Privacy Policy

Last updated: 5 November 2026

1. Who we are

MyEvent Ltd ("MyEvent", "we", "us") operates myevent.co.uk, a UK-based QR-code event photo and video collection service. For privacy queries, contact privacy@myevent.co.uk.

2. What we collect

From hosts (our customers): name, email, billing address, payment confirmation (we do not store full card numbers — payments are processed by Stripe), event details, and any content you upload (cover images, logos).

From guests: an optional first name, the photos and videos you choose to upload, and an optional guestbook message. We do not require guests to create an account, and we do not collect guest email addresses or phone numbers unless a host's custom form asks for one.

Automatically: a hashed (irreversible) version of your IP address, used only to prevent duplicate uploads and abuse — never stored or shown in raw form.

3. Lawful basis and why we process it

We process host account and billing data under contract (to provide the service you've purchased) and legal obligation (UK tax records). We process guest uploads on the basis of consent, given at the point of upload, and the host's legitimate interest in collecting event memories.

4. Data retention

Event galleries are retained for the period included in your package (from 3 months up to 24 months), shown clearly before purchase and again in your dashboard. After this period, content is scheduled for permanent deletion unless you extend retention or download an archive first.

5. Your rights

Under UK GDPR, you can request access to, correction of, or deletion of your personal data, and can object to or restrict certain processing. Hosts can do this from Account Settings; guests can request removal of their own upload directly from the gallery, or by emailing privacy@myevent.co.uk.

6. Sharing your data

We share data only with processors who help us run the service: our hosting provider, our payment processor (Stripe), and our transactional email provider. We never sell personal data. See our Data Processing & GDPR page for the full sub-processor list.

7. Security

Media is stored outside the public web root, served via short-lived signed links, and originals are never publicly listable. See our Data & GDPR page for more detail on our security measures.

8. Cookies

See our separate Cookie Policy.

9. Children

MyEvent is intended for use by adults planning or attending events. Photos of children may appear in galleries at the host's discretion (e.g. family weddings) — hosts are responsible for obtaining any necessary consent from parents/guardians for content involving children.

10. Complaints

You can complain to us directly, or to the UK Information Commissioner's Office (ICO) at ico.org.uk.