Privacy Policy
Controller: eTickets.im Limited, Cronk Breck, Grenaby, Isle of Man, IM9 3BD, company number 138830C.
Contact: governance@etickets.im. Our privacy contact is Tim Cass.
What we do
eTickets provides an online ticketing platform for event promoters. Buyers can browse events, reserve or buy tickets, retrieve digital tickets, save supported tickets to Google Wallet, and receive order emails. Promoters can manage events, guest lists, sales, refunds, PayPal setup, and portal users.
Personal data we collect
| Area | Data collected | Why we use it |
|---|---|---|
| Browsing event pages | Event and promoter pages requested, technical logs such as IP address, user agent, request time, and errors. | Deliver the site, protect the platform, troubleshoot issues, and understand operational health. |
| Checkout | Buyer first name, surname, email address, phone number, selected tickets, order amount, booking fee, payment status, retrieval token, and trace/idempotency references. | Create the order, process payment or free reservation, issue tickets, send confirmation emails, and support refunds or disputes. |
| Guest-list events | Ticket-holder names and, where required by a ticket type, membership numbers. | Issue named tickets, support admission checks, and provide promoter guest lists. |
| Ticket retrieval | Ticket retrieval token, order details, ticket QR/scan tokens, scan status, void/refund status, and resend-request email address. | Show and resend tickets, generate PDFs, protect access, and support door scanning. |
| Payments and refunds | PayPal order and capture IDs, payer ID/email returned by PayPal, payment/refund status, gross amount, currency, PayPal fee data, platform fee data, and refund reason entered by a promoter. | Confirm payment, reconcile accounts, issue refunds, handle disputes, and keep financial records. |
| Promoter enquiries | Organisation name, contact name, email, phone, website, social link, event types, capacity, typical price, event frequency, PayPal email if provided, and enquiry notes. | Respond to promoter enquiries and decide whether to set up a promoter account. |
| Portal accounts | Portal user name, email, role, organisation, login/session records, invite/reset tokens, permissions, and activity logs. | Authenticate users, apply permissions, audit portal activity, and secure accounts. |
| Support and complaints | Information you send to support@etickets.im, complaints@etickets.im, abuse@etickets.im, or other eTickets contact routes. | Respond to support requests, investigate complaints, prevent abuse, and meet legal obligations. |
Payment and wallet providers
Paid checkout uses PayPal. Depending on the event and promoter setup, payment may be processed with eTickets as platform merchant of record or with the promoter as merchant of record through PayPal partner functionality. PayPal may offer PayPal account, card, Google Pay, or Apple Pay payment options. eTickets does not receive or store full card numbers. Card details are handled through PayPal-hosted or PayPal SDK payment flows.
Google Wallet passes are generated only when a buyer chooses to save eligible tickets. The pass contains event, venue, ticket, customer name, and QR-code information needed to display and validate the ticket.
Promoter and eTickets data roles
For platform operation, fraud prevention, payment records, support, and legal compliance, eTickets acts as a controller. For customer and guest-list data collected so a promoter can run an event, eTickets may act as a processor for the promoter, who decides how that event data is used. Promoters must use exported or portal-accessed customer and guest data lawfully and only for purposes connected with the event unless they have a separate lawful basis.
Legal bases
- Contract: to provide ticketing, payment access, digital tickets, promoter accounts, and support.
- Legitimate interests: platform security, fraud prevention, operational logging, dispute handling, product support, and internal administration.
- Legal obligation: accounting, tax, dispute, chargeback, regulatory, and record-keeping obligations.
- Consent: promoter enquiry consent, optional future marketing or event-notification services, and any non-essential cookies if introduced.
Sharing data
We share data where needed with event promoters, PayPal, Google Wallet services, Cloudflare Turnstile, SMTP email-delivery providers used to send platform emails, IT hosting and support providers, professional advisers, law enforcement, regulators, or courts where required. PayPal and Google process personal data under their own terms and privacy notices for their services.
Marketing
eTickets controller-role customer data is used for functional service messages only. eTickets does not currently use buyer data for advertising or remarketing. A future opt-in "notify me" service for new events is under consideration and should only send marketing-style notifications to people who opt in.
Retention
We keep personal data only for as long as it is needed for the purpose it was collected for, and then delete or anonymise it. In practice:
- Order, ticket, payment, refund, and financial records are kept while needed for ticketing and for as long as required to meet accounting, tax, audit, dispute, and chargeback obligations.
- Guest-list and scan records are kept for the period needed to run and reconcile the relevant event.
- Portal accounts and audit logs are kept while the account is active and for a reasonable period afterwards for security and accountability; portal sessions expire automatically according to platform configuration.
- Support, complaint, and abuse correspondence is kept for as long as needed to handle the matter and any related dispute.
We can provide more detail about specific retention periods on request via governance@etickets.im. If special-category or sensitive event information is introduced later, such as dietary, access, or health-related questions, it will be separately assessed and, where possible, deleted after the event once no longer required.
Your rights
Subject to applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. Contact governance@etickets.im. Some event-specific data may need to be handled with the relevant promoter because the promoter may be the controller for that event data.
International transfers
Some of our service providers, including PayPal, Google, and Cloudflare, process personal data outside the Isle of Man. Where data is transferred outside the Island, we rely on the provider's own safeguards and applicable data-protection protections to keep it secure.
Complaints
If you have a concern about how we handle your personal data, please contact us first at complaints@etickets.im so we can try to resolve it. eTickets.im Limited is registered with the Isle of Man Information Commissioner, and you also have the right to complain to the Information Commissioner (www.inforights.im).
Changes to this policy
We may update this policy from time to time. The version number and "last updated" date at the top of the page show the current version. Material changes will be reflected here before they take effect.