**Effective Date:** 2/12/2026 This Privacy Policy describes how Tickket ("we", "us", or "our") collects, uses, and discloses your information in compliance with the **Nigeria Data Protection Regulation (NDPR) 2019** and other applicable laws.
1. Who We Are (Data Identity)
For the purpose of the NDPR, Tickket acts as:
Data Controller: When we collect your account data (Name, Email, Bank Details) for registration and payouts.
Data Processor: When we process attendee or voter data on behalf of an Event Organizer (the Data Controller).
2. Information We Collect
We collect information to provide our services, including:
Personal Data: Name, email address, phone number, and bank account details (for organizers).
Transaction Data: Payment history, ticket purchases, and voting records. Note: We do not store card details; these are processed securely by Paystack.
Device Data: IP address, browser type, and operating system for security and fraud prevention.
3. Lawful Basis for Processing
Under the NDPR, we process your data based on:
Contractual Performance: To process your ticket orders, votes, and payouts.
Legal Obligation: To comply with financial regulations (KYC) and tax laws.
Legitimate Interest: To prevent fraud and improve our platform security.
Consent: For marketing communications (which you can withdraw at any time).
4. Your Rights (NDPR)
You have specific rights regarding your personal data:
Right to Access
Request a copy of the data we hold about you.
Right to be Forgotten
Request deletion of your account and associated data.
Right to Rectification
Correct inaccurate or incomplete personal data.
Right to Object
Object to processing for direct marketing purposes.
5. Data Retention
We retain your data only as long as necessary. Financial transaction records are strictly kept for 6 years as required by Nigerian financial and tax regulations.
6. Contact Our Data Protection Officer (DPO)
If you have any questions or wish to exercise your rights, please contact our DPO: