Privacy Policy

Who we are

TickTap ("we", "us") is a ticketing service operated by a sole trader trading as "TickTap", and is the ticket seller of record for events listed on this site. For data-protection purposes, we are the data controller for the personal data described below. You can reach us at bookings@ticktap.co.uk.

What we collect

We collect different information depending on whether you're buying tickets as a fan or running events as an organiser.

• Purchase details (fans): the event, ticket types and quantities you buy, and your order reference.
• Contact details (fans): the email address you give at checkout, or that Stripe collects when you pay, and the name on your ticket if you add one.
• Payment data: card payments are processed by Stripe. We receive a confirmation and the last digits/brand of the card, but never your full card number, which goes straight to Stripe.
• Organiser account details: if you create an organiser account, we store your name or organisation name, your contact name, email address, phone number, a securely hashed password, and an optional profile photo, short bio and website or social media links. Your name, photo, bio and links appear on your public organiser page once you have an approved event. We never store your password in readable form.
• Reviews (fans): anyone can review an organiser on their TickTap page, and if you booked through TickTap you can also review from your ticket after the event. We store your star rating, what you wrote and the name you give. For reviews from your ticket we also store which booking it was for, and the review is marked "Booked on TickTap". For reviews left on the organiser's page we don't ask for your email; to stop spam we keep a scrambled (hashed) version of your IP address, which we can't turn back into the address. Only your first name and initial, the rating, your words and the month (plus the event name for booked reviews) are shown publicly, on the organiser's page. We check every review before it goes live and may hide any that break our rules. The organiser can reply publicly but can't see your email address or IP. To have your review removed, email bookings@ticktap.co.uk.
• Event details you provide: everything you enter when listing an event, including the title, venue, date, pricing, capacity, description and image.
• Payout details: to pay your takings after an event we need bank or payout information. We arrange this with you directly for now; where we introduce automated payouts, bank details are held by our payment provider (Stripe), not by us.
• Verification data: information used to confirm an organiser account is genuine, such as the on-screen verification check completed at sign-up.
• Technical data: basic device and usage information, and cookies (see our Cookie Policy).
• Event page views: we count how many times each event page is viewed each day, so organisers can see how their listing is doing. This is done anonymously and without cookies. We don't store your IP address: to avoid counting the same person twice in one day we keep a scrambled one-way code, and delete it the next day.

How we use it

• To process payments, issue ticket PDFs and provide support.
• To email your tickets, receipts and important updates about events you've booked.
• To create and manage organiser accounts, and to show organisers their own sales and statistics.
• To review and approve event listings, and to verify that organisers are genuine.
• To pay organisers their takings after an event.
• To prevent fraud and keep the service secure.
• To improve the service, where you have accepted optional analytics cookies.

Emails we send

• About your booking: when you buy tickets we email your tickets, your receipt and any important updates about the event you've booked, such as a time change or a cancellation. These are part of your booking, so they still come if you've turned off our news.
• TickTap news (optional): we only send news about events across the UK if you tick the box asking for it. Every news email has an unsubscribe link, and you can unsubscribe at any time. We keep a note of when you said yes and the wording you agreed to.
• Organisers: we email you about your event listings and your account. We also send ticket sale alerts each time someone books, which you can turn off in Email settings in your dashboard. TickTap news for organisers is only sent if you turn it on there.

Our legal bases

We rely on the following legal bases under UK GDPR:

• Contract: to process your purchase, issue your ticket and provide support.
• Legal obligation: to keep tax, accounting and transaction records.
• Legitimate interests: to prevent fraud, secure the service, and operate our business, balanced against your rights.
• Consent: for optional analytics cookies and any marketing; you can withdraw consent at any time.

Who we share it with

We share data only with the providers needed to run the service, and only as far as needed:

• Google (translation, only if you use it): if you choose a language from the globe menu, the text of the page you are viewing is sent to Google Translate to be translated, under Google's own privacy policy. Checkout and ticket pages are never translated.
• Stripe (payment processing): processes your card payment as an independent controller under its own privacy policy.
• Our hosting and email providers: to run the site and deliver your ticket.
• The event organiser: order and admission details for the event you booked, so they can admit you and meet their own legal obligations.
• Authorities or advisers: where required by law, or to establish, exercise or defend legal claims.

We do not sell your personal data.

International transfers

Some providers (for example Stripe, and Google if you use the translation option) may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

How long we keep it

We keep order and payment records for as long as needed to provide the service and to meet legal, tax and accounting requirements (generally up to six years for financial records), then delete or anonymise them. Unused draft data and rejected event submissions are removed sooner.

How we protect it

Access to personal data is limited to what's needed to run the service. Payments are handled by Stripe and card numbers never reach our servers. We take reasonable technical and organisational measures to protect data, though no system can be guaranteed completely secure.

Children

TickTap is intended for adults buying tickets (including child-admission tickets for events). We don't knowingly collect personal data directly from children. If you believe a child has provided us data, contact us and we'll remove it.

Cookies

We use essential cookies to run the site and, with your consent, optional analytics cookies. You can change your choice any time via "Manage cookies" in the footer. Full detail is in our Cookie Policy.

Your rights

Under UK GDPR you can ask to access, correct, delete or restrict your personal data, object to certain processing, withdraw consent, and request portability. To exercise any of these, email bookings@ticktap.co.uk; we respond within one month. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to help first.

For step-by-step help with a request, see Your data rights.

Changes

We may update this policy from time to time. The "last updated" date above shows the latest version; significant changes will be highlighted on this page.