Privacy Policy

1. Who we are

Tickean Holdings LLC is the controller of the personal data described in this policy, which explains how we use it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us about privacy at hola@tickean.com.

• Name: Tickean Holdings LLC
• Legal form: Limited Liability Company (LLC)
• EIN (US Employer Identification Number): 37-2239745
• E-mail: hola@tickean.com
• Website hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA

2. Scope

This policy covers www.tickean.co.uk, the checkout, the buyer area at mi.tickean.com, the organiser dashboard at app.tickean.com and the messages we send by e-mail and WhatsApp. Cookies and similar technologies are explained in our Cookie Policy.

3. Data we collect about buyers

• Identity and contact data: name, e-mail address, mobile or WhatsApp number.
• Order and ticket data: event, ticket types, seats, prices, booking fee, order and ticket numbers, payment status (we do not store full card numbers).
• Attendee names, where the organiser requires them.
• Check-in data: when a ticket was scanned at the venue.
• Device and log data: IP address, browser type, device information and the pages you visit, for security and to run the service.
• Support communications: messages you send us and our replies.

4. Data we collect about organisers

• Account and contact data of the people who use the organiser dashboard.
• Company data, such as the business name, Companies House number and address.
• Tax identification number and bank details for payouts.
• Identity and verification data required by our payment providers.
• Event data, such as titles, descriptions, images, dates, venues and ticket settings.

5. Where the data comes from

We collect most data directly from you when you buy tickets, create an account or contact us. Some data is generated when you use the service (for example log and check-in data). Our payment provider Stripe gives us information about the status of payments and fraud checks. If someone else buys a ticket for you and enters your name as an attendee, we receive your name from them.

6. Why we use your data and our lawful bases

Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for more information about this balancing and you have the right to object (see section 13).

7. Marketing messages

We only send electronic marketing in line with regulation 22 of the Privacy and Electronic Communications Regulations 2003 (PECR). This means we ask for your consent, unless you are an existing customer and the message is about similar events or services. In that case (the so-called soft opt-in) we give you a simple way to opt out when we collect your details and in every message. You can opt out at any time by using the link in the message or by contacting us. Service messages about your order, such as ticket delivery or event changes, are not marketing.

8. Sharing with organisers

When you buy tickets, we share your name, contact details, order details, attendee names and check-in data with the organiser of that event. The organiser uses this data to hold the event, manage entry and contact you about the event. The organiser is an independent controller responsible for its own use of your data under its own privacy notice. The organiser's name is shown on the event page.

9. Service providers

We use the following service providers, who process data on our behalf under contracts that require them to protect it.

10. International transfers

We are based in the United States, and most of our service providers process data in the United States or other countries outside the UK. Where UK transfer rules apply, we transfer data to a US recipient under the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge) where that recipient is certified to it, and otherwise under the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses issued by the Information Commissioner. You can ask us for more information about the safeguards we use.

11. How long we keep data

• Order, payment and payout records: for as long as tax and accounting law requires, generally at least 6 years from the end of the financial year to which they relate.
• Account data: while your account is active, and then for as long as needed to deal with claims.
• Support communications: for as long as needed to deal with your request and any related claim.
• Log data: for a limited period needed for security and troubleshooting.
• Consent-based analytics data: as described in our Cookie Policy and the providers' notices, or until you withdraw consent.

12. Security

We use technical and organisational measures to protect your data, including encrypted connections, access controls and payment processing by a certified payment provider. No system is completely secure, so please keep your verification codes and tickets private.

13. Your rights

Under the UK GDPR you have the following rights. To use them, e-mail hola@tickean.com. We normally reply within one month and may ask you to confirm your identity.

• Access: to get a copy of your data.
• Rectification: to correct inaccurate data.
• Erasure: to have your data deleted in certain cases.
• Restriction: to limit how we use your data in certain cases.
• Data portability: to receive data you gave us in a machine-readable format.
• Objection: to object to processing based on legitimate interests, and to object to direct marketing at any time.
• Withdrawing consent: at any time, without affecting processing carried out before you withdrew it.

14. Complaints

If you are unhappy with how we use your data, you can complain to us at hola@tickean.com. We will acknowledge your complaint within 30 days and tell you the outcome, as required by section 164A of the Data Protection Act 2018.

You can also complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

15. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last updated, and we will highlight significant changes on the site.