Privacy notice

Last updated: 13 August 2026

This notice explains what personal data we collect through careventsnearme.uk, why we collect it, who we share it with, how long we keep it and what rights you have. It is given under Article 13 of the UK GDPR.

The short version. You can browse the whole site without telling us anything about yourself. We do not take bookings or payments — you book on the event organiser’s own website — so we never see your card details. We set no cookies, run no advertising and sell no data. The only form that collects personal data is the “List your event” form.

1. Who we are

The controller of your personal data is Keelson Holdings Ltd, trading as Car Events Near Me, a company registered in England and Wales with company number 17359226, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are registered with the Information Commissioner’s Office under reference ICO:00015117984.

For anything to do with this notice or your personal data, email info@careventsnearme.uk or write to us at the registered office above. We have not appointed a data protection officer, as we are not required to.

2. What we collect, why, and our lawful basis

a. When you submit an event

The List your event form sends what you type to our own server, which stores it in our database. The form asks for the event name, type, region, county, town, venue, start and end dates, organiser name, a “from” price, a booking or information link, a link to a photo, a one-line description, and your email address so we can confirm the listing with you. Personal data in that set is normally your email address, the organiser name if it is a person’s name, and anything personal you choose to put in the free-text fields.

We use it to review the submission, publish the listing if we approve it, contact you about it, and keep a record of who submitted what. Your email address is not published — it is stored with the submission and visible only to us. The event details, organiser name, description, photo and booking link are published on the site once approved.

Lawful basis: Article 6(1)(b) UK GDPR — processing necessary to take steps at your request before entering into a listing arrangement with you, and to perform it. Where you submit an event you do not yourself organise, or where we contact you to verify details, we rely on Article 6(1)(f) — our legitimate interest in running an accurate, moderated directory of UK car events and in preventing spam and fraudulent listings.

The form is the only place on this site where we ask for personal data. If our database is unavailable, the form tells you so and nothing is stored.

b. When you email us

If you email us we keep the message and your address so we can reply and keep a record of the correspondence. Lawful basis: Article 6(1)(f) — our legitimate interest in responding to enquiries and keeping business records; or Article 6(1)(b) where the email is about a listing arrangement with you.

c. Server logs

Our hosting provider, Vercel, records technical information about every request to the site — typically your IP address, the page requested, the time, your browser type and the referring page. We use this to keep the site running, investigate errors and protect it from abuse. Lawful basis: Article 6(1)(f) — our legitimate interest in the security, availability and correct operation of the site.

d. Audience measurement

We use Vercel Web Analytics to count page views and see which pages, countries, referrers and device types are popular. It does not use cookies and does not track you across other websites. Vercel derives a temporary identifier from your request (including your IP address and browser type) so that a visit is not counted twice; that identifier is not usable to identify you and is not retained beyond the day. We only ever see aggregate statistics. Lawful basis: Article 6(1)(f) — our legitimate interest in understanding, at an aggregate level, how the site is used so we can improve it. We do not profile you or make automated decisions about you.

e. What we do not collect

No payment data. We do not take bookings or payments. Every booking is completed on the organiser’s own website, so card and payment details never reach us.
No accounts. There is no way to register or log in. The “Sign in” page is a placeholder that collects nothing.
No location tracking, no advertising, no data broking. We do not use advertising or social-media tracking pixels, we do not build profiles, and we never sell or rent personal data.
No special category data. Please do not send us health, political or other sensitive information — we have no need for it.

3. Cookies and storage on your device

This site sets no cookies — not for analytics, not for advertising, not for anything. Two things are stored on your device by the site itself:

An app-install reminder flag. If you dismiss the “Get the Car Events app” banner, we store the date you dismissed it in your browser’s local storage, under the key cenm-install-dismissed, so we do not nag you again for a fortnight.
An offline cache. The site is installable as an app, so a service worker keeps a copy of the pages you have visited and of static files such as the icon and stylesheet, in a browser cache named cenm-v2. This lets the site work when you are offline. Nothing in that cache is sent to us or to anyone else — it stays in your browser.

Both are strictly necessary to provide features you have asked for, so we do not ask for consent for them. You can remove both at any time by clearing site data for careventsnearme.uk in your browser settings. If we ever add cookies or storage that are not strictly necessary, we will ask for your consent first.

4. Who else is involved

We use a small number of service providers, who process data on our instructions:

Vercel Inc. — hosting for the website, server logs and Vercel Web Analytics.
Supabase Inc. — the managed Postgres database that stores event listings and event submissions, including the contact email you give on the submission form.

We do not use a third-party email marketing platform, a customer relationship management system or a third-party form processor. We do not use Google Fonts or any other hosted web font, so no font provider sees your visit.

Two other things are worth knowing, because they involve your browser talking to someone else:

Event photographs. Some listing images are stock photographs loaded directly from Pexels (images.pexels.com), so your browser makes a request to Pexels and they will see your IP address and browser type. Photographs taken from organisers’ own sites are fetched by our server and re-served from our domain, so those sites do not see you.
Outbound booking links. When you click through to book, you go to the organiser’s website (or, if we do not hold a direct link, to a Google search for their official tickets). From that point their privacy notice applies, not ours.

We may also disclose personal data where we are legally required to, or to establish, exercise or defend legal claims. If our business is ever sold or reorganised, data may pass to the buyer under the same protections.

Transfers outside the UK. Vercel and Supabase are US-headquartered and their infrastructure and support may involve access to data from outside the UK. Where that happens, transfers are covered by the safeguards in those providers’ standard data processing terms — the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an equivalent approved mechanism.

5. How long we keep things

Published listings — kept while the event is upcoming. Past events drop off the site automatically once the end date has passed, and the record is retained afterwards as part of our archive of what we have published.
The contact email on a submission — kept while the listing is live and until 12 months after the event has finished. A scheduled job runs every day and erases the email address from any event that ended more than 12 months ago. The listing itself stays as part of the archive described above, but with no contact details on it.
Submissions we reject — kept for 6 months so we can recognise duplicates and repeat spam. The same daily job then deletes the whole record, including the contact email.
Emails — kept for up to 24 months, longer where we need them for a legal or accounting reason.
Server logs and analytics — kept for the short period our hosting provider retains them; the analytics we see are aggregate figures only.

6. Your rights

Under the UK GDPR you have the right to:

ask what personal data we hold about you and get a copy of it (access);
have inaccurate data corrected (rectification);
have data deleted, for example a listing you no longer want published (erasure);
ask us to restrict how we use it while a concern is resolved (restriction);
object to processing we carry out on the basis of legitimate interests, including our audience measurement (objection);
receive data you gave us in a portable, machine-readable form, where we rely on your contract or consent (portability);
withdraw consent at any time, where we ever rely on consent.

Email info@careventsnearme.uk to exercise any of these. We will respond within one month, and it is free. We may ask you to confirm your identity — usually just replying from the address you submitted with is enough. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

7. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk, by phone on 0303 123 1113, or by post to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

8. Children

This site is aimed at adults planning trips to car events. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, email us and we will delete it.

9. Changes to this notice

We will update this notice when what we do changes. The date at the top shows when it last changed. If a change materially affects how we use personal data you have given us, we will make that clear on the site.

10. Contact

Keelson Holdings Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
Email: info@careventsnearme.uk
Company number 17359226 · ICO registration reference ICO:00015117984