Legal

Privacy policy

Last updated 2026. Plain English, on purpose.

Who we are

Ticketz is run by Kalchevo (kalchevo.com), a UK web hosting company. We provide the ticketing software; each organiser runs its own events and sells its own tickets. In data protection terms the organiser is the controller of its buyers' data and we are the processor acting on their instructions. For organiser accounts themselves (your login, your settings, your billing) we are the controller.

What we collect

Organiser accounts: your name, email, phone, organiser details, settings, staff logins and your Stripe account id (not your bank details, which stay with Stripe).

People buying tickets: name, email address, phone number if the organiser asks for it, what they bought, any answers the organiser asks for at checkout (for example dietary needs or guest names), and whether they ticked a mailing list box. We also store the IP address of the order to prevent abuse. Each ticket carries a random code; scanning it at the door records the time and which login scanned it.

Payments: card payments are taken by Stripe on a page Stripe hosts. We never see or store card numbers. Stripe sends us the payment's reference and status so we can issue the tickets and process refunds. Stripe is a payment processor in its own right and has its own privacy policy at stripe.com/privacy. Organiser subscriptions and credit bundles are paid through PayPal in the same way.

Technical: server logs and a session cookie that keeps you logged in and protects forms. We do not use advertising trackers.

How we use it

To sell and issue the tickets, send the ticket, reminder, change, cancellation and refund emails (and texts, if the organiser switches them on), alert the organiser, stop spam and keep a record of what was sold. We keep an email log (recipient, subject, status) so failed emails can be spotted.

Sharing

Order details are shared with the organiser you bought from. Payment details go to Stripe. Emails are sent through our mail provider or, if the organiser chooses, through their own. Texts go through our SMS providers. Push notifications go through your browser's push service. If you tick the box to hear from Ticketz we keep your email on our own list, confirmed by a link in an email, with an unsubscribe link in every message. We do not sell data to anyone, and our partner directory sites never receive buyer data.

Keeping and deleting data

Orders and tickets are kept so organisers can see their history and handle refunds and disputes. Buyers can ask the organiser to delete their details, and organisers can ask us to delete their account and data at any time via the contact page. Backups are kept for a limited time and then removed.

Cookies

One session cookie to keep you logged in or to protect forms. Stripe sets its own cookies on its checkout page. Cloudflare Turnstile, if enabled, may set a cookie to tell humans from bots.

Your rights

You can ask for a copy of your data, ask us to correct it or delete it. Contact us via the contact page. If you bought a ticket, the organiser is the controller and may need to be involved. If you are unhappy with how we handle data you can complain to the ICO.