Privacy Policy

This policy explains how UK SME Summit Ltd ("we", "us") collects and uses personal information when you visit this website, buy a ticket, submit an enquiry, or attend the UK SME Summit 2026.

We are the data controller for the personal information described here. We comply with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Company: UK SME Summit Ltd
Registered office: [Street, City, Postcode], United Kingdom
Companies House number: [XXXXXXXX]
ICO registration number: [ZAXXXXXXX]
Email: hello@uksmesummit.co.uk

2. What information we collect

When you buy a delegate ticket

Name, email address, phone number, billing address (collected by Stripe, our payment processor)
Ticket type, payment amount, payment date, transaction reference
Dietary or accessibility requirements (only if you tell us)

When you submit an enquiry

Name, work email, company, phone number (optional), and the content of your message
Whether the enquiry is for exhibiting, sponsoring, speaking, or a group booking

When you visit the website

A small number of essential cookies (see our Cookies page)
Standard server logs (IP address, browser, page visited) kept for 30 days for security and debugging

3. Why we use your information (lawful basis)

To deliver your ticket and run the summit — performance of a contract
To respond to enquiries about exhibiting, sponsoring, speaking, or group bookings — legitimate interest in answering people who contact us
To send you updates about your booking (joining instructions, agenda changes, post-event recordings) — performance of a contract
To send you newsletter / marketing emails — only if you've opted in (consent), and you can unsubscribe at any time
To meet our tax and accounting obligations — legal obligation
To prevent fraud and secure the site — legitimate interest

4. Who we share your information with

We share the minimum personal information needed with these processors:

Stripe — payment processing for delegate tickets
Our hosting provider — to run the website and email service
HMRC and our accountants — for tax records

We do not sell your data and we do not share enquiry data with summit sponsors or exhibitors without your explicit consent.

5. International transfers

Most of your data stays in the UK or the EEA. Where a processor (such as Stripe) transfers data outside the UK, they do so under the UK's International Data Transfer Agreement or equivalent safeguards.

6. How long we keep your information

Order and payment records: 6 years (HMRC requirement)
Enquiry records: 24 months from last contact, then deleted
Newsletter list: until you unsubscribe
Server logs: 30 days

7. Your rights

Under UK GDPR you have the right to:

Ask for a copy of the personal data we hold about you (subject access request)
Ask us to correct information that is wrong
Ask us to delete your data, where the law allows
Ask us to restrict how we use your data
Object to processing based on legitimate interest
Receive your data in a portable format
Withdraw consent at any time, where we rely on consent

Email hello@uksmesummit.co.uk to exercise any of these rights. We'll respond within one calendar month.

8. Complaints

If you're unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top tells you when. Material changes will be communicated by email if you have an active booking.