Privacy policy

What we collect

• Account details: your name, email address and password (stored only as a one-way hash), and your sign-in history.
• What you tell us: mobile number, city, date of birth, gender, Instagram handle, interests and notification choices, all optional and editable in your profile.
• Orders: the event, tickets, the names on them, the amount and how you paid. We never see or store card numbers; the payment provider handles them on its own page.
• Bank-transfer receipts you upload as proof of payment.
• Technical data: your IP address, device and browser, used for security and to fix errors; and an anonymous visitor ID for basic usage statistics.

Why we use it

• To create your account, take your order, issue your tickets and send you messages about them.
• To keep the service safe: spotting fraud, bots and unusual sign-ins.
• To improve the site, using anonymous statistics.
• To send reminders, new-event alerts or offers, only if you switched those on.

Who handles it for us

We use a small number of trusted services: Cloudflare (hosting, database, file storage and bot protection), a payment provider for card and wallet payments, an email delivery service for tickets and receipts, and error and usage monitoring tools. They may only use your data to provide their service to us.

Organizers can see the names, emails and ticket details of people who bought tickets to their events, so they can run the event. We do not sell your data.

How long we keep it

• Account and order records are kept while your account exists and as long as the law requires us to keep financial records.
• Bank-transfer receipt images are deleted 90 days after you upload them.
• Backups are kept for 90 days.

Your choices

• See and change your details any time in Profile.
• Download everything we hold about you: Profile, then Security, then Download my data.
• Delete your account: Profile, then Security, then Delete my account. We remove your personal details and keep order records without your name. We cannot delete the account while you hold tickets for an upcoming event.
• Anything else, such as a correction or an objection, use our privacy request form or write to [email protected].

Cookies

See our Cookie policy. In short: we use a sign-in cookie, a few remembered preferences such as your theme, and anonymous statistics that respect your browser's Do Not Track setting.

Security

Connections are encrypted, passwords are hashed, tickets are digitally signed, staff access is limited by role and every admin action is logged. No system is perfectly safe; if something affecting you goes wrong we will tell you.