Customer Data Privacy Policy

Last modified: 23 Feb 2026
  1. Overview
  2. Who are we?
  3. What is the legal basis for processing your personal data?
  4. What personal data do we collect?
  5. How do we use your personal data?
  6. Consequences of not providing personal data
  7. Sharing your personal data
  8. Marketing activities
  9. How long do we keep your personal data?
  10. Your rights and your personal data
  11. Further processing
  12. Other websites
  13. Children’s personal data
  14. International data protection laws
  15. Updates to this Policy
  16. Contact details
  17. How to make a complaint

1. Overview


TicketSource is committed to upholding the Data Protection principles of good practice. Protecting your privacy is important to us, and we strive to keep all information relating to you confidential in accordance with this statement and the law. As part of the normal operation of our services, you may voluntarily provide us with, or we may collect information about yourself. This Data Privacy Policy aims to explain what personal data we collect about you, how that personal data might be used, and how we protect your personal data and privacy.


Your data will be stored on our servers located in the United Kingdom, and we base our data protection compliance on the UK General Data Protection Regulations (GDPR). The UK GDPR has evolved from the EU GDPR, which is considered the ‘gold standard’ for data protection regulations, so we are confident that our high level of data protection compliance will be appropriate for international data privacy regulations. However, where specific country or state regulations require additional protection or user rights beyond the UK GDPR requirements, these will be included at the end of this Privacy document.


TicketSource is registered in the United Kingdom and the United States of America at the following addresses:


(UK) – Off Edge, Station Approach, Penarth, United Kingdom CF64 3EE

(US) - 2035 Sunset Lake Road, Suite B-2, Newark, DE, United States of America 19702


You can contact us via the ‘Contact Details’ section below.


2. Who are we?


TicketSource is an online ticketing software provider. The Event Organiser has contracted us to deliver online ticketing services on their behalf. Therefore, TicketSource is the Data Processor acting on behalf of the Event Organiser, the Data Controller. The Event Organiser decides what happens to your personal data.


The Event Organiser / Data Controller is named as part of the booking process.


3. What is the legal basis for processing your personal data?


Processing is necessary for the performance of a contract (e.g. processing ticket bookings on behalf of the Event Organiser or storing your information if you choose to join a waiting list for an event) and legitimate interest (storage or IP Addresses for risk management). Cookies may be collected with consent to allow full access and smooth progression through our website.


4. What personal data do we collect?


Information that you provide


TicketSource collects personal information about you when you specifically provide us with such information voluntarily. The information that we may collect includes:


  • Name
  • Address
  • Email
  • Contact number
  • Business name/position (for some business events)
  • Payment card details – card details are encrypted for processing. TicketSource does not store card details within its system.

If you provide Personal Information to us on behalf of another attendee, you must ensure you have their consent. In doing so, you represent and warrant to TicketSource that you have obtained the other Attendees' consent to share their Personal Information with us.


Information that we collect


TicketSource will collect the following information from your web session:


  • IP address
  • Operating system
  • Browser type
  • Device type
  • Cookies

5. How do we use your personal data?


We use your personal data for the following purposes:


  • To process ticket bookings (including the booking, payment processing and ticket delivery).
  • To send you email communication regarding your booking (including booking reminders or advising you of an event update or cancellation).
  • To assist you with any query that you may have with your booking or payment.
  • To place you on a waiting list for a sold-out event at your request and send updates as tickets become available.
  • We may also use your data to perform quality assurance, sales, or other business analyses.
  • We may collect information about your computer, including where available your IP address, operating system and browser type, for system security, customer support and site analytics. This statistical data cannot be used to identify a customer.
  • Cookies are used to track visitors through our site and to save booking information as they move from page to page of the booking process. See our Cookies Policy for more information.

6. Consequences of not providing personal data


To use our services, certain personal data is necessary to process your ticket booking, issue tickets, and provide customer support. If you choose not to provide this information, we may not be able to:


  • Process your ticket purchase or reservation.
  • Issue tickets or grant access to events.
  • Contact you regarding event updates or changes.
  • Provide customer service assistance.

In some cases, we are legally required to collect certain information (e.g. for fraud prevention or security purposes). If you do not provide the required data, we may be unable to offer our services to you.


You can switch off all cookies except for strictly necessary cookies, which are required to help you progress through your booking and hold items in your online basket.


7. Sharing your personal data


TicketSource will not use your contact details for marketing activities, and TicketSource does not sell Customer contact details to Third parties. TicketSource will only contact you regarding an existing booking or booking attempt.


Sharing Data with Event Organisers


As we act on behalf of the Event Organiser, we will forward your contact details and booking information to the Event Organiser of your selected event. The Event Organiser will use this information to:


  • Manage ticketing for an event
  • Facilitate ticket pick-up
  • Dispute resolution
  • Customer service
  • Notification of any changes to the event
  • Undertake sales, campaign or demographic analysis.

The Event Organiser is responsible for its own compliance with data protection regulations, and you agree that TicketSource is not responsible for the actions of the Event Organiser concerning your personal data.


Sharing data with Sub-Processors


TicketSource may share your personal data with our processing partners, such as merchant service providers or email/text service providers, who are contracted to assist TicketSource with booking your tickets — known as Sub-Processors. TicketSource is responsible under GDPR and other data privacy regulations to ensure that any Sub-Processor we contract is fully compliant with data privacy law and will also act to ensure the safety and confidentiality of your personal data.


Sharing data for legal requirements


We may share your personal data with law enforcement agencies, where necessary, to comply with legal obligations, protect our legitimate interests, or enforce our terms of service in accordance with applicable data protection laws.


No sale


We will not sell your personal data to third parties, including third-party advertisers.


Business transfers


If we undergo a sale, merger, acquisition, or other business restructuring, we may need to transfer personal data to the new owner or relevant third parties involved in the transaction. In such cases, we will ensure that:


  • The transfer is necessary as part of the transaction and is conducted in compliance with data protection laws.
  • Any new owner or relevant third party will be required to use your personal data only for the same purposes in this Privacy Policy unless you are informed otherwise.
  • We will take appropriate steps to ensure the continued protection of your personal data.

If such a transfer occurs, you will be notified if required by law.


8. Marketing activities


TicketSource will not use your data for marketing purposes.


During the booking process, the Event Organiser will ask if you would like to be included on their mailing list or that of other named Third Parties. If you decide to opt into these marketing lists, you agree that the Event Organiser or named Third Party can send you marketing information until such a time that you indicate to them a preference not to receive further information.


TicketSource allows Event Organisers to send customers updates about their booked event. This may include changes to the event, venue information, event reminders or post-event surveys. Event organisers agree that these are event-specific messages or notifications, and this feature must not be used for marketing purposes. Any misuse of this feature for marketing purposes is the Event Organiser's responsibility, and TicketSource cannot be held liable for such misuse.


9. How long do we keep your personal data?


TicketSource will keep your personal data for no longer than reasonably necessary and delete it after one (1) year. TicketSource retains personal data for this period to assist us in responding to customer booking queries or any charge disputes that may arise.


Your personal data stored in an Event Organiser’s TicketSource account is owned by the Event Organiser and is managed under their own Data Retention Policy. The Event Organiser may have a different retention period, which will be stated in their Data Privacy Policy.


10. Your rights and your personal data


You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal data held by TicketSource, please contact the Data Security Officer using the contact details listed below.


Under GDPR, you have the following rights:


  • Right to be informed of why your data is being processed (included within this Data Privacy Policy).
  • Right of access to the personal data held.
  • Right of rectification if incorrect data is held.
  • Right to erasure (may be subject to the booking contract and retention periods).
  • Right to object to processing or withdraw consent where provided.
  • Right to withdraw consent when we rely on consent to process your personal data.

To exercise your rights under GDPR, you must contact the Event Organiser (the Data Controller), who is responsible for how your personal data is used. TicketSource can provide you with contact details for the Event Organiser or will forward your request on your behalf.


11. Further processing


TicketSource will not process your personal data beyond this booking and the activities outlined above under 'How do we process your personal data?'


12. Other websites


Our website may contain links to other websites (e.g. Event Organiser websites or social media pages). This Data Privacy Policy only applies to the TicketSource website, so when you link to other websites, you should read their privacy policies.


13. Children’s personal data


TicketSource is a ticketing platform intended for use by event organisers and adult customers purchasing tickets. Our services are not directed to, or intended for, children under the age of 18.

We do not knowingly permit children under 18 to create accounts or purchase tickets on our platform. Tickets for events (including children’s events) must be purchased by a parent, guardian or other responsible adult.

If you are under 18, you may only use our services with the involvement and supervision of a parent or legal guardian.

We do not knowingly collect personal data directly from children under 18. If we become aware that a child has provided personal data without appropriate parental involvement, we will take reasonable steps to delete that information.

Parents or guardians who believe a child has provided personal data to TicketSource should contact us using the details below so we can investigate and take appropriate action.


14. International data protection laws


As TicketSource is an international company, your personal information and other data collected about you may be transferred, stored, and processed in any country where our servers are located (UK) or where our sub-processors services or servers are located (UK, EU, US). By accessing, receiving, or using the TicketSource service, you specifically acknowledge and agree that this information may be transferred outside of the country from which you access our service and that these countries’ data protection and related laws and regulations may be different than and not as protective as those from where you access the service. Your use or access to the TicketSource service constitutes your consent to such transfers.


If your personal data is transferred between the UK and other countries, we ensure that appropriate safeguards are in place to protect your data under UK and worldwide data protection laws.


When personal data is transferred to countries that the UK Government has deemed to provide an adequate level of data protection, we rely on these adequacy decisions.


For transfers to countries without an adequacy decision, we implement appropriate safeguards, including:


  • Standard Contractual Clauses (SCCs): We use UK-approved SCCs, which impose data protection obligations on the recipient to ensure your data remains protected.
  • Binding Corporate Rules (BCRs): Where applicable, we rely on approved internal policies governing international data transfers within our corporate group.

If you would like further details on the specific safeguards for international data transfers, please email us at [email protected].


15. Updates to this Policy


This Privacy Policy is regularly reviewed to ensure ongoing compliance with Data Privacy Regulations. Any variations become effective upon posting to our website. We encourage you to check this policy periodically for changes.


16. Contact details


To exercise any relevant rights, queries or complaints regarding TicketSource and the handling of your personal data, please contact:


The Data Security Officer

TicketSource

Off Edge

Penarth

United Kingdom

CF64 3EE


Email: [email protected]


Depending on your query, we may need to forward your request to the Event Organiser, who is the Data Controller and responsible for handling your personal data.


17. How to make a complaint


If you are unhappy with how TicketSource has processed your personal data, you may first contact the Data Security Officer using the contact details above.


If you remain dissatisfied, you can apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted by phone on +44 (0)303 123 1113 or via their online notification system at www.ico.org.uk/make-a-complaint/