Privacy policy

1.Introduction

EventTix Technology Limited (“EventTix”, “we”, “us” or “our”) operates an online event discovery and ticketing platform (the “Platform”) that connects people who want to discover and attend events (“Attendees”) with individuals and organisations that create and manage events (“Organisers”), and supports Organisers in managing event staff (“Event Staff”).

This Privacy Policy explains what personal information we collect, how and why we collect, use, share and retain it, and the choices and rights available to you, across all categories of Platform users: Visitors, Attendees, Organisers, Event Staff, and EventTix’s own personnel. It applies wherever you interact with EventTix, including our website, mobile applications and any related services.

2.Who this policy applies to

The information we collect, and the purposes for which we use it, differ depending on how you interact with the Platform:

• Attendees / ticket buyers — individuals who discover events, view event information, purchase tickets, receive and use digital tickets, and attend events.
• Organisers — individuals, businesses, organisations, schools, communities, brands or other entities that create and publish events, set up ticket types and pricing, sell tickets, manage attendees and staff, view analytics, and receive proceeds from sales.
• Event staff / check-in staff — individuals authorised by an Organiser to log in, access assigned events, scan and verify tickets, and check attendees in.
• EventTix administrators / internal staff — authorised EventTix personnel who may access platform information for support, fraud prevention, technical support, payment reconciliation, dispute resolution, security, compliance and administration, on a role-based, least-privilege basis.
• Visitors / unregistered users — people who browse or search the Platform without creating an account.

3.Information we collect

Information you provide

• Account information — name, email address, phone number, password/login credentials.
• Attendee/order information — billing details necessary to process an order, ticket selections, and order history. Full payment card details are generally processed and stored by our payment service provider rather than directly by EventTix, depending on the payment architecture in use.
• Organiser and verification information — business/organisation details, representative and contact information, individual identification information, bank/payout details, and other information reasonably required for payment processing, fraud prevention, or legal/regulatory compliance.
• Event information — event name, description, date/time, venue/location, category, images, ticket types and prices, and any event-specific terms submitted by an Organiser.
• Event Staff information — name, email, account details, and the events a staff member is assigned to.
• Communications — information you provide when you contact us for support, or that we generate when responding to you.

Information collected automatically

• Device and browser information — such as device type, operating system, and browser type.
• Technical information — such as IP address and approximate location derived from it.
• Usage information — such as pages viewed, events searched or browsed, and interactions with the Platform.
• Cookies and similar technologies — as described in section 8.

Information generated through use of the Platform

• Ticket and check-in information — the issuance, status, and use of a ticket, including scan results (e.g. valid, already used, invalid, cancelled, refunded, wrong event) and the time and event associated with a check-in.
• Platform access and activity logs — including logs of actions taken by Organisers, Event Staff and EventTix personnel for security, audit and support purposes.

Data categories by user type

The table below summarises the main categories of information associated with each type of Platform user.

4.How we collect information

We collect information directly from you (for example, when you create an account, complete a purchase, or create an event); automatically through your use of the Platform (for example, through cookies and similar technologies); and from third parties, such as our payment service providers (for example, confirmation that a payment has been successfully processed), identity verification providers, and, where applicable, an Organiser (for example, where an Organiser adds you as Event Staff or provides attendee information collected outside the standard checkout flow).

5.How we use information

We use the information we collect to:

• Operate, provide and maintain the Platform, including account creation and login, event discovery, ticket purchase, ticket issuance, and event check-in;
• Process orders and payments, and facilitate payouts to Organisers in accordance with the applicable payout arrangement;
• Verify ticket validity at check-in, including detecting duplicate, cancelled, refunded or invalid tickets;
• Communicate with you, including sending order confirmations, tickets, and service-related notices, and responding to support requests;
• Verify the identity of Organisers and, where applicable, Attendees, for payment, fraud prevention, and legal/compliance purposes;
• Enable Organisers to manage their events, attendees, ticket sales and Event Staff;
• Enable Event Staff to check attendees in to the specific event(s) they are assigned to;
• Maintain the security and integrity of the Platform, including fraud prevention and abuse detection;
• Analyse and improve the Platform, including through aggregated or de-identified analytics;
• Send marketing communications about events or the Platform, where you have opted in or as otherwise permitted by applicable law (you may opt out at any time); and
• Comply with our legal, tax, regulatory and law-enforcement obligations, and to establish, exercise or defend legal claims.

6.Legal bases for processing

Where applicable data protection law requires a legal basis for processing (such as the Nigeria Data Protection Act 2023) we rely on one or more of the following: performance of a contract with you (for example, to process your ticket order or manage your Organiser account); our legitimate interests (for example, platform security, fraud prevention, and service improvement), provided those interests are not overridden by your rights; compliance with a legal obligation (for example, tax, accounting, or law-enforcement requirements); and your consent (for example, for certain marketing communications or non-essential cookies), which you may withdraw at any time.

7.How we share information

We do not sell your personal information. We may share information with the following categories of recipients, for the purposes described below:

• Payment service providers — to process payments, payouts, refunds and to help detect and prevent fraud.
• Cloud and database hosting providers — to store and process information necessary to operate the Platform.
• Email, SMS and communication providers — to deliver order confirmations, tickets, notices and, where applicable, marketing communications.
• Analytics and technical service providers — to help us understand Platform usage and maintain performance and security.
• Organisers — attendee and order information reasonably necessary for an Organiser to manage their event (such as attendee name, contact details, ticket type and check-in status) is shared with the relevant Organiser.
• Event Staff authorised by an Organiser — limited ticket and check-in information necessary to verify and admit attendees to the specific event(s) they are assigned to.
• Service providers supporting EventTix — such as customer support, identity verification, and security vendors, acting on our behalf and under contractual confidentiality and data protection obligations.
• Government, regulatory or law-enforcement authorities — where we are legally required to do so, or where necessary to protect the rights, property or safety of EventTix, our users, or the public.
• Successors — in connection with a merger, acquisition, financing, reorganisation or sale of assets, subject to appropriate safeguards.

We require third parties with whom we share personal information to protect it consistently with this Privacy Policy and applicable law.

8.Cookies and similar technologies

We and our service providers use cookies and similar technologies (such as pixels and local storage) to operate the Platform, remember your preferences, understand how the Platform is used, and, where applicable, support advertising. These may collect information such as device/browser information and usage information described in section 3, even if you have not created an account. Depending on your location, we will request your consent for non-essential cookies and provide a mechanism to manage your preferences, such as a cookie settings tool on the Platform. You can also control cookies through your browser settings; disabling certain cookies may affect Platform functionality.

9.Data retention

We retain personal information for as long as necessary to provide the Platform and fulfil the purposes described in this Privacy Policy, including to comply with legal, tax, accounting and regulatory requirements, resolve disputes, and enforce our agreements. Retention periods vary by category of information: for example, order and transaction records are typically retained for the period required by applicable tax and accounting law; account information is generally retained for as long as an account remains active and for a reasonable period thereafter; and event check-in logs are retained for as long as reasonably necessary for the related event and any post-event reconciliation or dispute period. Where information is no longer needed, we will securely delete, de-identify or anonymise it.

10.Data security

We implement technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or alteration, including access controls based on role and business need, encryption of data in transit, and restricting Event Staff access to only the event(s) to which they are assigned. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and/or the relevant authorities where required by applicable law.

11.Our role: controller and processor

EventTix does not necessarily act in the same capacity for every piece of personal information we process. In general:

• For information relating to your own EventTix account (for example, an Attendee’s account and order history, or an Organiser’s own account and verification information), EventTix determines the purposes and means of processing and acts as the data controller.
• For certain information collected by an Organiser through their event registration or ticketing process (for example, additional attendee information an Organiser chooses to collect for their own event), the Organiser may determine the purposes of that processing, and EventTix may act as a data processor (or service provider) acting on the Organiser’s instructions, with the Organiser acting as the data controller for that information.

Where EventTix acts as a processor on an Organiser’s behalf, the Organiser is responsible for ensuring it has a lawful basis to collect and share that information with EventTix and for complying with its own obligations as a controller, including providing appropriate notices to their attendees. If you have questions about how a specific Organiser processes your information, you may need to contact that Organiser directly, in addition to EventTix.

12.International data transfers

We and our service providers may process personal information in countries other than the one in which you are located. Where we transfer personal information across borders, we take steps intended to ensure appropriate safeguards are in place, consistent with applicable data protection law (for example, standard contractual clauses or equivalent mechanisms, where required).

13.Your rights and choices

Depending on your location and applicable law, you may have rights to: access the personal information we hold about you; correct inaccurate or incomplete information; request deletion of your information; object to or restrict certain processing; request a portable copy of your information; and withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal. You may also have the right to lodge a complaint with your local data protection authority.

You can exercise many of these rights directly through your account settings, or by contacting us using the details in section 17. We may need to verify your identity before actioning a request, and certain requests may be subject to exceptions permitted by applicable law (for example, where retention is required for legal or accounting purposes).

14.Children's privacy

The Platform is not directed to children under the age of 18, and we do not knowingly collect personal information from children below that age without appropriate parental or guardian consent. If you believe a child has provided us with personal information in violation of this Policy, please contact us so we can take appropriate action.

15.Third-party links and services

The Platform may contain links to, or integrate with, third-party websites and services, including payment providers and Organiser-operated pages. This Privacy Policy does not apply to those third-party services, and we encourage you to review their privacy policies before providing information to them.

16.Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. Where changes are material, we will provide reasonable notice, such as by posting a notice on the Platform or notifying you by email, before the changes take effect. The “in effect from” date at the top of this Policy indicates when it was last updated.

17.Contact us

If you have questions, concerns or requests regarding this Privacy Policy or our handling of your personal information, including any of the rights in section 13, please contact us at:

• Entity: EventTix Technology Limited
• Email: eventtix26@gmail.com, +234 811 488 1439
• Postal address: 1, Alamanda Crescent Lily Lane Badore, Ajah, Lagos
• Data protection queries: the same eventtix26@gmail.com address above, until a dedicated data-protection contact is set up.