Legal
Privacy Policy
Last updated: September 2026 · POPIA Compliant
1. Who We Are
TicketsZA (Pty) Ltd is a South African company operating the TicketsZA digital ticketing platform. We are the responsible party for the processing of your personal information as defined in the Protection of Personal Information Act, 2013 (POPIA).
2. Information We Collect
We collect your full name, email address, and ticket purchase history when you buy tickets through our platform. When you register as an event organiser, we additionally collect your organisation name, contact details, and banking information for payouts. We do not collect payment card details directly — payments are processed securely by our PCI-DSS compliant payment partners (Yoco and Paystack).
3. Purpose of Processing
Your personal information is processed for the following purposes: processing ticket purchases and issuing digital passes; delivering booking confirmations and ticket emails; providing customer support; verifying identity for organiser accounts; processing payouts to organisers; complying with applicable legal obligations. We do not use your information for unsolicited marketing without your explicit opt-in consent.
4. Legal Basis
We process your personal information on the following legal grounds under POPIA: performance of a contract (ticket purchase and delivery); legitimate interest (platform security and fraud prevention); consent (marketing communications, where applicable); and legal obligation (tax and financial record-keeping).
5. Data Storage & Security
Your data is stored in a PostgreSQL database hosted on secure, encrypted cloud infrastructure. We implement industry-standard encryption (TLS in transit, AES-256 at rest), role-based access controls, and regular security audits. Only authorised personnel with a legitimate business need can access personal information.
6. Sharing of Information
We do not sell, rent, or trade your personal information to third parties. We share limited information with: event organisers (your name and ticket reference for gate verification); payment processors (Yoco, Paystack) for transaction processing; email service providers (Resend) for ticket delivery; and law enforcement when required by a valid legal process.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Transaction records are retained for 5 years as required by South African tax legislation (Income Tax Act). You may request deletion of your account and associated data at any time, subject to legal retention requirements.
8. Your Rights Under POPIA
You have the right to: access your personal information held by us; request correction of inaccurate information; request deletion of your information (subject to legal retention requirements); object to processing of your information; withdraw consent for marketing; and lodge a complaint with the Information Regulator. To exercise these rights, email privacy@ticketsza.co.za. We will respond within 30 days.
9. Cookies & Analytics
TicketsZA uses essential session cookies to maintain your login state and booking flow. We use Google Analytics to understand how visitors use our Platform — including page views and user journeys. Form inputs such as names, emails, and payment-related fields are not captured by analytics. We do not use third-party advertising or tracking cookies.
10. Children's Information
TicketsZA does not knowingly collect personal information from children under the age of 18 without parental consent. If we become aware that we have collected information from a child without appropriate consent, we will delete it promptly.
11. Cross-Border Transfers
Some of our service providers (cloud hosting, email delivery) may process data outside South Africa. Where this occurs, we ensure adequate safeguards are in place as required by Section 72 of POPIA, including contractual protections and the use of providers in jurisdictions with comparable data protection laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Platform. Continued use after changes constitutes acceptance of the updated policy.
13. Information Officer
For privacy-related queries or to exercise your POPIA rights, contact our Information Officer at privacy@ticketsza.co.za or write to: The Information Officer, TicketsZA (Pty) Ltd, South Africa.
Other policies