Privacy Policy

1. Introduction

TicketWindow respects your privacy and is committed to protecting your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) and, where applicable, the EU General Data Protection Regulation (GDPR). This Privacy Policy explains what data we collect, why, and how we safeguard it.

2. Information We Collect

• Account Information: Name, email, phone number, password, and role (Buyer, Seller, Admin).
• Transaction Data: Ticket purchases, payment details (processed via PayFast), and invoices.
• Event Data: Event details provided by sellers.
• Usage Data: Log files, device/browser type, and interactions with our platform.
• Communications: Support requests, emails, and feedback messages.

3. How We Use Information

• To provide and improve our services, including ticket sales and event management.
• To process payments securely and issue payouts to sellers.
• To verify identity, prevent fraud, and ensure compliance with laws.
• To send transactional emails, event updates, and customer support responses.
• To analyse usage trends and improve platform performance.

4. Sharing & Disclosure

We do not sell your personal information. We may share your data with:

• Payment processors (e.g., PayFast) for secure transactions.
• Event organisers for ticket validation and event management.
• Legal or regulatory authorities when required by law.
• Service providers assisting with hosting, analytics, or customer support.

5. Data Security

We implement appropriate technical and organisational measures (encryption, access controls, secure hosting) to protect your personal information from unauthorised access, loss, or misuse. However, no system is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Transaction data may be kept longer where required by tax or financial regulations.

7. Your Rights (POPIA & GDPR)

You have the right to:

• Request access to your personal information we hold.
• Request correction or deletion of inaccurate or outdated information.
• Withdraw consent for certain processing activities.
• Object to direct marketing communications.
• Lodge a complaint with the Information Regulator (South Africa).

8. Cookies & Tracking

We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and deliver relevant content. You can manage cookie preferences in your browser, but disabling them may limit functionality.

9. Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us to delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with a new effective date. Continued use of our services after updates indicates acceptance of the revised policy.