Privacy Policy
Last updated: 4 October 2026
This policy explains what personal information etickets.to collects about event organisers and ticket buyers, how it is used, who it is shared with, and the rights you have. It applies wherever you are, and we handle your information in line with the data protection laws that apply to us and to you.
1. Who we are
etickets.to is operated by Effective Ideas L.L.C-FZ, a company registered in the Meydan Free Zone, Dubai, United Arab Emirates under licence number 2530250.01, registered office Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.
For anything in this policy, including exercising your rights, contact us at support@etickets.to.
2. Our role: controller or processor
etickets.to is a ticketing platform used by event organisers. Who is responsible for your information depends on who you are:
- Organisers and their team members. We are the controller of your account information and of the information we use to run, secure and bill for the platform.
- Ticket buyers, ticket holders and waitlist members. When you buy a ticket or join a waitlist, the organiser of that event is the controller of your order and ticket information, and we process it as their processor — on their behalf and on their instructions — to sell and deliver your tickets, let them contact you about the event and check you in. The organiser’s own privacy notice applies to what they do with your information; you can ask them for it. If you contact us about their use of your data we will pass your request on to them and help them respond.
- Where we act for ourselves. We are an independent controller of buyers’ information when we use it to operate and protect the platform — for example security, rate limiting and fraud prevention, error monitoring, handling enquiries you send to us, and meeting our own legal obligations.
3. The information we collect
If you buy a ticket or join a waitlist
- Contact details: your first and last name, email address and (optionally) phone number.
- Order and ticket details: the event, ticket types, quantities, prices, booking fees, discount codes, order reference, ticket holder names and the QR codes on your tickets.
- Payment details: payments are handled by Stripe or PayPal on the organiser’s account. We receive a payment reference and status, but never your full card number.
- Admission records: when, and by which door-staff account, your ticket was scanned or checked in.
- Marketing preference: whether you ticked the box to hear from the organiser, and when.
- Waitlist details: name, email, the ticket type you are waiting for, and any offer sent to you.
- Email activity: for emails the organiser sends through etickets.to, whether each one was delivered, opened or clicked, whether it bounced, and whether you unsubscribed.
- Technical information: your IP address and browser details when you use the site (used for security and rate limiting, and recorded in our hosting and error logs), and, on event pages and checkout, the page you came from and a random visit identifier (see cookies and similar technologies).
If you are an organiser, team member or door staff
- Account details: name, email address and password (stored only in hashed form by our authentication provider).
- Organisation details: organisation name, contact email, country, currency and settings, and your team members’ roles.
- Payment and billing: the identifier of your connected Stripe account, PayPal API credentials if you connect PayPal, and a reference to the card you use to pay platform fees (the card itself is held by Stripe), together with your billing history.
- Your content: event listings, images, emails you compose, discount codes, webhooks and API keys (stored hashed).
- Door staff: email address, a hashed PIN, role and scanning activity.
- Usage and support: activity in your dashboard, and messages you send us.
4. How we use information and our lawful bases
| What we do | Lawful basis |
|---|---|
| Provide organisers with the platform and their account | Contract with the organiser |
| Take orders, issue and email tickets, run waitlists and check guests in — on the organiser’s behalf | Organiser’s basis as controller (normally performance of their contract with you) |
| Send event updates and post-event emails from the organiser to ticket holders | Organiser’s basis as controller (their contract with you, or legitimate interests) |
| Send marketing emails from the organiser | Your consent, given by ticking the box at checkout — only buyers who opted in receive them |
| Measure email delivery, opens and clicks, and page views, and show organisers statistics for their events | Organiser’s legitimate interests in understanding their audience (see also cookies) |
| Bill organisers for platform fees | Contract with the organiser; legal obligation (accounting and tax records) |
| Keep the platform secure: sign-in, rate limiting, fraud and abuse prevention, error monitoring | Our legitimate interests in running a safe, reliable service |
| Send organisers service messages (for example billing, security and sales notifications) | Contract with the organiser; our legitimate interests |
| Comply with the law, respond to lawful requests and defend legal claims | Legal obligation; our legitimate interests |
5. Marketing emails and unsubscribing
At checkout there is an optional box to receive news and offers about future events from the organiser you are buying from. It is never ticked for you. If you tick it, the organiser can send you marketing emails through etickets.to; if you do not, you will only receive emails about the tickets you bought (your tickets, and updates or follow-ups about that event).
Every marketing email includes an unsubscribe link. Using it stops all further broadcast emails from that organiser through etickets.to. You can also ask the organiser directly. We do not sell your information, and we do not send buyers our own marketing.
7. International transfers
We are based in the United Arab Emirates, and our service providers store and process information in other countries, including the European Union and the United States (see who we share information with). Your information may therefore be handled outside the country where you live. Wherever it goes, we make sure it is protected by appropriate safeguards, such as data processing agreements and standard contractual clauses with our providers, or the destination having been recognised as giving adequate protection. You can ask us for details at support@etickets.to.
8. How long we keep information
We keep information only for as long as we need it for the purposes above, including meeting legal, accounting and tax requirements. When an organiser closes their account, we delete or anonymise their buyers’ information unless we must keep it for longer by law.
| Information | How long |
|---|---|
| Orders, tickets and admission (scan) records | 6 years from the end of the financial year |
| Organiser account and team data | 6 years from the end of the financial year |
| Platform fee billing records | 6 years from the end of the financial year |
| Waitlist entries | 6 years from the end of the financial year |
| Broadcast email recipient and open/click records | 6 years from the end of the financial year |
| Unsubscribe and bounce suppression list | For as long as the organiser uses etickets.to, so we keep honouring your choice |
| Event page-view records (analytics) | 2 years |
| Security and error logs | 12 months |
| Rate-limiting counters (keyed by IP address) | Minutes — they expire automatically at the end of each rate-limit window |
9. Keeping information secure
We use encryption in transit, hashed passwords, PINs and API keys, encrypted ticket QR codes, role-based access controls for organisers’ teams, and restricted database access. No system is perfectly secure, but we work to protect your information and will tell you, and any regulator we must notify, about a breach where the law requires.
10. Your rights
Depending on where you live, you may have the right to:
- access the personal information held about you;
- have inaccurate information corrected;
- have your information erased in some circumstances;
- restrict or object to some uses, including any use based on legitimate interests, and always to direct marketing;
- receive information you gave us in a portable format (data portability); and
- withdraw consent at any time, where we rely on it (for example by unsubscribing from marketing).
To exercise a right, email support@etickets.to. If your request is about a ticket you bought, the organiser is responsible for it — you can contact them directly, or contact us and we will pass it on and help them respond. We will reply within one month, and we may need to confirm your identity first. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
If you are unhappy with how your information has been handled, please tell us so we can try to put it right. You may also have the right to complain to the data protection authority in the country where you live or work.
12. Children
Organiser accounts are for adults only. etickets.to is not designed for children to use on their own; if you are under 18, please ask a parent or guardian before buying tickets.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed, and we will tell organisers by email about significant changes. See also our Terms of Service.
14. Contact us
Email support@etickets.to, or write to Effective Ideas L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. If you have a question about an organiser’s use of your information, please contact the organiser — their details are in your ticket confirmation email.