Privacy Policy

1. Introduction

TIXSTA ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our ticketing platform.

2. Information We Collect

We collect the following types of information:

Account Information

• Name, email address, phone number
• Password (encrypted)
• Profile preferences and settings

Transaction Information

• Payment card details (processed securely via Stripe)
• Billing address
• Purchase history and ticket details

Usage Information

• Device information (IP address, browser type, operating system)
• Usage patterns and preferences
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal data to:

• Process ticket purchases and deliver digital tickets
• Send order confirmations and event updates
• Provide customer support
• Improve our platform and user experience
• Send marketing communications (with your consent)
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract performance: Processing necessary to fulfill ticket purchases
• Consent: Marketing communications and optional features
• Legitimate interests: Platform improvement and fraud prevention
• Legal obligation: Compliance with applicable laws

5. Data Sharing

We share your information with:

• Event Organizers: Name and contact details for events you attend
• Payment Processors: Stripe for secure payment processing
• Service Providers: Email services, analytics, and hosting providers
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal data to third parties.

6. Data Security

We implement industry-standard security measures including:

• Encryption of sensitive data in transit and at rest
• Regular security audits and penetration testing
• Secure access controls and authentication
• PCI DSS compliance for payment processing

7. Your Rights

Under GDPR and other data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Object: Opt out of marketing communications or certain processing
• Withdraw consent: At any time, for consent-based processing

To exercise these rights, contact us at privacy@tixsta.com

8. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Account data is kept while your account is active. Transaction records are retained for 7 years for tax and accounting purposes.

9. Cookies

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can control cookie preferences in your browser settings. Essential cookies are necessary for platform functionality.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

TIXSTA is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or prominent notice on the Platform. The "Last updated" date at the top indicates when changes were made.

13. Contact Us

For privacy-related questions or to exercise your rights:
Email: privacy@tixsta.com
Address: TIXSTA Ltd, 123 Event Street, London, UK
Data Protection Officer: dpo@tixsta.com