PRIVACY POLICY

Cookies We Use

• Essential Cookies: Required for site functionality, such as remembering your consent choice.
• Analytics Cookies: Used to analyze and improve our services, only set if you accept cookies.

Data We Collect

• With Cookie Consent: We may collect session data, including order details, location (city and country), device type, browser, and operating system, linked to your order for analytics purposes.
• Without Cookie Consent: We collect anonymized data, such as whether an order was made or paid, along with generalized timestamps (e.g., date only), without linking to your identity or specific order details.

Updates to This Policy

We may update this policy from time to time. Changes will be posted here.

Information We Collect

Account Information

When authorised users access and use the application, we may collect and process the following information:

• Name
• Email address
• User account identifier
• Authentication information required for secure login and access control

Authentication credentials are processed securely and are not stored in plain text.

Ticket and Event Data

The application may access and process:

• Ticket information
• Event information
• Ticket check-in status
• Ticket validation records

This information is processed solely for the purpose of providing ticket validation, attendee management, and event operation functionality.

Camera Access

The application requires access to the device camera exclusively for scanning QR codes and validating tickets.

The camera is used only during the ticket scanning process and is not used to record, store, or transmit photos or videos unrelated to ticket validation.

Internet Access

The application requires internet connectivity to securely communicate with backend systems and APIs for authentication, ticket validation, synchronisation, and event management functionality.

How We Use Information

We process information for the following purposes:

• To authenticate authorised users
• To validate event tickets
• To manage attendee check-ins and event operations
• To display ticket and event information
• To improve application functionality, performance, and reliability
• To prevent unauthorised access, misuse, fraud, or security incidents
• To comply with applicable legal and regulatory obligations

Processing of personal data is carried out in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.

Legal Basis for Processing

Where required under applicable law, including the GDPR, personal data is processed on the basis of:

• Performance of services requested by users or event organisers
• Compliance with legal obligations
• Legitimate business interests related to the operation, administration, security, and improvement of the services

Data Sharing

We do not sell, rent, or trade personal information.

Personal information may be processed by trusted infrastructure, hosting, analytics, authentication, or technical service providers strictly necessary for application functionality, security, maintenance, and performance monitoring.

Information may be shared only:

• With our event management platform, backend infrastructure, and service providers necessary for application functionality
• When required by applicable law, regulation, or legal process
• To protect the security, integrity, rights, or safety of our services, users, or organisation

All service providers processing personal data on our behalf are required to implement appropriate technical and organisational security measures and confidentiality obligations.

Data Security

We implement reasonable and appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction.

However, no method of electronic transmission or storage can be guaranteed to be completely secure, and therefore we cannot guarantee absolute security.

Data Retention

Personal information is retained only for as long as necessary to:

• Provide and maintain the services
• Fulfil the purposes described in this Privacy Policy
• Comply with legal, regulatory, or contractual obligations
• Resolve disputes and enforce agreements

When information is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in accordance with applicable laws and internal retention policies.

Third-Party Services

The application may communicate with secure backend APIs, hosting providers, analytics services, authentication systems, and infrastructure services necessary for ticket validation, authentication, security, maintenance, and event management functionality.

These services may process information strictly as required to support the operation of the application.

Children's Privacy

This application is intended exclusively for authorised event staff, organisers, and business users. It is not directed toward children under the age of 13.

We do not knowingly collect personal information from children.