Privacy Policy
This policy explains what personal data TickTap collects when you buy or list tickets, how we use it, and the rights you have. We keep data collection to the minimum needed to sell you a ticket and pay organisers.
Last updated: 28 October 2026
Who we are
TickTap ("we", "us") is a ticketing service operated by a sole trader trading as "TickTap", and is the ticket seller of record for events listed on this site. For data-protection purposes, we are the data controller for the personal data described below. You can reach us at bookings@ticktap.co.uk.
What we collect
We collect different information depending on whether you're buying tickets as a fan or running events as an organiser.
- Purchase details (fans): the event, ticket types and quantities you buy, and your order reference.
- Contact details (fans): the email address you give at checkout, or that Stripe collects when you pay, and the name on your ticket if you add one.
- Payment data: card payments are processed by Stripe. We receive a confirmation and the last digits/brand of the card, but never your full card number, which goes straight to Stripe.
- Organiser account details: if you create an organiser account, we store your name or organisation name, your contact name, email address, phone number, a securely hashed password, and an optional profile photo and short bio. We never store your password in readable form.
- Event details you provide: everything you enter when listing an event, including the title, venue, date, pricing, capacity, description and image.
- Payout details: to pay your takings after an event we need bank or payout information. We arrange this with you directly for now; where we introduce automated payouts, bank details are held by our payment provider (Stripe), not by us.
- Verification data: information used to confirm an organiser account is genuine, such as the on-screen verification check completed at sign-up.
- Technical data: basic device and usage information, and cookies (see our Cookie Policy).
- Event page views: we count how many times each event page is viewed each day, so organisers can see how their listing is doing. This is done anonymously and without cookies. We don't store your IP address: to avoid counting the same person twice in one day we keep a scrambled one-way code, and delete it the next day.
How we use it
- To process payments, issue ticket PDFs and provide support.
- To email your tickets, receipts and important updates about events you've booked.
- To create and manage organiser accounts, and to show organisers their own sales and statistics.
- To review and approve event listings, and to verify that organisers are genuine.
- To pay organisers their takings after an event.
- To prevent fraud and keep the service secure.
- To improve the service, where you have accepted optional analytics cookies.
Emails we send
- About your booking: when you buy tickets we email your tickets, your receipt and any important updates about the event you've booked, such as a time change or a cancellation. These are part of your booking, so they still come if you've turned off our news.
- TickTap news (optional): we only send news about local events if you tick the box asking for it. Every news email has an unsubscribe link, and you can unsubscribe at any time. We keep a note of when you said yes and the wording you agreed to.
- Organisers: we email you about your event listings and your account. We also send ticket sale alerts each time someone books, which you can turn off in Email settings in your dashboard. TickTap news for organisers is only sent if you turn it on there.
Our legal bases
We rely on the following legal bases under UK GDPR:
- Contract: to process your purchase, issue your ticket and provide support.
- Legal obligation: to keep tax, accounting and transaction records.
- Legitimate interests: to prevent fraud, secure the service, and operate our business, balanced against your rights.
- Consent: for optional analytics cookies and any marketing; you can withdraw consent at any time.
Who we share it with
We share data only with the providers needed to run the service, and only as far as needed:
- Stripe (payment processing): processes your card payment as an independent controller under its own privacy policy.
- Our hosting and email providers: to run the site and deliver your ticket.
- The event organiser: order and admission details for the event you booked, so they can admit you and meet their own legal obligations.
- Authorities or advisers: where required by law, or to establish, exercise or defend legal claims.
We do not sell your personal data.
International transfers
Some providers (for example Stripe) may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
How long we keep it
We keep order and payment records for as long as needed to provide the service and to meet legal, tax and accounting requirements (generally up to six years for financial records), then delete or anonymise them. Unused draft data and rejected event submissions are removed sooner.
How we protect it
Access to personal data is limited to what's needed to run the service. Payments are handled by Stripe and card numbers never reach our servers. We take reasonable technical and organisational measures to protect data, though no system can be guaranteed completely secure.
Children
TickTap is intended for adults buying tickets (including child-admission tickets for events). We don't knowingly collect personal data directly from children. If you believe a child has provided us data, contact us and we'll remove it.
Cookies
We use essential cookies to run the site and, with your consent, optional analytics cookies. You can change your choice any time via "Manage cookies" in the footer. Full detail is in our Cookie Policy.
Your rights
Under UK GDPR you can ask to access, correct, delete or restrict your personal data, object to certain processing, withdraw consent, and request portability. To exercise any of these, email bookings@ticktap.co.uk; we respond within one month. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to help first.
Changes
We may update this policy from time to time. The "last updated" date above shows the latest version; significant changes will be highlighted on this page.