Legal

Privacy Policy

How we handle personal data for clients, staff and website visitors. Compliant with the UK GDPR and Data Protection Act 2018.

Last updated: 21 July 2026 · Version 1.0

1. Who we are

Premier Event Staff Ltd (“we”, “us”, “our”) is a company registered in England and Wales, trading as Premier Event Staff. We provide event and hospitality staffing services in the West Midlands.

  • Registered office: [to be confirmed], United Kingdom
  • Company number: [to be confirmed]
  • ICO registration number: [to be confirmed]
  • Contact: info@premiereventstaff.co.uk · 01384 226171

We are the data controller for personal data collected via this website, our booking and staff portals, and our email/phone enquiries.

2. What data we collect

Clients & enquirers: name, business name, email, phone, event details (date, venue, staffing requirements), billing details processed by Stripe, and correspondence history.

Staff and applicants: name, date of birth, contact details, address, National Insurance number, bank details for payroll, right-to-work evidence (passport, BRP, share code), photo ID, DBS or other certificates you upload, badge photo, emergency contact, training progress, timesheets, performance notes, and shift history.

Website visitors: IP address, browser type, pages viewed and referrer, collected via essential cookies and (with consent) analytics. See our Cookie Policy.

3. Why we use it and our lawful basis

PurposeLawful basis (UK GDPR)
Responding to enquiries and quoting for eventsLegitimate interests / steps prior to a contract
Managing bookings, invoices and Stripe paymentsPerformance of a contract
Vetting staff (right-to-work, ID, DBS)Legal obligation (Immigration Asylum & Nationality Act 2006) & legitimate interests
Payroll, HMRC RTI submissions, pensionsLegal obligation
Staff scheduling, communications, performancePerformance of a contract
Marketing emails to clientsConsent (opt-in) — you can withdraw at any time
Fraud prevention & portal security (MFA, audit logs)Legitimate interests
Analytics cookiesConsent

4. Who we share it with (processors & sub-processors)

  • Supabase (Lovable Cloud) — database, authentication, encrypted file storage. Hosted in the EU.
  • Stripe Payments UK Ltd — card processing. We never store full card numbers.
  • IONOS — email hosting for info@premiereventstaff.co.uk.
  • Lovable — website hosting and platform.
  • HMRC — payroll returns as required by law.
  • Insurers, legal advisers and auditors — where strictly necessary.

We do not sell personal data. We never share staff bank details, NI numbers or ID documents with clients.

5. International transfers

Data is stored in the UK/EU. Where a processor transfers data outside the UK, we rely on UK adequacy decisions or the UK International Data Transfer Addendum to the EU SCCs.

6. How long we keep it

  • Enquiries with no booking: 12 months.
  • Booking, invoice and payroll records: 6 tax years (HMRC requirement).
  • Right-to-work evidence: duration of employment + 2 years (Home Office guidance).
  • Staff files after leaving: 6 years, then anonymised or deleted.
  • Marketing consent records: until you unsubscribe, then a suppression record only.

7. Security

The staff and admin portals are protected by password authentication, mandatory multi-factor authentication (MFA) for administrators, row-level database access controls, encrypted-at-rest storage, and full audit logging of admin actions on sensitive data (bank details, NI numbers, ID documents). Files are held in a private bucket and served only via short-lived signed URLs.

8. Your rights

Under the UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have data erased (subject to legal retention rules above).
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time (marketing, cookies).
  • Lodge a complaint with the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

To exercise any right, email info@premiereventstaff.co.uk. We respond within one month.

9. Cookies

See our full Cookie Policy.

10. Changes to this policy

We will post the current version on this page. Material changes will be communicated to registered staff and clients by email.