1. Introduction
EventThreads operates EventThreads, a United Kingdom event supplier directory and discovery platform. We help event professionals discover suppliers and events, save business cards to a personal wallet, and help businesses present and manage their listings.
This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website and services.
We are committed to handling personal data responsibly and in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have questions about this policy or how we use your information, contact us at hello@eventthreads.co.uk.
2. Who is responsible for your data
For the purposes of UK data protection law, EventThreads is the data controller for personal information processed through EventThreads.
We operate from the United Kingdom. If you need registered company details for legal or regulatory correspondence, email hello@eventthreads.co.uk and we will provide them where appropriate.
This policy applies to EventThreads visitors, account holders, listing owners, and anyone who contacts us through the platform.
3. Information we collect
We collect information that you provide directly, information generated when you use EventThreads, and limited technical information needed to run the platform securely.
We only collect what we need to operate the features currently available on EventThreads. We do not sell your personal information.
Account and member profile information
- Email address (required to create an account and sign in)
- Password (handled by our authentication provider; EventThreads does not store your password in our own database)
- Display name, profile type, location, organisation, and bio if you complete your member profile
- Onboarding status and profile timestamps (for example when your profile was created or last updated)
- Account role and account timestamps related to your membership
Supplier and business listing information
- Business name, location, category, description, services, and tags
- Contact details you choose to publish, such as business email, phone number, website, and social media links
- Gallery images, cover images, logos, and image descriptions you upload
- Listing status, verification status, featured status, directory placement metadata, and internal moderation notes where relevant
- Information submitted when you list your own business or edit a listing you own
Event listing information
- Event title, description, dates, times, venue, location, format, topic, and tags
- Event images and image descriptions you upload
- Organiser or submitter contact details associated with an event submission
- Review status and moderation notes for submitted events
Claims and ownership requests
- Your role at the business
- Contact phone number and business email address
- Message explaining your claim
- Optional proof link (for example a website or document URL you provide)
- Review outcome, notes, and timestamps related to admin moderation
Contact form and support enquiries
- Your name and email address
- The topic you select (for example technical problem, listing issue, or general enquiry)
- Your message
- The page URL you were on when you submitted the form, if available
Wallet and browsing activity
- Suppliers you save to your business card wallet, and when you saved them
- If you use EventThreads without signing in, a guest identifier stored in a cookie so your saved wallet cards can persist on your device
- When you sign in, guest wallet cards may be merged into your account
Platform usage analytics (no advertising profiles)
- Aggregated usage events stored on our servers, such as profile views, wallet saves, website link clicks, search usage, and homepage visits
- These records include an event type and a resource identifier (for example a supplier slug or event slug), not your name or email
- We use this information to understand how the directory is used and to improve the platform
- This analytics data is not used for cross-site advertising or sold to third parties
Security, anti-abuse, and technical information
- Standard web server and hosting logs (for example IP address, browser type, device information, request timestamps, and pages accessed) collected by our hosting and infrastructure providers
- Authentication session cookies needed to keep you signed in
- A guest session cookie if you browse without an account
- Bot-protection signals processed through Cloudflare Turnstile when you submit certain public forms (for example contact enquiries or sign-up)
- Rate-limit counters tied to submission activity to reduce spam and abuse
- A local preference on your device if you dismiss the “add to home screen” hint (this is not sent to our servers)
4. How we use information
We use personal information to operate EventThreads, provide the features you use, keep the platform secure, and respond to requests.
- Creating and managing user accounts, member profiles, and sign-in sessions
- Running the supplier and event directories, search, profiles, and public listings
- Publishing and moderating Daily Thread industry briefings curated by EventThreads
- Processing supplier self-registrations, event submissions, ownership claims, and admin review
- Storing and displaying images you upload for listings and events
- Operating the business card wallet, including saving and removing cards
- Generating shareable supplier profile links and QR codes that point to public profile pages
- Sending service-related email notifications (for example claim updates, listing submissions, and admin alerts)
- Handling contact form messages and replying where appropriate
- Measuring platform usage through first-party analytics stored on our servers
- Protecting the platform against spam, misuse, errors, and unauthorised access
- Improving reliability, fixing bugs, and developing EventThreads over time
5. Legal basis for processing (UK GDPR)
Under UK GDPR, we must have a lawful basis to use personal information. Depending on the activity, we rely on one or more of the following:
- Contract: where processing is necessary to provide account features, member profiles, wallet functionality, listing submissions, event submissions, or claims handling you request from us
- Legitimate interests: to run and improve the directory, moderate listings and claims, measure platform usage, prevent misuse, maintain security, and communicate about service activity — balanced against your rights and freedoms
- Consent: where you choose to provide optional information (such as a bio or organisation name) or where the law requires consent for a specific activity
- Legal obligation: where we must keep or disclose information to comply with applicable law
Where supplier or event information is published in the directory, that processing is connected to operating a public business and events directory and managing listings you or your organisation submit or claim.
We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.
7. Data sharing
We do not sell your personal information. We share information only where needed to run EventThreads, with service providers that help us operate the platform, or where the law requires it.
- Supabase — authentication, database hosting, and image storage
- Resend — sending transactional email notifications
- Vercel — website hosting and delivery
- Cloudflare — Turnstile bot protection on public forms
- Google Maps — embedded map on full supplier profile pages when a specific location is shown (Google may process information under its own privacy policy when the map loads)
- OpenStreetMap map tiles — used on the event map page via Leaflet (tile requests may include technical information such as your IP address, handled by the tile provider)
These providers process information on our behalf to deliver their part of the service. Public supplier and event profile information is visible to anyone who visits the directory, as described below.
Daily Thread briefings may link to third-party news sources. Those websites are operated independently and have their own privacy practices.
We may also disclose information if required by law, regulation, court order, or to protect the rights, safety, and security of EventThreads, our users, or others.
8. Public directory information
EventThreads is a directory. Information on published supplier and event profiles is intended to be publicly visible so event professionals can discover businesses and events.
Depending on what has been added to a listing, public profile information may include:
- Business or event name, category, format, topic, and location
- Description, services, dates, and tags
- Gallery images, cover image, logo, and image descriptions
- Contact details you choose to display (such as email, phone, website, and social links)
- Featured or verified status badges where applicable
- A map showing the general area of a business location on full supplier profile pages
Member profile information (such as your display name and bio) is used to personalise your account experience and support moderation. It is not published as a public social profile in the current version of EventThreads unless we clearly tell you otherwise in the product.
Do not add personal information to a public listing unless you are comfortable with it being visible in the directory. If you own or claim a listing, you are responsible for keeping published information accurate and appropriate.
Draft, suspended, or pending listings are not shown in the public directory in the same way as published listings.
9. Data retention
We keep personal information for as long as reasonably necessary for the purposes described in this policy.
- Account and member profile information is retained while your account remains active and for a reasonable period afterwards if needed for security, dispute resolution, or legal compliance
- Supplier listings, event listings, images, claims, and submissions are retained while relevant to operating the directory, moderation, and ownership history
- Wallet data is retained while your account or guest session remains active, unless you remove saved cards or request deletion
- Contact form messages are retained for as long as needed to respond and maintain a record of support enquiries
- Aggregated platform analytics events are retained for operational reporting and product improvement
- Server and security logs are retained for a limited period according to our hosting providers’ practices and operational needs
We may retain certain information for longer where required by law or where reasonably necessary to establish, exercise, or defend legal claims.
10. Your rights
Under UK data protection law, you have rights in relation to your personal information. These include:
- Right of access — to ask for a copy of the personal information we hold about you
- Right to rectification — to ask us to correct inaccurate or incomplete information
- Right to erasure — to ask us to delete your information in certain circumstances
- Right to restrict processing — to ask us to limit how we use your information in certain circumstances
- Right to object — to object to certain types of processing based on legitimate interests
- Right to data portability — to request certain information you provided in a structured, commonly used format
- Right to withdraw consent — where we rely on consent, you may withdraw it at any time
To exercise these rights, email hello@eventthreads.co.uk. We may need to verify your identity before responding.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your personal information. We would appreciate the chance to address your concerns first.
11. Security
We take reasonable technical and organisational measures to protect personal information, including access controls, secure authentication, rate limiting, bot protection, and infrastructure provided by established service partners.
No method of transmission over the internet or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.
Please use a strong password, keep your sign-in details private, and contact us if you believe your account has been accessed without permission.
12. International transfers
Some of our service providers may process information outside the United Kingdom, including in the United States and the European Economic Area, where their infrastructure is located.
Where personal information is transferred internationally, we aim to ensure appropriate safeguards are in place in line with UK data protection requirements.
13. Children
EventThreads is intended for event professionals and businesses. It is not directed at children, and we do not knowingly collect personal information from children.
If you believe a child has provided personal information to us, please contact hello@eventthreads.co.uk and we will take appropriate steps to review and remove it where required.
14. Contact
For privacy questions, requests to exercise your data protection rights, or concerns about how your information is used, contact:
Email: hello@eventthreads.co.uk
We aim to respond to privacy requests within one month, as required by UK GDPR, though complex requests may take longer where permitted by law.
15. Changes to this policy
We may update this Privacy Policy from time to time, for example when we add new features, use new service providers, or when legal requirements change.
When we make material changes, we will update the “Last updated” date at the top of this page. Where appropriate, we may also notify users through the website or by email.
Please review this page periodically so you stay informed about how we handle personal information.