Privacy policy

Who is responsible

Kent Business Events, Park Farm, Ashford, Kent, is the data controller for personal data collected through this site. Contact us about anything in this policy at info@kentbusinessevents.co.uk.

What we collect, why, and our lawful basis

• Account details (email address, password stored only in encrypted form, the date you agreed to our terms and the wording you agreed to): to create and run your account. Lawful basis: contract.
• Listing details (organiser name, listing content, images and any contact details you choose to publish): to publish and promote your listing. Lawful basis: contract.
• Payment records (package, amount, dates, payment reference). Card details are handled by our payment provider, Stripe, and never stored by us. Lawful basis: contract and legal obligation (tax and accounting records).
• Service emails (confirmations, approvals, renewal reminders): needed to deliver what you bought. Lawful basis: contract. These are not marketing.
• Moderation and audit records: to keep the directory accurate and investigate problems. Lawful basis: legitimate interests.
• Newsletter (email, wording you agreed to, date, source, any withdrawal): only if you tick to opt in. Lawful basis: consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
• Contact enquiries (name, email, optional phone number, subject and message): to reply to you. Lawful basis: legitimate interests.
• Reports about listings (the issue and an optional email address): to correct listings. Lawful basis: legitimate interests.
• Analytics: only with your consent through cookie settings. See our Cookie policy.

We never add you to marketing emails because you created an account, and we never sell your data. Ticked boxes are never pre-ticked.

Who we share data with

We use trusted processors who act on our instructions: our hosting and database provider (Lovable Cloud), Stripe for payments, our transactional email provider, and Google for maps, reviews and analytics where enabled and consented. Details you choose to publish on a listing are visible to the public. Some providers may process data outside the UK; where they do, it is protected by UK adequacy regulations or the International Data Transfer Agreement or Addendum approved by the ICO.

How long we keep it

• Account and listing data: while your account is active. Unpublished expired annual listings are kept for 12 months after expiry so you can return, then reviewed for deletion.
• Financial records: six years, as required by UK tax law.
• Contact enquiries: up to two years after our last correspondence.
• Consent records: while relevant to show what you agreed to, and for a reasonable period after withdrawal.

Your rights

Under UK data protection law you can ask to access your data, correct it, delete it, restrict or object to its use, or receive a copy in a portable format. Where we rely on consent you can withdraw it at any time; this does not affect anything done before. Email info@kentbusinessevents.co.uk and we will respond within one month. There is no charge in most cases.

We do not make decisions about you based solely on automated processing.

Keeping your data safe

Data is encrypted in transit, access is restricted to authorised staff, and passwords are never stored in readable form. If a breach is likely to put you at risk, we will tell you and the ICO as the law requires.

Children

This is a business service. It is not aimed at, and accounts should not be created by, anyone under 18.

Complaints

Please contact us first so we can try to put things right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We will update the date at the top when this policy changes and tell account holders by email about significant changes.