1. about this privacy notice

This Privacy Notice explains how Kryptickets Limited, trading through kryptickets.co.uk, collects, uses and shares personal data when you use kryptickets.co.uk, buy Tickets, create an account, contact us, receive marketing or otherwise interact with us.

We are committed to protecting your privacy and handling your personal data lawfully, fairly and transparently.

This Privacy Notice applies to:

• website visitors;
• customers and ticket buyers;
• ticket holders;
• people who contact us;
• people who sign up to marketing;
• promoter contacts;
• business contacts; and
• anyone whose personal data we process in connection with the Website or our services.

2. who we are

The controller of your personal data is Kryptickets, whose office is at 35 Carlyle Street, Abertillery, NP13 1UE, trading through kryptickets.co.uk.

Our contact details are:

• Email: krypticket01@gmail.com
• Postal address: 35 Carlyle Street, Abertillery, NP13 1UE
• ICO registration number: C1985460

3. promoters and other controllers

When you buy a Ticket, we may share limited personal data with the Promoter responsible for the Event.

The Promoter may use your personal data for Event fulfilment, admission, guestlist management, Event safety, customer service, refunds and legal compliance.

The Promoter may be an independent controller of your personal data, meaning the Promoter is responsible for how it uses your personal data.

You should read any privacy information provided by the Promoter or venue.

4. personal data we collect

We may collect and use the following categories of personal data:

• identity information, such as your name;
• contact information, such as email address, phone number and billing address;
• account information, such as username, password, account settings and login details;
• booking information, such as Event name, Ticket type, booking reference, number of Tickets, price paid, Booking Fee, order status and refund status;
• payment information, such as payment method, transaction reference, payment status and limited card details provided by our payment provider;
• attendance information, such as Ticket scans, entry status and admission records;
• communication information, such as emails, messages, support requests, complaints and feedback;
• marketing preferences, such as consent choices and unsubscribe status;
• technical information, such as IP address, browser type, device type, operating system, referral source, pages visited, session information, approximate location and cookie identifiers;
• fraud prevention information, such as payment risk indicators, chargeback data, device data and security logs;
• user content, such as reviews, ratings, comments or survey responses;
• promoter/business contact information, such as job title, business name, company details, work email and work phone number; and
• any other information you choose to provide.

We do not usually collect special category data, such as health data, biometric data, political opinions or religious beliefs.

If you provide information about accessibility needs or health requirements, we will use it only where necessary to deal with your request, support Event access or comply with legal obligations.

We do not intentionally collect personal data from children. If you believe a child has provided personal data to us, please contact us.

5. how we collect personal data

We collect personal data:

• directly from you when you use the Website, buy Tickets, create an account, contact us or sign up to marketing;
• automatically when you use the Website, through cookies and similar technologies;
• from payment providers;
• from Promoters, venues or Event partners where necessary;
• from fraud prevention and security providers;
• from social media platforms if you interact with us there;
• from email and marketing platforms;
• from analytics providers; and
• from public sources or business directories where relevant to promoter or business relationships.

6. how and why we use personal data

Ticket purchases and booking management — we use your data to process orders, take payment, issue Tickets, send booking confirmations, manage your account, provide customer support, process refunds and handle payment disputes. Lawful bases: contract, legitimate interests and legal obligation.

Event fulfilment — we use your data to enable Event admission, validate Tickets, prevent duplicate entry, support guestlist management, share necessary details with Promoters and deal with Event-related communications. Lawful bases: contract and legitimate interests.

Customer support and complaints — we use your data to respond to enquiries, resolve issues, investigate complaints, communicate with Promoters and manage disputes. Lawful bases: contract, legitimate interests and legal obligation.

Refunds, cancellations and Event updates — we use your data to tell you about Event cancellations, postponements, material changes, refund options and other important Event information. Lawful bases: contract, legitimate interests and legal obligation.

Fraud prevention and security — we use your data to prevent fraud, payment abuse, fake accounts, unauthorised access, ticket misuse, chargebacks, cyberattacks and unlawful activity. Lawful bases: legitimate interests and legal obligation.

Website operation and improvement — we use technical data to operate the Website, monitor performance, fix bugs, improve user experience and develop our services. Lawful bases: legitimate interests and consent where required for non-essential cookies.

Marketing — we use your data to send marketing communications where you have consented or where we are otherwise allowed by law. Lawful bases: consent and legitimate interests.

Personalisation and recommendations — we may use booking history and Website activity to recommend Events, personalise content and show relevant promotions. Lawful bases: legitimate interests and consent where required for cookies or similar technologies.

Reviews, surveys and feedback — we may use your data to collect and publish reviews, understand customer experience and improve the Website. Lawful bases: legitimate interests and consent where applicable.

Legal, regulatory and business administration — we use your data to keep records, comply with laws, respond to regulators, manage tax/accounting obligations, enforce our terms, protect our rights and manage business operations. Lawful bases: legal obligation and legitimate interests.

Promoter relationships — we use promoter and business contact data to onboard Promoters, manage Event listings, process settlements, communicate about services, conduct checks and manage commercial relationships. Lawful bases: contract, legitimate interests and legal obligation.

7. marketing communications

We may send you marketing emails about Events, offers, promotions, features and services where permitted by law.

You can unsubscribe at any time by using the unsubscribe link in our emails or contacting us.

We may still send you service messages, such as booking confirmations, Event updates, refund updates and important account information.

We will not sell your personal data to third parties.

Promoters must not use your personal data for their own marketing unless they have a lawful basis to do so.

8. cookies and similar technologies

We use cookies and similar technologies as explained in our Cookie Policy.

Essential cookies are used to operate the Website and provide services you request.

Non-essential cookies, such as analytics or advertising cookies, will only be used where we have obtained consent where required.

You can manage cookie choices through our cookie settings tool.

9. who we share personal data with

We may share personal data with:

• Promoters and venues where necessary for Event fulfilment, admission, customer service, refunds, safety or legal compliance;
• payment providers and banks;
• fraud prevention and security providers;
• IT, hosting and cloud service providers;
• email, SMS and customer communication providers;
• analytics providers;
• marketing platforms where lawful;
• professional advisers, including lawyers, accountants and insurers;
• regulators, law enforcement, courts, local authorities and public bodies where required or appropriate;
• companies involved in a business sale, merger, investment, restructuring or transfer;
• delivery, ticketing, scanning or access control providers; and
• other third parties where you ask us to share data or where the law allows us to do so.

We require service providers to protect personal data and use it only for agreed purposes.

10. international transfers

Some of our service providers may process personal data outside the UK.

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations, approved contractual clauses or other lawful transfer mechanisms.

11. how long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected.

Retention periods may depend on:

• whether you have an account;
• whether you bought Tickets;
• whether there are unresolved refunds, chargebacks, complaints or disputes;
• legal, tax and accounting requirements;
• fraud prevention needs;
• regulatory obligations; and
• whether you have consented to marketing.

As a general guide:

• account data is kept while your account is active and for a reasonable period after closure;
• booking and transaction records may be kept for up to 7 years for tax, accounting, fraud prevention and legal purposes;
• customer service records may be kept for up to 6 years after resolution;
• marketing consent records are kept while you receive marketing and for a reasonable period after you unsubscribe;
• cookie data is kept for the periods stated in the Cookie Policy; and
• security logs are kept for a limited period unless needed for investigation.

We may anonymise data so it can no longer identify you. We may use anonymised data indefinitely.

12. security

We use appropriate technical and organisational measures to protect personal data.

These may include access controls, encryption, monitoring, secure hosting, payment provider security, staff controls and incident response processes.

No online service can be guaranteed completely secure. You are responsible for keeping your account details and Tickets secure.

13. your rights

Depending on the circumstances, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• erase personal data;
• restrict processing;
• object to processing;
• data portability;
• withdraw consent where processing is based on consent;
• object to direct marketing; and
• complain to the Information Commissioner’s Office.

Your rights may be subject to exemptions or limitations.

To exercise your rights, please contact us at krypticket01@gmail.com.

We may need to verify your identity before responding.

14. complaints

If you have concerns about how we use your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office.

15. changes to this privacy notice

We may update this Privacy Notice from time to time.

The latest version will be posted on the Website.

If we make material changes, we may notify you by email, Website notice or account message.