Privacy Policy

1. Who we are

Ticketmaker is the data controller for personal data collected through ticktmakerpass.com (the “Platform”). This policy applies to this website.

You can contact us about anything in this policy — including exercising any of your rights — at contact@ticktmakerpass.com. Please include your order number when your question relates to a purchase.

2. The data we collect

Order data: the buyer's name, email address, phone number and billing address details (street, city, postcode), plus the names of the individual ticket holders — needed to process your order, admit the right people to the event and provide access to your ticket details.

Payment data: card details are collected and processed entirely by Stripe, our payment processor; we never see or store your full card number. We store the payment reference, amount, currency and payment status.

Account data: your email address, sign-in history and session records, used to provide secure access to your orders.

Reservation and fraud-prevention data: your IP address, browser user agent, reservation timestamps and purchase-funnel steps, used to secure inventory and detect automated buying.

Usage data: pages visited and purchase steps may be recorded to monitor service performance and prevent fraud. Google Analytics is not currently enabled.

Advertising measurement data: when permitted by your cookie choice, Meta receives browser purchase-funnel events and confirmed purchases through its Conversions API. These may include IP address, browser user agent, Meta click/browser identifiers and hashed buyer details to match purchases to advertising.

Advertising attribution data: your name, email address, phone number, country, IP address, the products and amounts purchased and the order reference, together with the advertising parameters of your visit — reported to Utmify, our attribution provider, to measure which advertising produced a sale.

Support data: the content of emails you send us, and our replies.

3. How we use it and our lawful bases

Processing your order and providing access to your ticket details — performance of our contract with you.

Transactional emails: order confirmations, passwordless access links, event-change notices and refund communications — performance of our contract.

Transactional emails are sent for paid orders and customer support. Marketing email communications, if offered, are subject to the applicable permissions.

Fraud prevention, payment security and enforcement of ticket limits — our legitimate interest in protecting buyers and organisers, and compliance with law.

Advertising measurement through the Meta Pixel and Conversions API respects the cookie choice recorded for your order. Optional browser tracking is enabled only after acceptance where our consent notice applies. Operational order processing and security use the contractual and legitimate-interest bases described above.

Keeping tax and accounting records — legal obligation.

Responding to your support requests — performance of our contract or our legitimate interest, depending on the request.

4. Who we share it with

We share data with providers needed to run the service: Stripe for payment processing, our hosting and transactional email providers, Meta for permitted advertising measurement, and Utmify for order attribution. Google Analytics is not currently enabled. Event organisers may receive the ticket-holder details required for admission and event safety. We never sell personal data.

We may also disclose data where the law requires it (for example to courts, regulators or law enforcement) or in connection with a sale or restructuring of the business, subject to this policy's protections. We never sell personal data.

5. International transfers

Some of our providers (including Stripe, Meta and Google) process data in the United States and other countries outside the UK. Where your data is transferred internationally, we rely on lawful transfer mechanisms — the UK-US Data Bridge, the International Data Transfer Agreement or standard contractual clauses — so your data remains protected to UK standards.

6. How long we keep it

Order and transaction records: for the period required by UK tax and accounting law (normally six years from the end of the financial year).

Sign-in sessions and access links are subject to their configured security limits. We retain account records while needed to provide account access and meet legal obligations.

Operational and security logs are retained for troubleshooting, fraud prevention and compliance, and are reviewed when no longer necessary.

Advertising providers retain data according to their applicable policies. Google Analytics is not currently enabled.

Support correspondence is retained as needed to resolve your enquiry and maintain a record of the resolution.

7. How we protect it

We use encryption in transit (TLS), secure account access, hashing of personal identifiers in server-side advertising reports, and access controls that limit personal data to the systems and people that need it. No method of transmission or storage is completely secure, but we maintain measures appropriate to the sensitivity of the data we handle and review them regularly.

8. Your rights

You can request access to, correction of, deletion of, or a portable copy of your personal data; ask us to restrict processing; object to processing based on legitimate interests — including advertising measurement; and withdraw any consent you have given, at any time and free of charge, by emailing contact@ticktmakerpass.com. We respond within one month.

Objecting to advertising measurement or analytics does not affect purchases you have already made or the transactional emails your orders require. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) — we would appreciate the chance to resolve your concern first.

9. Automated decision-making

We use automated fraud screening on purchases (for example, velocity and pattern checks). Flagged orders may be cancelled and refunded, but we do not make decisions with legal or similarly significant effect about you solely by automated means — a human reviews contested decisions on request to contact@ticktmakerpass.com.

10. Children

The Platform is not directed at children, and purchases must be made by an adult. Age restrictions for individual events are set by the organiser and stated on the event page. If you believe a child has provided us personal data without a parent or guardian's involvement, contact us and we will delete it.

11. Cookies and similar technologies

Our use of cookies, the Meta Pixel, local storage and server-side event reporting — including precisely what is collected and every way to control it — is described in the Cookie Policy, which forms part of this policy.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top always shows the current version; for material changes we will also give notice on the Platform or by email to affected customers before the change takes effect.