Privacy Policy

1. Introduction

ETICKETSY LLC is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what information we collect, how we use it, and the rights you have under the Privacy Act 2020 and the Information Privacy Principles (IPPs).

2. Information We Collect

• Identity and contact details: first name, last name, email address, phone number.
• Payment information: processed by our payment provider Stripe; not stored by ETICKETSY LLC.
• Internet activity: cookies, IP address.
• Order information: details of the tickets purchased and the events selected.

3. How We Use Your Information

• Processing orders and delivering tickets.
• Managing our customer relationship and after-sales support.
• Sending tickets by email.
• Marketing communications, subject to your prior consent (you can unsubscribe at any time, as required by the Unsolicited Electronic Messages Act 2007).
• Improving our services and the user experience.
• Complying with our legal and regulatory obligations.

4. Why We Process Your Information

• Performance of the contract: processing necessary to provide the services you ordered.
• Consent: for marketing communications.
• Legitimate business purposes: improving our services and preventing fraud.
• Legal obligations: compliance with applicable laws and regulations.

5. Who We Share Your Information With

• Internal teams of ETICKETSY LLC for order management.
• Service providers: hosting provider (OVH), payment provider (Stripe), email delivery service.
• Event organisers, only where necessary to perform the contract.

We do not sell your personal information.

6. How Long We Keep Your Information

We keep your information for as long as necessary for the purposes for which it was collected, in particular:

• Order information: 5 years from the date of the event.
• Browsing data: 13 months for cookies.
• Marketing data: until you withdraw your consent.

7. Disclosure of Your Information Outside New Zealand

ETICKETSY LLC is established in the United States. Your personal information is disclosed to and processed in the United States, in particular by our payment provider Stripe and our partner Serenity AI, and in France and Ireland by our hosting providers. In accordance with Information Privacy Principle 12, we take reasonable steps to ensure that overseas recipients are subject to privacy safeguards comparable to those of the Privacy Act 2020. Please read our Data Transfer page for more details.

8. Your Rights

• Right to access: obtain confirmation that we hold your information and a copy of it.
• Right to correction: ask us to correct inaccurate, out-of-date or incomplete information.
• Right to deletion: ask us to delete your information, subject to legal exceptions.
• Right to withdraw consent: unsubscribe from marketing at any time.
• Right to complain: to us first, then to the Office of the Privacy Commissioner (privacy.org.nz) if you are not satisfied with our response.

To exercise these rights, email us at [email protected]. We will respond within 20 working days, as required by the Privacy Act 2020.

9. Cookies

We use different types of cookies:

• Essential cookies: required for the website to function.
• Analytics cookies: to analyse how the website is used and improve our services.
• Marketing cookies: to personalise advertising.

You can manage your cookie preferences through your browser settings.

10. Data Security

We implement technical and organisational measures to protect your information, including HTTPS encryption and strict security protocols. In the event of a notifiable privacy breach, we will notify you and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. We will inform you of any changes through our website or by email.

12. Contact

For any question about the protection of your information, you can contact our privacy officer at [email protected].