Privacy Policy

Privacy Policy

  1. At Twickets ("us", "our" or "we"), we know how important it is for you to understand how we use your data.
  2. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read the following carefully as it will help you to understand our practices regarding your personal data and how we will treat it.
  3. By visiting the website, services and applications of Twickets through any media, platform, technology or device (collectively referred to as "our site" and/or "our service") you are accepting and consenting to the practices described in this policy.
  4. For the purposes of the General Data Protection Regulation (GDPR), the data controller of your personal data is Twickets Limited of 47-50 Margaret Street, London, England, W1W 8SB. You can contact us by the methods set out at the bottom of this privacy policy.
  5. WHAT PERSONAL DATA DO WE COLLECT?
    1. Personal data is any information that could be used to identify you in some way. The personal data that we collect from or about you may include the following:
    2. your name;
    3. your gender;
    4. your delivery address;
    5. your email address;
    6. your contact telephone number;
    7. your bank account details;
    8. your location country (if you have selected a country view);
    9. your financial information (such as PayPal account details, or credit or debit card information);
    10. your puchase history with us;
    11. information you voluntarily give us when you contact our customer services team, including any phone number used to call out customer service number;
    12. information about your visit to our website, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), tickets or events you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page;
    13. technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, browser plug-in types and versions, and operating system and platform.
    14. information collected from our websites and elsewhere across the internet through cookies, web beacons, pixel tags, device identifiers and other technologies including information about your shopping habits and preferences.
  6. WHEN DO WE COLLECT PERSONAL DATA?
    1. We may collect personal data in a variety of ways including:
    2. Information you give us. This is information about you that you give us by filling in forms on our site or by corresponding with us by phone, e-mail or otherwise. It includes information that you provide when you register for an account, list tickets for sale, buy or sell tickets via our site, sign up for ticket alerts, subscribe to our newsletter, contact out customer services team, or get in touch with us on social media.
    3. Information you give us when you report a problem with our site, a ticket transaction or another user
    4. Information we collect automatically when you use our service. With regard to each of your visits to our site we may, independently or through third-party data analytics tools or services such as Google Analytics, automatically collect information as you use our services.
    5. Information gathered through cookies and other similar technology to distinguish you from other users of our site. This helps us to provide you with a good experience when you browse our site and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie policy.
    6. Information we receive from other sources. We work closely with third parties, for example our event partners who may provide us with information about you in order for us to authenticate the tickets you have listed on our site, or in some cases public databases such as Companies House.
    7. Social Media. You might wish to register for an account with us using your Facebook or Twitter account. By doing so you give us permission to access certain information from your Facebook or Twitter account. We only use it to obtain your name and email address, we don't navigate your friends lists. You can control the information you allow us to have access to through your privacy settings on Facebook or Twitter.
  7. HOW DO WE USE PERSONAL DATA AND WHAT IS OUR JUSTIFICATION FOR DOING SO?
    1. We use your personal data for a variety of purposes related to the services that we provide. From a legal perspective, there are various justifications for doing so and we have set out an explanation of this below.
    2. For purposes related to the provision of the services that we offer to you:
      1. To give you access to and use of our service which includes enabling you to set up an account and to list, sell, supply, buy and acquire tickets via our service;
      2. Communicating with you in connection with your ticket transaction(s), giving you access to your account information, and providing you with customer services/dispute resolution support;
      3. To measure customer satisfaction and provide customer service (including troubleshooting in connection with purchases or your requests for services).
      4. Changes. To notify you about changes to our service
      5. We use your data in this way either because we have a contract with you (for example, if you sell or buy tickets using our platform, a contract to provide that service to you) or because it is in our legitimate interests to do so (for example, it is in our interests to measure customer satisfaction and "troubleshoot" customer issues) but we will always ensure that your rights are protected.
    3. For advertising and marketing purposes:
      1. To send you ticket alerts via e-mail and/or push notification to your mobile phone. You can turn off and edit your alerts in the Alerts section within your account settings or by contacting us by the methods set out at the bottom of this policy;
      2. To send marketing emails on behalf of business partners in the future to let you know about other products and services that we think might interest you. You can opt in to receiving these emails by updating your preferences in the "my account" section of your account.
      3. We'll send you marketing emails (including newsletters) about other events you might be interested in. You can opt to stop receiving marketing information by updating your preferences in the "my account" section, by clicking on the unsubscribe link in any email, or by contacting us by the methods set out at the bottom of this policy;
      4. To measure or understand the effectiveness of any advertising we serve to you and others.
      5. To send you information or offers on behalf of our event partners;
      6. Where you have registered your account from the United Kingdom, the European Union, Australia, New Zealand or Canada, we will rely on your consent to contact you. Where you have registered your account from the United States, or in other scenarios (for example, measuring the effectiveness of our marketing), we will rely on our legitimate interests as a business, always ensuring that your rights are protected.
    4. For the purposes of tailoring our services to you to enhance your user experience:
      1. We may combine the personal data we collect from third parties (for example, if you have said we can, from Spotify) with personal data you give to us and the personal data we collect about you to improve the relevancy of the Twickets service and to make suggestions and recommendations to you about Twickets goods or services that may interest you.
      2. For administrative and internal business purposes:
        1. To ensure that content from our site is presented in the most effective manner for you and your device;
        2. To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
        3. To allow you to participate in interactive features of our services when you choose to do so.
      3. It is in our legitimate interests as a business to use your data in this way. For example, we have a clear interest in ensuring that our site works properly and that our services are high quality and efficient. We will always ensure that your rights are protected.
    5. For security, fraud prevention and legal and compliance purposes:
      1. To keep our website and app safe and secure;
      2. We may process your personal data using software and systems that look for fraudulent activity by studying patterns in data. This may involve automated decision making (including profiling). For example, our software and systems may notice that an account (or series of accounts) is being used in a way that is unusual and that is indicative of fraudulent conduct or otherwise in a manner that breaches our terms and conditions;
      3. To protect our rights or property (or the rights or property of others) and to enforce our rights and pursue available remedies.
      4. In some cases, we will need to use your personal data to fulfil a legal obligation (for example, if we receive a legitimate request from law enforcement agencies), and in other cases (such as the detection of fraud or ensuring the security of the site) this processing may be for the purpose of preventing and detecting crime which we believe to be necessary or appropriate in each case in order to comply with laws or legal process (including laws of legal process in other countries). We will also rely on our legitimate interests in ensuring the integrity of our services and in enforcing our terms and conditions to use your data in this way.
  8. PRIVACY OF MINORS
    1. Twickets does not knowingly collect personal information from children under 13 years of age without parental consent.
  9. WHEN DO WE SHARE YOUR PERSONAL DATA?
    1. We may share your personal data:
      1. with any member of our corporate group, which means our subsidiaries, our ultimate holding company and its subsidiaries in order to fulfil our contractual obligations to you, or because it is in our legitimate interests to do so (for example where we share processes or operations with another group company);
      2. with selected third parties who provide services to us for specific functions (for example PayPal Inc. who provide us with payment services or Trust Pilot who ensure that our reviews are authentic and trustworthy). In each case we will ensure that these third parties are only allowed to use your personal data in order to provide the relevant services to us. It is in our legitimate interests as a business to work with these third parties since we may not have the capabilities to provide these services ourselves;
      3. with our event partners so that they can verify the authenticity of tickets that have been listed or sold via our site and control access to their event in order to fulfil our contractual obligations to you, or because it is in our (and their) legitimate interests to do so (for example our event partners need to do this to ensure they uphold health and safety, and security standards);
      4. with other users during the sale/purchase of ticket(s) via our service in order to complete a transaction. For example, we will give the seller the name, delivery address (where necessary), telephone number and e-mail address of the buyer so that the seller may arrange delivery of the ticket(s) to the buyer. We will also give the buyer the e-mail address and telephone number of the seller so that the buyer is able to contact the seller regarding the transaction;
      5. with marketing partners who may use your details to contact you with news and offers:
        1. if you were located at time of registration in the United Kingdom, the European Union, Australia, New Zealand or Canada and only if you have provided your explicit consent; or
        2. if you were located at time of registration in the US and unless you have told us specifically that you do not want this to happen subsequent to registration.
        3. You can withdraw consent at any time from your account settings on our website.
      6. with analytics and search engine providers that assist us in the improvement and optimisation of our site. For these purposes your personal data will be aggregated and looked at on a statistical basis;
      7. with third parties if we propose to sell or buy any business or assets, in which case we will disclose your personal data to the prospective buyer or seller of such business or assets. Similarly, if there are changes to our group structure, or if our ownership changes, we may need to disclose your personal data to the new owners or operators as one of the transferred assets.
      8. If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our User Agreement and other agreements; or to protect the rights, property, or safety of Twickets, our users, or others. This includes exchanging information with other companies and organisations (including law enforcement agencies where appropriate) for the purposes of fraud protection and credit risk reduction.
  10. TRANSFERRING YOUR PERSONAL DATA OUTSIDE OF THE EUROPEAN ECONOMIC AREA (THE "EEA")
    1. Some of the processes involved in our use of your personal data may require your data to be stored or processed in countries outside of the EEA; for example, where you purchase tickets for a venue outside of the EEA or if one of our service providers is based outside of the EEA.
    2. These countries may not have the same data protection laws as the UK and the EEA and so your personal data may not be subject to the same protections. However, in such cases, we will make sure that any transfer of your personal data to countries outside of the EEA is subject to appropriate safeguards as if it were being processed inside of the EEA and under the guiding principles set out in this privacy notice.
  11. KEEPING YOUR PERSONAL DATA SAFE
    1. We take the security of your personal data very seriously and have put in place technical and organisation measures to help keep it safe from unauthorised access or disclosure as required by law and in accordance with good industry practice. For example, all information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
    2. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
    3. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
  12. RETENTION OF YOUR PERSONAL DATA
    1. We'll only retain your personal data for as long as is necessary for the purpose described in this policy. This means that retention periods will vary according to the type of data we have in the first place. For example, we'll hold on to your personal data for as long as you have your account, or as long as is needed to be able to provide the services to you but we may also keep hold of some of your personal data (even after you have closed your account) for fraud prevention and detection reasons.
  13. THIRD PARTY WEBSITES
    1. Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
  14. YOUR RIGHTS
    1. Please note, we take a firm stance on ticket touting and we take ticketing fraud very seriously. The law permits us to refuse a request to exercise your rights where we believe permitting you to exercise your rights may prejudice the prevention or detection of crime or the apprehension or prosecution of offenders.
    2. You may exercise any of the following rights in the following section regarding your personal data:
    3. Right to request the correction of inaccurate personal data
      1. You may request the correction of inaccurate personal data. In most instances this can also be done through the "my account" section.
    4. Right to ask us not to use your personal data for direct marketing purposes
      1. This can be done through the communication preferences part of "my account" or by clicking the "unsubscribe" link on marketing communication.
    5. Right to access
      1. You may request of copy of the personal data we hold about you (and in some circumstances, you can ask us to provide a copy to a third party).
    6. Right to be forgotten (account deletion)
      1. You may ask us to either permanently delete or temporarily stop using the personal data we hold about you and to close your Twickets account. Please note that we will do all we can to respect your right to have your personal data deleted where there is no good reason for us to continue to process it but there may be some circumstances where we will need to retain some personal data in accordance with applicable laws.
    7. Right to data portability
      1. You can ask us to have the personal data that you've provided to us provided to you in a structured and commonly-used electronic format.
    8. Right not to be subject to decisions made solely on the basis of "automatic processing"
      1. You may object to automated decision making which produces legal effects concerning you or similarly significantly affects you.
    9. Right to complain to your local regulator
      1. Residents of the European Union and certain other countries have the right to complain about our use of your personal data. Contact details follow.
      2. In the United Kingdom, you can contact the Information Commissioner's Office via their website: https://ico.org.uk/concerns/ or by calling 0303 123 1113.
      3. In Spain, you can contact the Spanish Agency for Data Protection (AEPD) via their website: https://www.aepd.es/ or by calling 901 100 099 - 912 663 517
      4. In Germany, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) via their website: https://www.bfdi.bund.de or you can contact a local data protection authority
      5. In France, you can contact the National Commission on Informatics and Liberty at https://www.cnil.fr
      6. In Austria, you can contact the Austrian Data Protection Authority via their website:
      7. In Ireland, you can contact the Data Protection Commission via their website: https://www.dataprotection.ie/
      8. In Switzerland, you can contact the Federal Data Protection and Information Commissioner via their website: https://www.edoeb.admin.ch
      9. In Australia, you can contact the Office of the Australian Information Commissioner (OAIC) via their website: https://www.oaic.gov.au/
      10. In New Zealand you can contact the Privacy Commissioner via their website: https://www.privacy.org.nz/
      11. In Canada you can contact the Office of the Privacy Commissioner of Canada via their website: https://www.priv.gc.ca/
  15. CHANGES TO OUR PRIVACY POLICY
    1. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
    2. This policy was last updated 04/2019
  16. CONTACT
    1. Questions, comments and requests regarding this privacy policy can be raised via our support page or by post at 47-50 Margaret Street, London, England, W1W 8SB, addressing your letter to Data Protection Officer.