GDPR

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to:
• visitors to our website
• clients and prospective clients
• individuals who contact us
• job applicants, employees, freelancers
• contractors, suppliers and partners

Controller: Mertel Events Agency, UK
Email: [email protected]
Address: Fergusson House, 124 City Road, London EC1V 2NX
We are the “data controller” responsible for your personal data.

We may collect and process the following categories of personal data:

• Name, surname
• Email address
• Telephone number
• Postal address

• Company name
• Company registration number
• Tax/VAT identifiers (where applicable)

• Payment information
• Order history
• Contract details

• IP address
• Browser type and version
• Device information
• Website usage data

• Emails, messages, and call records

• CVs, education, employment history
• Application correspondence

We collect personal data:
• directly from you (e.g. forms, emails, contracts)
• through your use of our website
• from publicly available sources
• via third parties where appropriate

We rely on the following lawful bases:

To:
• provide services
• manage accounts
• fulfil contractual obligations

To:
• comply with tax and accounting requirements
• respond to lawful requests from authorities

To:
• offer and update of our services
• respond to enquiries
• manage client/customer relationships
• recover debts
• ensure IT security and website performance
• operate CCTV for security purposes
We ensure our legitimate interests do not override your rights.

To:
• send marketing communications (where required)
You can withdraw consent at any time.

We process your data to:
• provide and manage our services
• communicate with you
• process payments and maintain records
• improve our website and services
• comply with legal obligations
• protect our business and assets

We may share your personal data with:
• service providers and suppliers
• IT and hosting providers
• professional advisers (lawyers, accountants)
• debt recovery agencies
• public authorities where required
We only share data where necessary and ensure appropriate safeguards are in place.

We retain personal data only as long as necessary:
• Contract data: up to 6 years after the relationship ends
• Financial data: as required by law (typically 6 years)
• Marketing data: until consent is withdrawn or up to 5 years
• Recruitment data: typically up to 6–12 months unless consent is given for longer

You have the right to:
• Access your personal data
• Correct inaccurate data
• Request erasure
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time
To exercise your rights, contact us.
Email: [email protected]

If you apply for a role with us, we process your data to:
• assess your suitability
• communicate with you about the role

Clear signage is displayed where CCTV is in operation on our premises.

Our website may use cookies and similar technologies.

If you are unhappy with how we have handled your data please contact us in the first instance so we can help. Email: [email protected]. If you remain dissatisfied you can lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
https://ico.org.uk

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

If you have any questions about this Privacy Policy or your data, please contact us.
Email: [email protected]