Privacy Policy

Last updated: December 2025

The short version

  • We collect what we need to run the platform - email, name, and payment info (via Stripe).
  • We never sell your data. Period. Your info is used solely for KwikTix services.
  • Trusted partners only: Stripe, Supabase, PostHog, and Sentry.
  • You have rights: Access, update, or delete your data anytime. GDPR compliant.

Information We Collect

For Attendees

  • Name and email address (to deliver your tickets)
  • Payment information (processed securely by Stripe - we never see your card details)
  • Order history and ticket records

For Organisers

  • Account details (name, email, password)
  • Organisation information (name, logo, description)
  • Bank details for payouts (processed via Stripe Connect)
  • Event data, sales records, and attendee lists

Automatically Collected

  • Device information (browser type, operating system)
  • Usage data (pages visited, features used)
  • IP address and approximate location

Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

Contract Performance

Processing tickets, delivering services, managing your account, and paying out organisers.

Legitimate Interests

Improving our platform, preventing fraud, providing customer support, and sending service updates.

Legal Obligation

Complying with tax, accounting, and regulatory requirements.

Consent

Marketing communications (you can withdraw consent anytime).

How We Use Your Information

  • Process transactions and deliver tickets
  • Provide customer support
  • Send order confirmations and event reminders
  • Process payouts to organisers
  • Improve the platform and fix bugs
  • Prevent fraud and maintain security
  • Comply with legal obligations

Information Sharing

We don't sell or rent your personal information. We share data only with trusted service providers:

Note for attendees: When you purchase tickets, your name and email are shared with the event organiser so they can manage their event and communicate with you about it.

Data Retention

We keep your data only as long as necessary:

  • Account data: Until you delete your account, plus 30 days for backup recovery
  • Transaction records: 7 years (tax and accounting requirements)
  • Support conversations: 2 years after last contact
  • Analytics data: 26 months (anonymised after this)
  • Marketing preferences: Until you unsubscribe

Data Security

We use industry-standard encryption and security practices to protect your data. All data is transmitted over HTTPS. Payment information is processed by Stripe and never touches our servers. We regularly review our security practices and work with trusted, SOC 2 compliant infrastructure providers.

Your Rights

Under GDPR, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate information
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: For any consent-based processing

To exercise your rights: Email privacy@kwiktix.co with your request. We'll respond within 30 days. You may need to verify your identity for security.

Children's Privacy

KwikTix is not intended for children under 16. We don't knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we'll delete it.

Cookies

We use cookies to enhance your experience and analyse usage patterns. For full details, see our Cookie Policy.

International Transfers

Some of our service providers operate outside the UK/EEA (primarily in the US). We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, and only work with providers who maintain adequate data protection standards.

Updates to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or through a notice on the platform at least 30 days before they take effect.

Complaints

If you're unhappy with how we've handled your data, please contact us first at privacy@kwiktix.co. You also have the right to lodge a complaint with your local data protection authority. For UK residents, this is the Information Commissioner's Office (ICO):

Information Commissioner's Office

Website: ico.org.uk

Phone: 0303 123 1113

Questions?

If you have questions about your privacy or want to exercise your rights: