For attendees
- Name and email address to deliver tickets and updates.
- Payment information processed by Stripe (we do not store card details).
- Order history and ticket records.
The short version.
- We collect only the data needed to run ticketing and support your account.
- We do not sell your data.
- Payments and payouts are handled by Stripe.
- You can request access, correction, or deletion of your data.
What we collect
Data categories.
For organisers
- Account details (name, email, password).
- Organisation profile information.
- Payout details handled via Stripe Connect.
- Event, sales, and attendee data.
Automatically collected
- Device and browser information.
- Usage data such as pages viewed and actions taken.
- IP address and approximate location for security and analytics.
Legal basis for processing.
Contract performance
To process tickets, deliver services, manage accounts, and handle payouts.
Legitimate interests
To improve reliability, prevent abuse, and provide support.
Legal obligation
To comply with tax, accounting, and regulatory requirements.
Consent
For optional marketing communications and preferences.
How we use information.
- Process transactions and issue tickets.
- Send confirmations, reminders, and critical service communications.
- Provide customer support.
- Pay organisers after events.
- Detect fraud, prevent abuse, and protect platform security.
- Improve product performance and reliability.
Trusted processors only.
We do not sell personal data. We share data only with essential service providers:
Stripe: Payments and payouts Privacy policy
Supabase: Database and authentication Privacy policy
PostHog: Product analytics Privacy policy
Sentry: Error monitoring Privacy policy
When attendees buy tickets, relevant order details are shared with the organiser to run the event.
Retention and security.
- Account data: until account deletion, with limited backup retention.
- Transaction records: up to 7 years for tax and accounting obligations.
- Support records: retained for operational continuity and compliance.
- Analytics data: retained for trend analysis, then rotated or anonymised.
We use encrypted transport, access controls, and infrastructure security practices designed to protect account and transaction data.
Your rights.
- Access your personal data.
- Correct inaccurate or incomplete data.
- Request erasure where legally applicable.
- Request data portability.
- Restrict or object to certain processing.
- Withdraw consent for consent-based processing.
To exercise these rights, contact privacy@kwiktix.co. We may verify identity before fulfilling requests.
Other policy notes.
Children: KwikTix is not intended for children under 16.
Cookies: see our Cookie Policy.
International transfers: where transfers occur, we use contractual safeguards.
Policy updates: material changes will be communicated in product or by email.
Complaints: UK residents can contact the ICO at ico.org.uk.
Questions about privacy?
Privacy: privacy@kwiktix.co · General: hello@kwiktix.co