Privacy Policy
Last updated: 27 November 2025
1. Who we are
This website is operated by Quiet Assembly Ltd (“Quiet Assembly”, “we”, “us”, “our”).
Registered in: England and Wales
Company number: 16840110
Registered office: 17 Connaught Road, Hove, BN3 3WB
Email: hello@quietassembly.co.uk
Quiet Assembly is a Brighton & Hove–based studio for intimate, impact-led events, including private dining experiences, pop-ups, launches and executive briefings.
For the purposes of UK data protection law (including the UK GDPR, the Data Protection Act 2018 and related legislation as updated from time to time), we are the data controller of the personal data described in this Privacy Policy.
For information about accessibility of our website and events, please see our Accessibility Statement.
2. How to contact us about your data
If you have any questions about this Privacy Policy or how we use your personal data, you can contact us at:
Email: hello@quietassembly.co.uk
Post: Data Protection, Quiet Assembly Ltd, 17 Connaught Road, Hove, BN3 3WB.
You also have the right to contact the UK supervisory authority (the Information Commissioner’s Office) – details are in section 11
3. What personal data we collect
The personal data we collect depends on how you interact with us.
3.1 If you browse our website
We may collect:
Technical information such as your IP address, browser type and version, time zone setting, operating system, and platform.
Information about your visit, such as pages viewed, how you navigate the site, and how you arrived at the site.
This information is typically collected through server logs and cookies or similar technologies, see section 6 and our Cookie Policy for more detail. We may also use analytics cookies if you consent to them.
3.2 If you contact us (e.g. enquiry form or email)
We may collect:
Your name
Contact details (email address, phone number, organisation name if applicable)
The content of your message and any information you choose to provide about your event or business
Follow-up notes about our communications with you.
3.3 If you become a client or potential client
In addition to the above, we may collect:
Billing details (e.g. invoicing contact, billing address, purchase order details)
Event information (event type, date, location, guest profile, dietary/access needs you choose to share)
Contract and proposal details (scope of work, agreed fees, timelines)
Feedback or testimonials you provide
Limited information about your team or guests where it is necessary for event planning (for example, names for guest lists or speaker details). Where this includes personal data from other individuals, you are responsible for ensuring you have a lawful basis to share it with us.
We do not actively seek to collect special category data (such as health information). If we need to know something for health and safety or accessibility (for example, dietary requirements, allergies or access needs), we will minimise what we record and only use it for that purpose.
3.4 If you are a supplier, partner or collaborator
We may collect:
Your name and role
Business contact details
Payment details (e.g. invoicing information, bank account details for payment of invoices)
Information about your services and availability.
3.5 Social media and content
If you interact with us on social platforms (such as Instagram or LinkedIn):
We may see your public profile information and any messages, comments or tags directed to us
If you send us a direct message, we will use the information you provide to respond to your enquiry and may keep a record of our conversation, in the same way as if you had emailed us.
If we wish to use your content (for example, a testimonial, quote or image) in our marketing, we will either rely on the platform’s terms where appropriate or ask for your consent.
Instagram is a service provided by Meta Platforms and LinkedIn is provided by Microsoft. These platforms are responsible for any processing they carry out on their own sites and apps. Your use of them is subject to their own privacy notices and terms, which we encourage you to read.
4. How and why we use your personal data
We process your personal data for the following purposes and legal bases:
4.1 To respond to enquiries and provide our services
To read and respond to your messages or enquiries
To prepare proposals, event concepts, or statements of work
To plan and deliver events and related services
To manage our relationship with you (including contract administration, invoicing and payment).
Legal bases:
Performance of a contract or taking steps at your request before entering into a contract
Our legitimate interests in running and growing our business and providing events and related services.
4.2 To run our website and improve it
To operate, maintain and secure the website
To understand how visitors use our site and improve content and usability (for example, by using analytics tools such as Google Analytics where you have consented to analytics cookies)
To detect and prevent fraud, abuse or security issues.
Legal bases:
Our legitimate interests in maintaining a secure and effective website
Where applicable, your consent to optional cookies/analytics (see section 6 and our Cookie Policy).
4.3 Marketing and communications
To send you updates about Quiet Assembly, our services, events or content that may interest you (for example, if you’ve asked to be kept informed)
To follow up with you after an enquiry or project to ask for feedback or a testimonial
Legal bases:
Your consent (for example, where you sign up to a mailing list)
Our legitimate interests in keeping in touch with clients and contacts, where permitted by law.
You can opt out of marketing emails at any time by following the unsubscribe link in the message or contacting us directly.
4.4 Legal, compliance and business management
To keep appropriate business records
To comply with legal or regulatory obligations
To exercise or defend legal claims
To manage our accounts, taxation and financial reporting.
Legal bases:
Compliance with our legal obligations
Our legitimate interests in managing and protecting our business.
5. Who we share your personal data with
We only share personal data where necessary and appropriate.
We may share your data with:
Trusted suppliers and partners who help us deliver events and services (for example: venues, caterers, AV teams, photographers, designers, copywriters, booking/ticketing platforms). We only share what they need to perform their role and expect them to keep it secure and confidential.
Professional advisers, such as accountants, lawyers or business advisors.
Service providers who support our operations (for example: website hosting, email, cloud storage, project management and communication tools, analytics providers if used in future).
Payment and banking providers, such as card payment processors (for example, Stripe) and banks, to process payments and manage our accounts.
Social media platforms such as Instagram (provided by Meta Platforms) and LinkedIn (provided by Microsoft), when you choose to interact with us through those platforms.
Regulators, law enforcement or other third parties where we are legally required to do so, or where it is necessary to protect our rights or the rights of others, or to investigate fraud or security issues.
We do not sell your personal data.
6. Cookies and similar technologies
We use cookies and similar technologies on this website to help it work securely and reliably, and, if you agree, to help us understand how people use the site so we can improve it.
Some cookies are essential for the website to function and are set regardless. For example, we use them to:
• Deliver web pages and basic site functionality
• Support security and performance
Because these cookies are essential, the site cannot function properly without them. You can still choose to block them in your browser settings, but parts of the site may not work correctly.
We also use optional analytics cookies if you consent to them. These help us understand how visitors use the site. We currently use Google Analytics for this purpose. Google Analytics collects technical and usage data such as the pages you visit, how long you spend on them, the type of browser and device you use, and a truncated version of your IP address. We configure Google Analytics so that IP addresses are pseudonymised before being stored, and we do not use Google Analytics to identify you personally.
Our legal basis for using analytics cookies is your consent. If you do not give consent, or if you withdraw it later, we will not set analytics cookies for you (or will stop setting them for future visits). You can manage your cookie preferences using our cookie banner or through your browser settings.
You can find more detail in our Cookie Policy, including:
• What types of cookies we use
• Which tools and providers we use (including Google Analytics)
• How long different cookies last
• How you can manage or disable cookies through your browser settings
For more information, please read our Cookie Policy at /cookie-policy.
7. International transfers
Some of our service providers or their servers may be located outside the UK, for example in the European Economic Area (EEA) or other countries.
Where we transfer your personal data outside the UK, we will ensure that one of the following applies:
The destination country has been recognised as providing an adequate level of data protection; or
We have put in place appropriate safeguards, such as the UK’s approved international data transfer agreement or standard contractual clauses; or
Another lawful transfer mechanism under UK data protection law is in place.
You can contact us using the details in section 2 if you would like more information about the safeguards we use for international transfers.
8. How long we keep your data
We keep your personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
Respond to your enquiry
Provide and document our services
Meet legal, accounting or reporting requirements
Resolve disputes or enforce our agreements
As a guide (which we may adjust as needed):
Enquiry emails and contact form submissions: usually kept for up to 2 years after our last interaction, unless they lead into client work.
Client records (including contracts, invoices and event documentation): usually kept for up to 7 years after the end of the financial year in which the relevant work took place, to comply with tax and accounting rules.
Supplier and partner information: usually kept for as long as we work together and for a reasonable period afterwards.
We may retain information for longer where we need it for legal reasons (for example, in connection with legal claims).
9. How we protect your data
We take appropriate technical and organisational measures to protect your personal data, including:
Using reputable providers for email, storage and hosting
Limiting access to personal data to those who need it for their role
Using strong passwords and, where available, multi-factor authentication
Keeping software reasonably up to date and using security features such as encryption where appropriate.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
10. Your rights
Under UK data protection law, you have rights in relation to your personal data. These include (subject to certain conditions and exemptions):
Right of access, to obtain a copy of your personal data and certain information about how we process it.
Right to rectification, to have inaccurate or incomplete personal data corrected.
Right to erasure. to ask us to delete your personal data in certain circumstances.
Right to restrict processing, to ask us to suspend the processing of your personal data in certain circumstances.
Right to data portability, to receive personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible.
Right to object, to object to our processing of your personal data where we rely on legitimate interests, including profiling, or where we process your data for direct marketing.
Right to withdraw consent, where we rely on your consent (for example, for certain marketing or cookies), you can withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
To exercise any of these rights, please contact us using the details in section 2. We may need to verify your identity before fulfilling your request.
11. Complaints
If you have concerns about how we use your personal data, we would encourage you to contact us first so we can try to resolve the issue.
You also have the right to complain to the UK supervisory authority for data protection, the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
12. Third-party websites
Our website may contain links to other websites, social media platforms or services that are not operated by us. If you follow a link to any of these websites, please note that they have their own privacy notices or policies.
We are not responsible for the privacy practices or content of third-party websites. We encourage you to read their privacy information before providing any personal data.
13. Children
Our website and services are not directed at children, and we do not knowingly collect personal data from anyone under the age of 18.
If you believe that a child has provided us with personal data, please contact us so that we can delete it where appropriate.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example if our services change or if legal requirements change.
When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we use your personal data.
Use of our website is also subject to our Terms & Conditions.