1. What we collect
- Account data: name, email, phone, country, profile photo.
- Purchase data: orders, tickets, payment status and the last digits or wallet reference from the provider. We never store full card numbers.
- Event data: scans, check ins, seats, registrations and survey answers.
- Organizer data: business details, KYC documents and settlement accounts.
- Device and usage data: IP address, browser, pages viewed, and cookies where you consent.
2. Why we collect it and how we use it
- Ticketing operations: issuing, validating and transferring tickets, and support.
- Fraud prevention: detecting duplicate scans, suspicious payments and fake accounts.
- AI personalisation: recommending events based on your activity. You can turn this off.
- Marketing: newsletters and offers only with your consent. You can unsubscribe at any time.
- Legal and financial obligations: tax, accounting and law enforcement requests.
4. Your rights
- Access and download your data from Account, Privacy.
- Correct your details in your profile or through support.
- Delete your account. Some records stay anonymised where the law requires it.
- Manage consent for cookies, marketing and personalisation at any time.
- Complain to your data protection authority, in Uganda the Personal Data Protection Office.
5. How we protect it
- Encryption in transit and at rest; signed, encrypted ticket payloads.
- Role based access control, row level security and audit logs on sensitive records.
- Multi factor authentication for staff and privileged accounts.
- Regular reviews and a documented incident response process.
6. Retention and transfers
We keep data only as long as needed for the purposes above or as the law requires, then delete or anonymise it. Data may be processed outside your country with safeguards such as contractual clauses.
7. Contact
Data protection enquiries: privacy@zeraket.com or legal@zeraket.com.
Related policies