TICK'IT GROUP

PRIVACY POLICY

Last Updated: February 2025

1. About Us

1.1 TICK'IT comprises various group companies, including TICK IT HOLDINGS LTD (UAE), TICK IT SAL (440 Dimitri Hayek Street, Sin El Fil, Lebanon), TICK IT TECHNOLOGIES LTD (UK), and TICK IT EXHIBITIONS SPORTS LLC (UAE) (together, the "TICK'IT Group"). This Privacy Policy is issued on behalf of the TICK'IT Group, so when we mention "TICK'IT", "we", "us" or "our", we are referring to the relevant company in the TICK'IT Group responsible for processing your personal data.

1.2 The data controller responsible for your personal data depends on your location and how you interact with our Services:

  • Lebanon: TICK IT SAL is the data controller.
  • United Kingdom and EEA: TICK IT TECHNOLOGIES LTD is the data controller.
  • United Arab Emirates and GCC: TICK IT HOLDINGS LTD or TICK IT EXHIBITIONS SPORTS LLC is the data controller, as applicable.
  • All other locations: TICK IT HOLDINGS LTD is the data controller.

1.3 This Privacy Policy explains what personal information we collect, why and how we use it, who we share it with, your rights over your personal information, and how to contact us. This policy applies to information collected through our website at www.tickit.co, our mobile application (the "App"), and any other services, features, content, or platforms operated by the TICK'IT Group (collectively, the "Services"). This policy also applies to information collected through third-party apps, sites, and platforms through which our Services are provided.

1.4 TICK'IT has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection regulations and ensuring the ongoing conformity of TICK'IT's personal data processing activities. You may contact our DPO with any questions regarding the protection of your personal data or the exercise of your rights at: dpo@tickit.co.

1.5 TICK'IT does not sell, rent, or trade your personal data to third parties. Neither TICK'IT nor any of its data processors engage in the sale of personal data of users to third parties.

2. Personal Information We Collect

2.1 Information You Provide
We collect personal information that you voluntarily provide to us when you create or modify your account, purchase tickets, use our Services, or interact with us. This may include:

  • Your name, email address, phone number, date of birth, and postal/billing address;
  • Usernames and passwords, and security questions and answers;
  • Payment information (such as credit/debit card details), which is processed by our third-party payment processors and is not stored by TICK'IT;
  • Favourite teams, shows, artists, and event preferences;
  • Responses to satisfaction surveys and feedback forms, if you choose to participate;
  • Your browsing behaviour, event preferences, and interaction history on the Services, which may be used to create a user profile for the purpose of suggesting relevant content;
  • Purchase and viewing history;
  • Communications with our customer support team;
  • Disability or accessibility requirements, collected solely for the purpose of providing appropriate access and/or special seating at event venues.

Credit/debit card details and sensitive personally identifiable information will not be stored, sold, shared, or rented to any third parties.

2.2 Automatically Collected Data
When you access or use our Services, we automatically collect:

  • Log Information: Browser type, access times, pages viewed, IP address, referring URL, and the page you visited before navigating to our Services.
  • Device Information: Hardware model, operating system and version, unique device identifiers, and mobile network information.
  • Location Information: Approximate location derived from your IP address or, with your consent, more precise location data from your device.

2.3 Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to collect information about your online activities. We use the following types of cookies:

  • Essential Cookies: Required for the operation of our Services (e.g., login functionality, shopping cart).
  • Analytical/Performance Cookies: Help us understand how visitors interact with our Services by collecting anonymous usage data (e.g., Google Analytics).
  • Functionality Cookies: Remember your preferences and settings to improve your experience.
  • Targeting/Advertising Cookies: Record your browsing habits to deliver relevant advertising. These cookies do not directly store personal information.

You can manage cookies through your browser settings. Visit www.allaboutcookies.org for more information. To opt out of Google Analytics tracking, visit tools.google.com/dlpage/gaoptout. Please note that disabling cookies may affect the functionality of our Services.

2.4 Information from Other Sources
We may obtain personal information from third-party sources, including identity verification services, fraud detection providers, social media platforms (where you choose to connect your account), credit bureaus, and publicly available sources. This information may be combined with personal information we collect directly.

3. Legal Basis for Processing

Where applicable (including under the UK GDPR, EU GDPR, and UAE PDPL), we process your personal information based on the following legal grounds:

  • Performance of a Contract: To fulfil our obligations under your ticket purchase, account registration, or other agreement with us.
  • Legitimate Interests: To operate, improve, and secure our Services; to detect and prevent fraud; to communicate with you about your account and purchases; and to share data within the TICK'IT Group for internal administrative purposes.
  • Consent: Where you have given specific consent, for example for marketing communications, targeting cookies, or the processing of special category data (e.g., disability/accessibility information). You may withdraw consent at any time.
  • Legal Obligation: To comply with applicable laws, regulations, court orders, or government requests.
  • Contract Monitoring: To monitor and store proof of acceptance of our Terms of Use, Purchase Terms, Privacy Policy, or any other agreement between TICK'IT and the user.
  • User Profiling: To identify user profiles based on statistical methods in order to suggest more relevant events and content to you. This processing is based on your consent, which you may withdraw at any time.
  • Satisfaction Surveys: To identify improvements to the Services and the platform, including through usage statistics and satisfaction surveys. This processing is based on our legitimate interest in improving the Services.
  • Abandoned Cart Reminders: To remind you about items left in your shopping cart and inform you about content available on the Services. This processing is based on your consent.

4. How We Use Your Information

We use the personal information we collect to:

  • Provide, operate, maintain, and improve our Services;
  • Process and fulfil ticket purchases and other transactions;
  • Create and manage your account;
  • Communicate with you, including customer service enquiries, transaction confirmations, and (with your consent) promotional offers;
  • Personalise your experience and deliver content, advertising, and recommendations relevant to your interests;
  • Monitor and analyse trends, usage, and activities in connection with our Services;
  • Detect, investigate, and prevent fraud, illegal activities, and security threats;
  • Comply with legal obligations and enforce our Terms of Use and other agreements;
  • Protect the rights, property, and safety of the TICK'IT Group, our users, and the public.

5. How We Share Your Information

5.1 Within the TICK'IT Group
We may share your personal information between TICK'IT Group companies for the purposes described in this Privacy Policy, based on our legitimate interest in operating a unified group business.

5.2 Service Providers
We engage third-party companies to perform functions on our behalf, including payment processing, email delivery, hosting, customer service, marketing, and analytics. These providers have access to personal information only as needed to perform their functions and are contractually obligated to protect it.

5.3 Event Partners and Organisers
When you purchase tickets, we may share your personal information (excluding payment details) with the relevant event organiser, promoter, venue operator, or other third party involved in the event. These third parties may use your information for event management, analytics, and to offer you related products or services.

5.4 Payment Processors
We use third-party payment processors including Stripe, Areeba, and Bob Finance. Your use of these payment services is subject to their respective privacy policies and terms.

5.5 Legal and Compliance
We may disclose your personal information where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of the TICK'IT Group, our users, or others.

5.6 Business Transfers
In the event of a merger, acquisition, reorganisation, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your information.

5.7 Aggregated and Anonymised Data
We may share information in an aggregated and anonymised form that cannot reasonably be used to identify you.

5.8 TICK'IT as Data Processor
In certain circumstances, TICK'IT also acts as a data processor on behalf of Event Partners. When Event Partners use our platform to sell tickets and manage events, they may instruct TICK'IT to process the following personal data on their behalf:

  • Ticket purchase information (including telephone number, date of birth, and any additional information requested by the Event Partner);
  • Buyer and attendee contact information (name, email address, telephone number, and any additional information on buyers or their guests);
  • Data exchanged between users and Event Partners through the platform;
  • Data collected on the platform by Event Partners on users who consent to the use of trackers.

Since TICK'IT has no control over the means and purposes of data processing carried out by Event Partners, it acts as a data processor within the meaning of applicable data protection regulations. The manner in which the Event Partner has entrusted TICK'IT with the processing of personal data is subject to contractual provisions in accordance with the applicable regulations.

As a result, users contacting TICK'IT regarding data processed on behalf of an Event Partner will be redirected to the relevant Event Partner as the data controller responsible for their personal data processing.

6. International Data Transfers

The TICK'IT Group operates across multiple jurisdictions. Personal data processed by TICK'IT is primarily hosted on servers located in the European Union. Your personal information may be transferred to and processed in countries other than the country in which you reside, including Lebanon, the United Arab Emirates, and the United Kingdom. These countries may have data protection laws that are different from the laws of your country.

Where we transfer personal information outside of the UK or EEA, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office, adequacy decisions, or other legally recognised transfer mechanisms. Where we transfer personal data outside of the UAE, we comply with the requirements of the UAE Personal Data Protection Law.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods vary by data type:

  • Account data: Retained for the duration of your account. In the event of inactivity, data is deleted 2 years after the last interaction with the platform, and 3 years after the last purchase, unless longer retention is required by law.
  • Transaction data: Retained for the time necessary for processing, then archived for up to 10 years in accordance with applicable financial, tax, and accounting regulations.
  • Marketing data: Retained until you opt out or withdraw consent, or for 3 years from the last contact with you, whichever is earlier.
  • Technical logs: Retained for up to 13 months for security and performance purposes, or until consent is withdrawn for analytics cookies.
  • Fraud prevention data: Technical data necessary for detecting and managing potential fraud (connection data, IP addresses, device identifiers) is retained for the time required to resolve the case, then archived for up to 5 years.
  • User profile and preferences: Data related to your profile, followed events, and preferences is retained for the same duration as your account data, i.e., until account deletion, or for a maximum of 2 years of inactivity and 3 years after the last purchase.

When we no longer have a legitimate reason or legal requirement to process your personal information, we will securely delete it or anonymise it.

8. Your Rights

Depending on your location and applicable law, you may have some or all of the following rights in relation to your personal information:

8.1 General Rights (All Users)

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal information.
  • Right to Erasure: Request deletion of your personal information, subject to legal obligations.
  • Right to Restrict Processing: Request that we limit how we use your personal information.
  • Right to Data Portability: Receive your personal information in a structured, machine-readable format.
  • Right to Object: Object to the processing of your personal information based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

8.2 Additional Rights for UK/EEA Users
If you are located in the UK or EEA, you have the right to lodge a complaint with your local supervisory authority (e.g., the UK Information Commissioner's Office at ico.org.uk).

8.3 Additional Rights for UAE Users
If you are located in the UAE, you have rights under the UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021), including the right to request the transfer of your personal data and to object to automated decision-making.

To exercise any of your rights, please contact us at privacy@tickit.co. We will respond to your request within the timeframes required by applicable law (typically within 30 days).

9. Your Choices

  • Account Information: You may update or correct your account information at any time by signing in and visiting your "My Account" page.
  • Marketing Communications: You may opt out of promotional emails by clicking the "unsubscribe" link in any email or by contacting us. Even if you opt out, we may still send you service-related communications.
  • Push Notifications: You can manage push notification preferences through your device settings.
  • Location Data: You can disable location sharing through your device settings.

10. Advertising and Analytics

We may allow third parties to provide analytics services and serve advertisements on our behalf. These entities may use cookies, device identifiers, and other technologies to collect information about your use of our Services. For more information about interest-based advertising or to opt out, visit www.aboutads.info/choices or use the "Limit Ad Tracking" (iOS) or "Opt Out of Interest-Based Ads" (Android) feature on your device.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure hosting, access controls, and regular security assessments. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our Services are not directed to children under the age of 13 (or such higher age as required by applicable law in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@tickit.co.

13. Links to Third-Party Services

Our Services may contain links to third-party websites, applications, and services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email, through the Services, or by other appropriate means at least 15 days before any material change takes effect. Your continued use of the Services after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a complaint about how we handle your personal information, please contact us:

For UK/EEA data protection enquiries, you may also contact TICK IT TECHNOLOGIES LTD at its registered address in the United Kingdom.

Back to Top