Privacy Policy

Welcome to Pata Ticket ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our event ticketing platform.

By accessing or using Pata Ticket, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

This policy complies with data protection regulations including the General Data Protection Regulation (GDPR) and the Kenya Data Protection Act, 2019.

• To process ticket purchases and manage your orders
• To verify your identity and prevent fraud
• To provide customer support and respond to inquiries
• To send event updates, booking confirmations, and important notifications
• To improve our platform and develop new features
• To comply with legal obligations and enforce our terms of service
• To analyze platform usage for security and optimization purposes

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our service agreement with you when you purchase tickets
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: To improve our services and prevent fraud
• Consent: Where required, we obtain your explicit consent for specific processing activities

We use essential cookies and similar technologies to:

• Maintain your session and login state
• Remember your preferences and settings
• Analyze platform performance and usage patterns
• Prevent fraudulent activities

We do not use cookies for cross-site tracking or third-party advertising purposes. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

All payment transactions are processed through M-Pesa, Airtel, Till, Bank, Paystack, PayPal, a globally recognized and secure payment processor. When you make a payment:

• You are redirected to PayPal's secure payment page
• Your payment details are encrypted and processed directly by PayPal
• We only receive confirmation of payment and transaction details
• We never have access to your full card details or PayPal password

PayPal's privacy policy governs their handling of your payment information. We encourage you to review PayPal's Privacy Policy.

We share your information only in the following circumstances:

• Event Organizers: Necessary information for event access and management
• Service Providers: Trusted partners who assist in platform operation (payment processors, hosting services)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third parties are contractually obligated to protect your data and use it only for specified purposes.

Your ticket contains a unique QR code that includes:

• Ticket reference number
• Event details and purchase verification
• Unique identifier for validation purposes

The QR code is scanned at event entry for validation. Scan data is temporarily stored for verification and fraud prevention. Event organizers receive confirmation of valid ticket scans but not your full personal details unless required for the specific event.

We retain your personal data only as long as necessary:

• Account data: While your account remains active or as required by law
• Transaction records: 7 years for tax and legal compliance
• Event-related data: Until 60 days after the event conclusion
• Inactive accounts: Deleted after 2 years of inactivity

You may request earlier deletion of your data, subject to legal requirements.

We implement robust security measures including:

• End-to-end encryption for data transmission
• Secure server infrastructure with regular security updates
• Access controls and authentication protocols
• Regular security audits and vulnerability assessments
• Employee training on data protection best practices

While we implement industry-standard security measures, no electronic transmission or storage method is 100% secure. We encourage you to use strong passwords and protect your login credentials.

Pata Ticket is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

For events targeting children, tickets must be purchased by parents or legal guardians, and any collected information is treated with additional safeguards.

Your data may be transferred to and processed in countries other than Kenya, including the European Union and United States. We ensure such transfers comply with applicable data protection laws through:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions where applicable
• Appropriate technical and organizational safeguards

We may update this Privacy Policy periodically. When we make material changes, we will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify registered users via email for significant changes
• Provide advance notice when required by law

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner in Kenya if you believe your data protection rights have been violated.