email delivery).
6. Data Storage and Security
Your data is stored securely using industry-standard encryption and security measures. We use Supabase for authentication and database services, which provides enterprise-grade security. While we take reasonable measures to protect your information, no method of transmission over the Internet is 100% secure.
7. Cookies and Local Storage
We use cookies and browser local storage to maintain your login session, remember your preferences (such as location settings and recently viewed vendors), and improve your experience. You can control cookie settings through your browser, though disabling cookies may affect Platform functionality.
8. Email Communications
We send transactional emails for booking confirmations, new messages, quote updates, and other important account activity. These emails are essential to the service and cannot be opted out of while maintaining an active account. We use Resend as our email delivery provider.
9. Your Rights
Under UK data protection law (UK GDPR), you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to processing of your data; request restriction of processing; and data portability. Where we rely on consent, you also have the right to withdraw it at any time. To exercise any of these rights, contact us at hello@eventnestgroup.com. You will not be charged, and we will respond within one month. If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113 — though we would appreciate the chance to put things right first.
10. Data Retention
We retain your personal data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes. Anonymised, aggregated data may be retained for analytics purposes.
11. Third-Party Services
We use the following providers to run the Platform, each acting on our instructions and under its own privacy policy: Stripe (payment processing, and identity and bank verification for Vendors who take payments — Stripe collects these details directly and we never see full card or bank numbers); Supabase (authentication and database); Resend (email delivery); Vercel (hosting); Anthropic (the AI event planner — the event details you type into it are sent to Anthropic to generate a plan, and are not used to train their models); Sentry (error monitoring); Upstash (rate limiting to protect the Platform from abuse); Google Analytics (usage analytics, only if you accept analytics cookies); and OpenStreetMap's Nominatim service for location geocoding.
12. Where Your Data Is Stored and Transferred
Our database and hosting are located in the United Kingdom (London). Some of our providers — including Stripe, Anthropic, Sentry and Google Analytics — may process personal data outside the UK, including in the United States. Where that happens we rely on the safeguards those providers put in place for international transfers, such as the UK International Data Transfer Addendum or the equivalent standard contractual clauses, so that your data keeps an equivalent level of protection.
13. Children's Privacy
The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after any changes constitutes acceptance of the new policy.
15. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at hello@eventnestgroup.com.