Privacy Policy – Make Events Limited
Make Events Limited (“Make Events”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains what personal data we collect, why, how we use it, and the choices and rights you have. It applies to our website (www.makeevents.co.uk), our event management services, and our interactions with customers, event attendees, suppliers, and business contacts.
This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Make Events Limited acts in two different capacities, depending on the data in question:
- As data controller, for personal data we collect and use for our own purposes — including customer contacts, business prospects, supplier contacts, and website visitors.
- As data processor, for event attendee data that a client provides to us, or that we collect directly on the client’s behalf — for example, via a delegate registration website we build and host for a specific event — solely to manage invitations, attendance, and logistics (including passing relevant details to venues and other suppliers) in order to fulfil our contractual obligations to that client.
Where we act as processor, the client who engaged us for the event is the data controller for that attendee data, and remains responsible for the lawful basis on which it was collected and for informing attendees of their rights. We process that data only as necessary to deliver the event we have been contracted to deliver, and under the terms agreed with the client.
Registered office: First Floor, Make Events, Bollin House, Bollin Walk, Wilmslow, SK9 1DP
Contact: info@makeevents.co.uk
If you have any questions about this policy or how we handle your data, please contact us using the details above.
We collect different categories of personal data depending on your relationship with us:
Website visitors: We use analytics cookies to understand how visitors use our site, such as page views, time on page, and general regional location. We do not use this data to identify individual visitors. See Section 9 (Cookies) for details on consent.
Customers: Names, job titles, business addresses, phone numbers, and email addresses of individuals at organisations we work with, collected to deliver and manage our contracted services.
Event attendees: Where a client engages us to manage an event, we process the personal data of attendees — typically names and contact details, and depending on the specific event, information such as dietary or accessibility requirements, clothing or merchandise sizing, home address (for example, for gifting or invitations), or other preferences — in order to manage invitations and attendance. The exact categories of data we collect vary by event and are determined by the client’s brief; we only collect what is necessary for that specific event. This data may be supplied to us by the client, or collected directly from attendees themselves, for example via a delegate registration website we build and host for that event. We act as a data processor for this data, in order to fulfil our contractual obligations to that client (see Section 1).
Business prospects: Business contact details (name, job title, business email, phone number) that we source or are given, for the purpose of marketing our services.
Suppliers: Contact details of individuals at supplier organisations we engage with (venues, contractors, and other partners) to deliver client events.
We do not knowingly collect special category data (such as health information), except where directly relevant to delivering a service — for example, dietary or accessibility requirements for an event — and we minimise and protect this data as described in Section 7.
How we collect your data
- Directly from you, by phone, email, through our website, or via a delegate registration website we build and host for a specific client event
- From our customers, who provide attendee details for events we manage on their behalf
- From publicly available business sources, such as company websites, directories, and professional networking platforms, for prospecting purposes
Lawful basis for processing
We rely on the following lawful bases under UK GDPR:
Contract: to deliver the services you or your organisation has engaged us for, including managing event attendance.
Legitimate interests: to market our services to existing customers and business prospects, and to maintain business relationships. We balance this against your rights and interests, and you can object at any time (see Section 12).
Legal obligation: to retain certain records for accounting, tax, and compliance purposes.
Consent: for non-essential website cookies (see Section 9), and where individuals sign up to our newsletter using a personal email address.
How we share your data
We share personal data only where necessary to deliver our services or run our business:
- Suppliers and venues, to fulfil event logistics (e.g. attendee names and dietary requirements). Where this involves attendee data provided to us by a client, we pass it on in order to fulfil our contractual obligations to deliver that client’s event, in our capacity as processor — the client remains the data controller and determines what is shared and with whom.
- Service providers who support our own operations, such as our project management, accounting, and email marketing platforms, each of which processes data on our behalf under a data processing agreement
- Professional advisers (legal, financial) where necessary
All third parties we share data with are required to handle personal data in accordance with UK GDPR and the Data Protection Act 2018. We do not sell personal data, and we do not share it with unrelated third parties.
International transfers
Some of the third-party services we use to run our website and business — for example, Google Analytics and Microsoft services — are provided by companies based outside the UK, which means personal data may be processed on servers in other countries, including the United States. We choose established, reputable providers whose own terms of service commit them to complying with UK data protection requirements when transferring data internationally. We do not control, and cannot independently verify, the internal infrastructure or server locations of these providers.
Data security
We take appropriate technical and organisational measures to protect personal data, including:
- Restricting physical and system access to personal data to those who need it
- Using password protection and encryption for sensitive data transfers and storage
- Secure, controlled office access
- Destroying data securely once it is no longer required (see Section 8 – Retention)
Where a client shares data with us for an event (such as an attendee list), we handle it under strict controls: data is transferred via secure, password-protected methods; access is restricted to the team members delivering that project; and files are permanently deleted, and any physical materials shredded, once the work is complete.
No transmission over the internet can be guaranteed completely secure, but we take all reasonable steps required under UK GDPR and the Data Protection Act 2018 to protect your data.
How long we keep your data
We retain personal data for no longer than necessary:
- Customer and event data: up to 7 years from the last point of contact or completion of work, in line with our accounting and legal obligations, after which it is securely destroyed.
- Business prospect data: until you ask us to stop contacting you, or it becomes out of date.
- Website analytics data: in line with the retention settings of our analytics provider, on an aggregated and non-identifying basis.
Where you ask us to be forgotten, we will delete all data other than what we are legally required to retain (for example, for accounting or audit purposes), and we will keep a minimal record of your request so that we know not to contact you again. Where we hold your data as a processor on behalf of a client (see Section 1), we will delete or return it in line with our contractual agreement with them once the event has concluded.
Cookies
Our website uses cookies to operate effectively and to understand how it’s used. Non-essential cookies (such as analytics and marketing cookies) are only set with your consent, which you can give or withdraw at any time using the cookie consent tool on our website.
Essential cookies: required for the website to function (e.g. remembering your cookie preferences).
Analytics cookies: help us understand site usage (e.g. Google Analytics). Set only with your consent.
We do not currently use marketing or remarketing cookies (such as Google Ads). If this changes in future, we will update this policy and our cookie consent tool accordingly.
You can change your cookie preferences at any time via the cookie settings tool on our website, or through your browser settings. Rejecting non-essential cookies will not affect your ability to use the core functions of our website.
- Marketing communications
We may contact existing customers and business prospects about our services on the basis of legitimate interests. You can opt out of marketing communications at any time by:
- Clicking “unsubscribe” on any marketing email
- Emailing info@makeevents.co.uk
Opting out of marketing will not affect service-related communications we’re required to send you as part of delivering a contracted service.
Our marketing emails may include tracking technology that tells us whether an email has been opened or a link clicked. We use this to understand which content is useful and to improve future communications.
External links and social media
Our website may contain links to external websites. We are not responsible for the content or privacy practices of any site we don’t operate, and we’d encourage you to review the privacy policy of any external site you visit.
We maintain profiles on third-party social media platforms. Any interaction you have with us through those platforms is also governed by that platform’s own terms and privacy policy, which we’d encourage you to review.
Your rights
Under UK GDPR, you have the right to:
- Be informed about how we use your data (this policy)
- Access the data we hold about you
- Rectification of inaccurate data
- Erasure of your data (“right to be forgotten”), subject to our legal retention obligations
- Restrict or object to processing, including processing for marketing
- Data portability, where technically feasible
- Withdraw consent at any time, where processing is based on consent
- Complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data properly
To exercise any of these rights, email info@makeevents.co.uk. We will respond within one month, as required by law.
If you are an event attendee and your data was provided to us by an organisation that engaged us to run their event, we act as their processor for that data (see Section 1). In that case, please direct your request to that organisation in the first instance, as they are the data controller responsible for it; we will assist them, and you, in fulfilling it.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Children
Our services are directed at businesses and adults. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements.
Last Update: July 2026
Contact us
Make Events Limited
First Floor, Make Events, Bollin House, Bollin Walk, Wilmslow, SK9 1DP
info@makeevents.co.uk