Boxoffix Ticketing Co. is the controller responsible for the personal information handled through the Service. This Policy covers information we collect from buyers and visitors across our website, mobile apps, checkout, customer support and related communications. It does not cover the independent practices of third parties we link to or work with, such as venues, event organisers or payment providers, which have their own privacy policies.
[TO CONFIRM] Legal entity name, registered address and the identity/contact of any data protection officer or EU/UK representative to be verified by Boxoffix before launch.We collect information in three ways: information you give us, information we collect automatically, and information we receive from others.
| Category | Examples |
|---|---|
| Account & identity | Name, email address, phone number, password, and account preferences you provide at sign-up or in your profile. |
| Order & transaction | Events and tickets you view or buy, quantities, order numbers, delivery details, order history and support requests. |
| Payment | Billing name, billing address and the last four digits / card type returned by our payment processor. Full card numbers are entered directly with the processor and are not stored on our servers. |
| Device & usage | IP address, device and browser type, operating system, referring pages, pages viewed, and interactions with the Service, collected via cookies and similar technologies. |
| Communications | Messages you send us, support-chat and email content, and records of your marketing preferences and consents. |
| From third parties | Fraud-prevention and identity-verification signals, and information from partners who help us source, deliver or verify tickets. |
We use personal information to:
Where the law requires a legal basis (for example in the UK/EU), we rely on performance of our contract with you, our legitimate interests in running a secure marketplace, your consent (for certain marketing and cookies), and compliance with legal obligations.
We and our providers use cookies, local storage and similar technologies to keep you signed in, remember your cart and preferences, secure the Service, understand how it is used, and — where permitted — measure marketing. Some cookies are strictly necessary for the Service to work; others are optional. You can control non-essential cookies through your browser settings and, where offered, our cookie controls. Blocking some cookies may affect how parts of the Service function.
[TO CONFIRM] Whether a cookie-consent banner / preference centre and specific analytics or advertising tools (e.g. analytics, pixels) are used, to be finalised before launch.We share personal information only as needed and never sell it. We may share it with:
Card payments are processed by our third-party payment provider under its own terms and security standards. When you pay, your card details are collected directly by that provider; Boxoffix receives confirmation of the transaction and limited data such as the card type and last four digits, and does not store full card numbers on its own servers. The payment provider processes your information as an independent controller for fraud-prevention and regulatory purposes in addition to processing on our behalf.
[TO CONFIRM] Named payment processor(s) and their privacy policy link to be inserted before launch.We keep personal information for as long as your account is active and as needed to provide the Service, and afterwards only as necessary to meet legal, tax, accounting, fraud-prevention and dispute-resolution obligations, or to enforce our agreements. Retention periods vary by data type and legal requirement; when information is no longer needed, we delete or anonymise it.
Depending on where you live, you may have rights to: access the personal information we hold about you; correct inaccurate information; delete it; obtain a portable copy; object to or restrict certain processing; and withdraw consent where processing is based on consent. You can exercise many choices directly in your account settings, or contact us using the details in Section 16. We will verify your request and respond within the time required by applicable law. You will not be discriminated against for exercising your rights, and you may appeal a decision or complain to your local data-protection authority.
We may send you service-related messages (such as order confirmations and delivery updates), which are necessary to your purchases and cannot be opted out of while you have an active order or account. Where permitted, we may also send marketing messages; you can opt out at any time using the unsubscribe link in those messages or your account preferences, without affecting service messages. If you contact support, we may keep records of the interaction for quality, training and security.
We use administrative, technical and organisational measures — including encryption in transit, access controls and monitoring — designed to protect personal information against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password confidential and tell us promptly if you believe your account has been compromised.
Boxoffix operates internationally, and your information may be processed in, or transferred to, countries other than the one you live in, including where our providers and fulfilment partners operate. Those countries may have different data-protection laws. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal information.
The Service is intended for adults and is not directed to children under 18 (or the age of majority where you live). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take reasonable steps to delete it.
The Service may contain links to third-party websites and services — such as venues, mapping, or the payment provider — that are not operated by us. We are not responsible for their content or privacy practices. Review the privacy policies of any third-party site you visit.
If you are a resident of California or another U.S. state with a consumer-privacy law, you may have rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the "sale" or "sharing" of personal information and certain targeted advertising. We do not sell your personal information and do not knowingly share it for cross-context behavioural advertising in exchange for value. You may exercise your rights, or appeal a denial, using the contacts in Section 16, and you will not be discriminated against for doing so. You may use an authorised agent to submit a request, subject to verification.
[TO CONFIRM] State-specific disclosures (categories collected/disclosed in the prior 12 months, retention specifics, and any "Do Not Sell/Share" mechanism) to be finalised with counsel before launch.We may update this Privacy Policy from time to time. If we make material changes we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.
For questions about this Policy or to exercise your privacy rights, contact us at support@boxoffix.com. We will respond within the time required by applicable law.
[TO CONFIRM] Privacy contact address / DPO and support email above to be verified by Boxoffix.