Draft for review. This page has not yet been approved by the owner or reviewed by a legal adviser, and is not yet in force. Highlighted notes mark details and decisions still to be confirmed.

Privacy Notice

Last updated: 05/11/2026

1. Who is responsible for your data

[legal operator name: to be confirmed by the owner], of [registered or trading address: to be confirmed by the owner], runs QuoteMyEvent and is responsible for your personal data. Company number (if any): [company number, if applicable: to be confirmed by the owner]. For anything about your data, contact [data protection email: to be confirmed by the owner].

2. The information we hold

Your account: email address, password (stored securely and never visible to us), name, and whether you use QuoteMyEvent as a host or a supplier.
Hosts: the events you post (title, description, date, postcode and place name, number of guests, budget and services wanted), your messages, quotes you receive, bookings and reviews you write.
Suppliers: business name and description, services, postcode and service area, public liability insurance certificates and other documents you upload, portfolio photographs, your quotes, messages, bookings, token history and referral activity.
Contact details: phone, email and address you add to your account. These are shown only to the other party once a booking is confirmed.
Safety and moderation records: reports, administrator decisions, warnings, strikes, suspensions and appeals, and records of attempts to share contact details in messages.
Notifications: a record that something happened (for example, a new message). It holds no message text, price or contact details.

3. How we use it

To run your account and sign you in.
To match events with suitable suppliers. We turn a postcode into an approximate location to measure distance.
To deliver messages, quotes and bookings between hosts and suppliers.
To verify suppliers and check their insurance, and to suspend accounts when insurance lapses.
To keep the marketplace safe: moderating content, reviewing reports and handling appeals.
To record tokens, charges and refunds accurately.

4. Who else handles your data

Supabase provides our database, sign-in and file storage.
Vercel hosts the website.
postcodes.io receives a postcode when we look up its approximate location.

We do not currently use payment, email-sending, bot-protection, SMS or website analytics services. We will update this notice before we do.

5. Who can see your information

Insurance certificates and other supplier documents are private. Only you and our administrators can open them.
Messages are visible to the two people in the conversation and to our administrators where needed for moderation.
Our administrators can see your account details, such as your name, email address, when you joined and your supplier status, so they can run and support the service.
A supplier's business profile, portfolio photographs and visible reviews are public once the supplier is verified.
Your contact details are shared only with the other party once a booking is confirmed.

6. How long we keep it

7. Your rights

Under UK data protection law you can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to move it to another service, in the cases the law provides for. Email [data protection email: to be confirmed by the owner]. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

8. Cookies

See our Cookie Notice.