Privacy policy

Who controls your information

Bunch Of Bananas is responsible for the personal information described here. Questions and rights requests can be sent to hq@bunchofbananas.co.uk.

Information we collect

• Contact details and messages submitted through enquiry, media-pack and event forms.
• Email addresses and preferences submitted to the newsletter.
• Email addresses submitted with London Map venue ratings.
• Publicly published business-role contact addresses and event details used for carefully targeted event-promotion invitations. We do not intentionally collect private contact details for this purpose.
• Limited technical and usage information used to secure forms, prevent abuse, understand whether calendar features work and measure website visits through Google Analytics.
• Information you deliberately include in an event or editorial submission.

How and why we use it

We use this information to reply to requests, review submissions, send requested updates, operate the events calendar, record or update one venue rating per email address, protect the service and improve the website. Rating email addresses are not added to marketing lists. We may send a limited business-to-business invitation about paid event promotion where an Owner has confirmed a relevant corporate recipient and documented a legitimate-interests assessment, or where consent has been recorded. Our lawful bases are consent, taking steps at your request, and our legitimate interests in running, securing and proportionately promoting Bunch Of Bananas. You can object to direct marketing at any time.

Who processes it

Website hosting and application services are provided by Vercel. Database, authentication and storage services are provided by Supabase. Resend processes event-outreach email delivery and suppression events. Google processes website measurement information through Google Analytics. Newsletter or calendar providers process information only when those integrations are enabled or you choose to use them. We do not sell personal information.

Retention

Newsletter details are kept until you unsubscribe. Venue-rating email addresses are kept with the rating until the rating is deleted or you ask us to remove it. Event-outreach working records are reviewed periodically and message content is not kept longer than needed for operations and compliance. Opt-outs, hard bounces and complaints are retained on a minimal suppression list so we can honour them permanently. Enquiries and submissions are normally reviewed or deleted within 24 months. Short-lived security and diagnostic records are kept only as long as needed to protect the service. We may retain records longer where required to resolve a dispute or meet a legal obligation.

Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability or object to processing. You can withdraw consent at any time. You may also complain to the UK Information Commissioner's Office.