Privacy notice

What we collect

• Account data: name, work email, phone number, organisation and role.
• Organisation data: agency billing details; supplier company registration, VAT status, insurance and accreditation records.
• Content you provide: event briefs, uploaded files, reference images, messages, proposals and signed documents.
• Usage and audit data: actions taken on commercial records, with timestamps.

How we use it

• To extract structured requirements from briefs and produce estimates.
• To route enquiries to the relevant suppliers and only those suppliers.
• To create contracts, process payments and maintain an audit trail.
• To review supplier and listing applications.

Brief content and AI processing

Uploaded briefs are processed by an AI provider through server-side functions in order to extract requirements. Extracted source data is stored separately from AI-generated inference. Confidential supplier proposals are never shared with another supplier and are never used as context in another organisation’s estimate.

Storage and access

Sensitive files are held in private storage and accessed through short-lived signed URLs. Row-level security restricts each organisation to its own records. Card details are handled by Stripe and are never stored by Ballpark.

Your rights

Under UK GDPR you may request access, correction, deletion, restriction or portability of your personal data. Contact us and we will respond within one month.