Privacy policy

1Who we are

TicketQuill ("we", "us", "our") is an event discovery and ticketing platform operated by [Company legal name], [registered address]. We help organisers publish events and sell tickets, and we help people find events and book them.

This policy explains what personal data we collect, why we collect it, who we share it with, and the choices you have. It applies to our website and services for everyone who uses TicketQuill, whether as an attendee, an organiser or a visitor. For privacy questions, contact us at [privacy email].

2Information we collect

We collect only what we need to run the platform. The table below shows the main types of data.

3How we use your information

• Create and manage your account and keep it secure.
• Process orders, confirm payments and issue digital tickets with unique codes.
• Let organisers manage their events and check in attendees.
• Send service messages, such as order confirmations and important changes to an event you booked.
• Send our newsletter, only if you subscribed. You can unsubscribe at any time.
• Detect and prevent fraud, abuse and security incidents.
• Understand how the platform is used so we can improve it.
• Meet our legal and accounting obligations.

4Our legal basis for using data

Under the Nigeria Data Protection Act 2023 and similar laws, we need a lawful basis to use your data. Depending on the situation, we rely on:

• Contract: to provide the account, tickets and services you asked for.
• Consent: for things like our newsletter and non-essential cookies. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep records or respond to authorities.
• Legitimate interests: to secure and improve the platform, where this does not override your rights.

5Who we share data with

We do not sell your personal data. We share it only in these situations:

• Event organisers: when you buy a ticket, the organiser of that event can see your name, email and ticket details so they can run the event.
• Service providers: companies that help us operate, such as hosting, database, email and payment providers. They may only use data to provide their service to us.
• Authorities and advisers: when the law requires it, or to protect rights, safety and security.
• Business changes: if we merge with or are acquired by another business, your data may transfer under the same protections.

6Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and the site working. If we add analytics or other optional cookies, we will ask for your consent first where the law requires it. See our Cookies page for details and how to manage them.

7International transfers

Some of our service providers may process data outside Nigeria. When that happens, we take steps to make sure your data stays protected, for example through contracts and checks on the provider's security and data protection practices.

8How long we keep data

We keep personal data only as long as we need it for the purposes above:

• Account data is kept while your account is active and deleted or anonymised after you close it, unless we must keep some of it.
• Order, ticket and payment records are kept as long as needed for accounting, tax and dispute purposes.
• Newsletter details are kept until you unsubscribe.
• Support messages are kept for a reasonable period so we can help you and improve our service.

9How we protect your data

We use reasonable technical and organisational measures to protect personal data, including encrypted connections, access controls and restricting data to people who need it. No system is completely secure, so please use a strong, unique password and tell us straight away if you think your account has been compromised.

10Your rights

You have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete your data, where the law allows.
• Object to or ask us to restrict certain uses of your data.
• Ask for your data in a portable format.
• Withdraw consent at any time, without affecting what happened before.

To use any of these rights, email [privacy email]. We may need to confirm your identity first, and we will reply within the time the law requires. If you are unhappy with how we handle your data, you can also complain to the Nigeria Data Protection Commission.

11Children's privacy

TicketQuill is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12Changes to this policy

We may update this policy from time to time. When we make an important change, we will update the date at the top of this page and, where appropriate, tell you by email or a notice on the site.