Privacy Policy

1. Who we are

event-infohub ("we", "us", "our") operates the website at event-infohub.com and the associated tools for event organisers. We are the data controller for personal data collected through the Service.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at kenniashiru@outlook.com.

2. What data we collect

Account data: When you register, we collect your name, email address, and a hashed password. We do not store your password in plain text.

Event and guest data: When you create events or upload guest lists, we store the information you provide, including guest names, table/seat assignments, and (where provided) email addresses.

Usage data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used for security monitoring and service improvement.

Communications: If you contact us via the contact form or by email, we retain a copy of your message and our response.

3. How we use your data

To provide the Service: We use your account data and event data to operate the tools you have signed up for.

To send transactional emails: We send emails necessary for the Service, including email verification, password reset links, and QR-code tickets you request us to send to your guests.

To improve the Service: We analyse aggregated, anonymised usage data to understand how the Service is used and to prioritise improvements.

To comply with legal obligations: We may process your data where required by law, such as in response to a valid court order.

We do not use your data or your guests' data for advertising, and we do not sell personal data to third parties.

4. Legal basis for processing (UK GDPR)

Contract: Processing your account data and event data is necessary to perform the contract between you and event-infohub.

Legitimate interests: We process usage and log data on the basis of our legitimate interest in operating a secure and reliable service.

Consent: Where we send you marketing communications (if any), we will obtain your explicit consent first. You may withdraw consent at any time.

5. Your guests' data

When you upload guest lists or collect RSVPs, you are the data controller for your guests' personal data. We process that data on your behalf as a data processor.

You are responsible for ensuring you have a lawful basis to collect and use your guests' data, and for providing them with appropriate privacy information.

We will only process guest data in accordance with your instructions and will not use it for any other purpose.

6. Data retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it by law.

Event and guest data is retained for as long as you keep the event in your account. You can delete individual events and their associated data at any time from your dashboard.

Server logs are retained for up to 90 days for security purposes.

7. Data sharing

We share your data only with the following categories of third parties, and only to the extent necessary to provide the Service:

— Email delivery providers: We use a third-party email gateway to send transactional emails (such as ticket delivery and password resets). Your email address and, where applicable, your guests' email addresses are passed to this provider for delivery purposes only.

— Hosting and infrastructure providers: Our service runs on cloud infrastructure. Data is stored and processed within the UK or European Economic Area.

We do not share your data with any other third parties without your explicit consent, except where required by law.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

— Right of access: You may request a copy of the personal data we hold about you.

— Right to rectification: You may ask us to correct inaccurate or incomplete data.

— Right to erasure: You may ask us to delete your personal data, subject to certain exceptions.

— Right to restriction: You may ask us to restrict processing of your data in certain circumstances.

— Right to data portability: You may request your data in a structured, machine-readable format.

— Right to object: You may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at kenniashiru@outlook.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.

9. Cookies

We use a small number of strictly necessary cookies to keep you logged in and to maintain your session. We do not use advertising or tracking cookies.

A cookie consent banner is displayed on your first visit. You may withdraw consent for any non-essential cookies at any time.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include HTTPS encryption for all data in transit and secure, hashed storage of passwords.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at kenniashiru@outlook.com.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email and will update the effective date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at kenniashiru@outlook.com or via the Contact page on our website.