Privacy Policy

1. Controller and contact details

TA & RWP ENTERPRISES LIMITED (trading as Event Pitch), company number 17307285, is the controller for personal data used to operate the platform. Our registered office is Epic Centre, Whiterock Business Park, Waddeton Close, Paignton, Devon, United Kingdom, TQ4 7RZ. Contact us at hello@eventpitch.co.uk.

An event organiser is normally a separate controller for trader information it receives to assess applications and administer its event. Contact that organiser about its own use of your information.

2. Data we collect

We collect account and contact details; trader and organiser business profiles; event listings; applications, answers, messages and compliance documents; alert choices and location preferences; payment, refund and invoice records; support and complaint correspondence; and technical information such as IP address, browser, device, session, security and activity logs.

We obtain most information directly from you. We may also receive information from another user involved in an event or application, from Stripe about account and payment status, from security and technical providers, or from public business sources where reasonably necessary to verify a listing or account.

Payment-card details are collected directly by Stripe and are not stored by Event Pitch. Please do not upload special-category or criminal-offence data unless a field genuinely requires it and you are lawfully entitled to provide it.

3. Purposes and lawful bases

We use account, profile, application and payment data to provide the service and take steps at your request before entering contracts (contract). We use transaction, company and complaint records to meet tax, accounting, company, data-protection and other legal duties (legal obligation).

We use service analytics, security logs, fraud checks, moderation, support and platform-improvement data to operate a safe and effective marketplace (our legitimate interests and those of users). We balance those interests against your rights.

We send matched-event alert emails only when you actively enable them (consent). You can withdraw that consent at any time without affecting earlier lawful processing. We do not use the alert setting as consent for unrelated newsletters or promotions.

4. Who receives data

Relevant organisers receive the profile, application, answers and compliance documents needed to assess and administer an application. Stripe receives payment, connected-account and transaction information. Our email delivery provider receives message and recipient information. Google receives data needed for reCAPTCHA security checks, including IP and browser information. MapTiler receives technical request data when you open a map.

We also use hosting, database, storage, backup, monitoring, professional-adviser and support suppliers under appropriate obligations, and may disclose information to authorities, courts, insurers, buyers or advisers where lawfully required. We do not sell personal data.

5. International transfers

Some suppliers may process data outside the United Kingdom. Where UK adequacy regulations do not apply, we use an approved safeguard such as the UK International Data Transfer Agreement or UK Addendum to standard contractual clauses, together with appropriate risk assessments where required. Contact us for more information about the relevant safeguard.

6. Retention

Account and profile data is normally kept while the account is active and then for up to six years where needed for claims, fraud prevention or legal records. Contract, payment, invoice, refund and core application records are normally kept for six years after the transaction or event.

Compliance documents are kept only while needed to assess or administer the event and normally deleted within 12 months after the event, unless a dispute, legal duty or safeguarding issue requires longer. Alert consent evidence is retained while alerts are enabled and for up to six years afterward. Security logs are normally kept for up to 12 months. Support and data-protection complaints are kept for up to six years after closure.

We may retain data longer where litigation, a regulatory request or law requires it, and may delete or anonymise it earlier when no longer necessary.

7. Your rights

Depending on the circumstances, you may ask for access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent at any time. You also have the right not to be subject to a solely automated decision producing legal or similarly significant effects; we do not currently make such decisions.

Some rights are limited by law, including where records must be kept or are needed for legal claims. We may ask for information to verify identity and authority.

8. Complaints

Send a data-protection complaint through our Contact page or to hello@eventpitch.co.uk with “Privacy complaint” in the subject. We will acknowledge it promptly, investigate it without undue delay, keep you informed where appropriate, and normally provide a substantive response within one month. We will tell you if a legally permitted extension is needed.

You can also complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first, but you do not have to contact us before the ICO.

9. Required information

Fields marked as required are needed to create an account, submit or assess an application, meet event requirements, process payment or comply with law. If you do not provide them, we may be unable to provide that feature or complete the transaction.

10. Security

We use access controls, private document storage, encryption in transit, logging, backups and supplier safeguards appropriate to the risk. No online service is completely secure, so keep your password confidential and tell us promptly about suspected misuse.

11. Cookies and similar technologies

We use cookies and local storage for sessions, security and user-requested display or navigation preferences. reCAPTCHA and map services may also use storage when their features are requested. Our Cookie Notice identifies the technologies, purposes, duration and available controls.

12. Children

Event Pitch is a business service for users aged 18 or over and is not directed to children. Contact us if you believe a child has provided personal data.

13. Changes

We may update this notice as our service, suppliers or legal obligations change. We will publish the new version and effective date and provide additional notice where a change materially affects your rights.