This notice covers your private Dirty Olive event portal. The controller is Oakwood Lock Limited, 54 Lower Pollet, St Peter Port, GY1 1WF. Contact hello@thedirtyolive.gg about your information or rights.
Information we use
We use your name, email, account details, event arrangements, drink selections, invoice amounts, payment references and statuses, messages, change requests, the event-day details you share (venue contact, access, guest numbers and allergy notes) and access records to organise and deliver your event, respond to enquiries and protect your account. Passwords are hashed by our sign-in provider. Please do not include payment card details in messages. For allergies, share only what the bar needs, such as “3 guests with a nut allergy”, without names, and please do not send other health information or sensitive details about guests.
Why we use it and who can see it
Event planning information is used to take steps at your request and fulfil your event contract. Necessary access and security records support our legitimate interests in protecting the service. Information required by law may be retained to meet those obligations. Your event team can read portal messages. Clients cannot access other clients’ events or internal supplier prices and profitability calculations.
We use Supabase for authentication and database storage and Vercel to host the portal. These providers process information on our behalf; their infrastructure and authorised support may involve processing outside Guernsey. Ask the privacy contact for the applicable locations, safeguards and processor arrangements. We do not sell your information or use portal messages for advertising.
Online payments
Where enabled, payments are collected through SumUp’s hosted checkout. We send the amount, currency and a payment reference to SumUp and store its checkout identifier and verified payment status. Card details are entered directly with SumUp; the planner does not receive or store card numbers or security codes. The payment recipient is identified beside each payment request. SumUp also processes payment information under its own privacy notice.
Retention and your choices
Our normal operating periods are:
- Messages: 12 months after the later of the event or the last message in the conversation.
- Uploaded event and chat files: 90 days after the later of the event or upload.
- Profile photos: keep the current photo while the account is active; delete replaced or removed photos within 90 days.
- Routine private reports: 24 months after the case is closed.
- Notifications and completed delivery logs: 90 days after creation or final outcome, respectively.
- Routine audit and minimum erasure or revocation records: 12 months after the action. Recovery records remain longer where needed to prevent an older backup from restoring erased information or access.
- Encrypted operational backups: 35 days after creation.
Deletion at these cut-offs is not automatic in the current portal; the event team reviews removal manually. Documented evidence holds can extend the normal periods. Open reports and unresolved delivery incidents remain under review. Contract, payment and accounting records follow their separate retention requirements.
After verifying an account-closure request, we revoke access immediately and aim to remove eligible profile and contact data within 30 days. Holds, separate financial records and the minimum records needed for safe backup recovery remain protected. Closing an account does not automatically erase shared event history.
Contact us to request access, correction, deletion or restriction, to object where applicable, or to ask about portability. These rights depend on the circumstances and applicable law. You may complain to the Office of the Data Protection Authority.
Essential cookies
The portal uses essential session and verification cookies to sign you in and secure your event space. They are needed for the service to work. This portal does not set advertising or analytics cookies. Blocking essential cookies prevents sign-in. Sign out on shared devices.
Updated 23 September 2026. Contact us if you would prefer to manage your event directly with the team.