EventOn Privacy Policy

1. Who We Are

EventOn is a product of Wemoveon Ltd, a company registered in England and Wales.

• Address: 61 Bridge Street, Kington, United Kingdom, HR5 3DJ
• Company number: 10061558
• Website: https://eventon.pro
• Privacy contact: privacy@eventon.pro

EventOn is a multi-tenant SaaS platform for event workforce management. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our services.

2. Data We Collect

We collect the following categories of personal data:

• Account details: Name, email address, phone number, password (hashed), profile information, and authentication credentials.
• Organisation details: Company name, business address, billing information, team member information, and organisational settings.
• Uploaded data: Documents, images, staff records, event details, client information, and any other content you upload to the platform.
• Usage data: Information about how you use our services, including pages visited, features used, timestamps, and interaction patterns.
• Cookies and similar technologies: We use cookies and similar tracking technologies to provide and improve our services. See Section 10 for more details.

3. Third-Party Integrations

EventOn integrates with third-party services such as QuickBooks Online, Xero, Sage, and other accounting and business tools. When you connect these integrations:

• We use OAuth or similar secure authorisation mechanisms to access your data on those platforms.
• We only access the data necessary to provide the integration functionality you have requested.
• We store access tokens securely and encrypted.
• We do not intentionally store credit card numbers or payment card details. Payment processing is handled by third-party payment processors.

4. How We Use Your Data

We use your personal data for the following purposes:

• Operating the service: To provide, maintain, and improve EventOn's features and functionality.
• Authentication: To verify your identity and manage access to your account and organisation.
• Support: To respond to your enquiries, provide customer support, and resolve issues.
• Analytics and performance: To understand how our services are used and to improve user experience.
• Service communications: To send you important updates about your account, service changes, and security notifications.
• Compliance and audit: To comply with legal obligations and maintain audit logs for security and regulatory purposes.

5. Legal Bases for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to perform our contract with you or your organisation.
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security, where these interests are not overridden by your rights.
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.
• Legal obligation: Processing necessary to comply with applicable laws and regulations.

6. Sharing Your Data

We may share your personal data with:

• Service providers: Trusted third parties who help us operate our services, including hosting providers, email services, and analytics tools. These providers are contractually bound to protect your data.
• Integrations: Third-party services you choose to connect with EventOn, as authorised by you.
• Authorities: Law enforcement, regulators, or other authorities when required by law or to protect our rights and safety.

We do not sell your personal data to third parties.

7. International Transfers

Your data may be transferred to and processed in countries outside the UK and European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK and EU authorities.
• Adequacy decisions where the destination country provides adequate data protection.
• Other appropriate safeguards as required by applicable law.

8. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes described in this policy. When you request deletion of your data:

• We will delete or anonymise your data within a reasonable timeframe.
• Some data may be retained longer where required by law, for legitimate business purposes (such as fraud prevention), or to resolve disputes.
• Backup copies may be retained for a limited period as part of our disaster recovery procedures.

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal requirements).
• Export (portability): Request your data in a portable, machine-readable format.
• Restrict processing: Request that we limit how we use your data.
• Object: Object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact us at privacy@eventon.pro.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Access controls: Role-based access controls to limit data access to authorised personnel.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL.
• Monitoring: We monitor our systems for security threats and suspicious activity.

12. Children

EventOn is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@eventon.pro.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last updated" date at the top of this policy.
• Notify you through the platform or by email where appropriate.

We encourage you to review this policy periodically to stay informed about how we protect your data.