Privacy Policy

1. Introduction and Scope

This Policy applies to all users of the Platform, including Event Organisers, Ticket Buyers and any third parties whose data we collect. We are committed to compliance with the Constitution of Kenya, the Data Protection Act 2019 (DPA) and any other applicable laws. We may update this Policy; we will notify you by posting the revised version or by email (where required). Your continued use of the Platform after such changes constitutes your acceptance of the revised Policy.

2. Data Controller

Tipsitickets Ltd is the data controller for the personal data collected via the Platform. For some data (for example Organiser data about attendees), you (as Event Organiser) may act as a joint controller: please ensure you have your own policies and notices for your attendee data.

3. What Personal Data We Collect

We may collect the following categories of personal data:

• Identity and contact details: name, email address, mobile phone number, postal address, organisation name (for organisers).
• Account data: username, hashed password, registration date, your preferences, payment method identifiers (for example tokenised card reference; we do not store full payment card numbers).
• Transaction data: your event registrations, ticket purchases, payment status, refunds, ticket codes, attendee lists (for organisers).
• Usage data: IP address, browser or operating system, device identifiers, pages visited, timestamps, cookies and similar technologies.
• Event data: for Ticket Buyers, name used on ticket (for entry purposes), event attendance, code or QR-ticket number.
• Marketing and communications data: your communication preferences and whether you consented to receive newsletters or promotional offers.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

• to provide and operate the Platform: registration, event listing, ticketing and check-in;
• to process payments, issue tickets, send confirmations, reminders, refunds or credits;
• to communicate with you about your account, your events, updates or changes to the Platform or our policies;
• to monitor usage, generate analytics and improve our services and user experience;
• to ensure security, prevent fraud and enforce our Terms, protecting rights;
• to comply with legal or regulatory obligations (for example tax, audit, investigations);
• with your consent, to send marketing communications, promotions or offers (which you may opt out of at any time).

5. Legal Basis for Processing

In Kenya, our processing is based on:

• performance of a contract (for example processing your ticket purchase or event listing);
• legitimate interests (fraud prevention, Platform improvement) provided your rights are not overridden;
• consent (for marketing communications or where required by law);
• compliance with legal obligation (for example tax or audit requirements).

6. Data Sharing and Disclosure

We may share your personal data as follows:

• Event Organisers: for admission or check-in purposes an organiser will receive Ticket Buyer names, ticket codes and contact details as necessary.
• Payment processors or financial institutions: to process payments, refunds and transfer of funds.
• Service providers: hosting, analytics, email or SMS notifications, under contract with appropriate safeguards.
• Legal or regulatory authorities: if required by law, court order, regulatory investigation or audit.
• Business transactions: in case of merger, acquisition, reorganisation or sale of assets, your personal data may be transferred; we will endeavour to limit this and notify you.

We do not sell your personal data to third parties for their own marketing without your consent.

7. Cookies and Similar Technologies

We use cookies, web beacons, device identifiers and similar technologies to collect usage data and personalise your experience. You may configure your browser or device to refuse cookies; however, this may limit your ability to use certain features of the Platform.

8. Data Retention

We retain your personal data only as long as is necessary to fulfil the purposes for which it was collected, or as required by law (for example tax accounting). When no longer needed, we will securely delete or anonymise your data. For example, transaction records may be retained for a minimum period of seven (7) years to meet regulatory obligations.

9. Data Subject Rights

Under the Data Protection Act 2019 (DPA) you have the right to:

• access your personal data we hold about you;
• correct or update inaccurate or incomplete data;
• request erasure or restriction of processing in certain circumstances;
• object to processing (for example direct marketing);
• withdraw consent (where processing is based on consent) without affecting prior processing;
• lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise these rights, please contact us at privacy@tipsitickets.co.ke and we will respond within the statutory timeframe.

10. International Transfers

Your data is typically processed and stored within Kenya or the East African region. If we transfer data outside Kenya, we will ensure that appropriate safeguards (for example contractual clauses) are in place to protect your data in accordance with Applicable Law.

11. Data Security

We implement technical and organisational measures — encryption, access controls, intrusion detection, regular security audits — to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no system is entirely risk-free; we cannot guarantee absolute security.

12. Minors

The Platform is not intended for children under 18. If you are under 18, you may only use the Platform under supervision of a parent or legal guardian who agrees to these Terms and this Privacy Policy on your behalf.

13. Third-Party Links

The Platform may contain links to, or integrate with, third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We recommend you review their privacy policies.

14. Photography and Recording at Events

As noted in our Terms of Service (Section 5), by listing an Event or purchasing a Ticket and attending the Event, you acknowledge and consent that the Event Organiser and/or Tipsitickets may photograph, film or record you, and use such content for promotional purposes including on social media, our website or other channels. You grant us the licence described in the Terms. If you do not consent, you must notify the Event Organiser or us in writing in advance of attendance.

15. Changes to this Policy

We may update this Privacy Policy from time to time. We will publish the updated version on the Platform and indicate the “Last Updated” date. Where required by law or for significant changes, we will notify you by email. Your continued use of the Platform after such updates constitutes acceptance of the changed Policy.