Rules and ethics
Part of Event marketing rules and ethics: check before you plan
Nine checks to make before signing event marketing commercial contracts
Nine event marketing contract checks for England, covering data law, PECR, safety, insurance, VAT, payment terms and exit duties to settle before signing.
What to take away
- Most teams sign the contract before they have checked the client's right to use the audience data, then unpick the problem afterwards.
- The nine checks below cover scope, data, safety, payment and exit terms for event marketing commercial contracts in England.
- Use them to identify the operational, data, safety and commercial points to settle before signing.
- Apply the checks in order; the early ones shape what the later ones can say.
- This is general guidance. Individual contracts need a qualified adviser.
Nine checks before you sign
The order matters. Scope and data sit at the top because they decide what the rest of the contract can promise. A team that starts with the fee usually has to rewrite the schedule later.
1. Scope and deliverables
Write down what the agency actually delivers: stand build, staffing hours, lead capture and follow-up emails. Specify quantities, dates, venue, exclusions, approval and acceptance steps, and how written changes affect the fee and timetable. For example, a team promising "full event support" for a £12,000 fee has no way to show what was included when the client asks for extra staff on the day.
2. Audience data and lawful basis
Identify whether each party is a controller, joint controller or processor under the UK GDPR and Data Protection Act 2018. For each use of attendee data, record the purpose, lawful basis, permitted access, instructions and who will handle data rights requests. The ICO's lawful basis guidance sets out six options and when consent is right. Check and record each controller's ICO data protection fee position, including any applicable exemption. Put these responsibilities in the contract, not a side email.
Set a retention period or deletion trigger for each type of attendee data, state who handles access requests, and specify when data must be returned or deleted. Before sending follow-up marketing emails, check the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR): identify the subscriber type and confirm consent or that every condition for an exception, such as the soft opt-in, is met.
3. Ad claims and promotions
The Consumer Protection from Unfair Trading Regulations 2008 prohibited misleading actions and omissions in commercial practices; consumer-facing unfair commercial practices are now addressed by the Digital Markets, Competition and Consumers Act 2024. Read the earlier legislation on legislation.gov.uk. That covers a claim like "biggest trade stand at the show" if it is not true. Check every headline claim against the rules in force before the campaign goes live.
4. Health and safety duties
Running an event safely is an operational duty that sits with the organiser and often travels down the contract. The HSE's guidance on running an event safely sets out risk assessment and competence expectations. If your agency supplies crew, name who prepares and approves the risk assessment, who briefs the crew, who manages emergency arrangements, and how incidents are reported.
5. Insurance and indemnities
Match the indemnity to the risk you are taking on. An agency that builds structures needs different cover from one that only runs registration desks. Ask for the insurance certificate and check the insured party, covered activities, policy period, exclusions and limits against the work and the contract's indemnity. If a broker arranged the cover, check its permissions on the FCA Financial Services Register; the register does not confirm that a particular policy is adequate for the event.
6. Payment, deposits and cancellation
Put the agreed deposit and milestone amounts, payment dates, postponement terms, cancellation charges at each stage and refund rules in the contract; do not leave them as figures to be agreed later. State whether the fee includes VAT or VAT will be charged, and confirm the treatment with HMRC or a tax adviser. A cancellation clause that only protects the client is worth challenging.
7. Subcontractors and freelancers
Name any essential subcontractors and who may be substituted, the notice and approval process, and who remains responsible for their work. If a specialist supplier is essential to the pitch, the client will expect that name to stay. Set out who pays any extra substitution cost and how subcontractors may access or use client data.
8. Intellectual property and usage rights
Agree who owns the creative, the photography and the lead data, and specify the permitted uses, any licence terms and any limits on reuse. A client often assumes it owns everything; the agency often assumes it can reuse the work. Both positions need writing down before the shoot, including any permissions needed for third-party material.
9. Term, renewal and exit
Set the notice period, the events that allow termination and any cancellation charge. Specify the handover duties and dates for data return or deletion, asset transfer and final invoicing, and name who is responsible for each.
How the checks fit together
The checks cover both legal obligations and commercial choices; the distinction depends on the issue and the contract. A weak clause can still end up in front of a judge. Work through them with the client's legal contact rather than by email chain.
Who should review the contract
A solicitor with commercial or media experience should review the contract where the allocation of risk, ownership rights or jurisdiction is uncertain. An in-house marketing lead can own the scope and data questions, but not the indemnity wording. Budget for the review as a line in the pitch cost.
Common questions
Do these checks apply across the UK?
This checklist is written for contracts in England. Scotland and Northern Ireland have distinct legal systems, so do not assume the contract-law wording transfers unchanged; take advice on the governing law and place of performance. UK data protection and PECR requirements apply across the UK.
Can we rely on the client's consent for attendee data?
Only if the consent covers the planned use under the UK GDPR. Consent to attend an event does not by itself establish permission for follow-up marketing emails: check PECR as well, including the subscriber type and whether consent or every condition for the soft opt-in is met. Keep a record of the wording, purpose and choices given, and honour opt-outs.
What if the client refuses an indemnity clause?
That is a commercial decision, not a legal one. Price the risk or walk away. Do not sign and hope the issue never arises.
How long should we keep signed contracts?
There is no single retention period that suits every signed contract and attendee record. Put a period or review trigger for each record type in the retention schedule, state who may authorise a hold, and specify when records are archived or deleted. Base the schedule on the purpose of keeping the records and any relevant legal or tax-record duties; do not leave it open-ended.
