Privacy Policy

1. Who we are and what this policy covers? #

Data fiduciary

Sporfy Technologies Private Limited, Sporfy Activity Centre (SAC01), opp. to MNC Matriculation School, Velayutham Nagar, Muthalipalayam, Neelambur, Tamil Nadu 641407

Privacy contact

support@ticketprix.com or hello@ticketprix.com

Grievance Officer

Muthaiah Thiagarajan, 044 40115066, muthu@sporfy.com. See Grievance Officer and contact.

1.1 The laws we follow #

We follow the Digital Personal Data Protection Act, 2023 and the rules made under it, as they come into force. We also follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020. "Personal data" means any data about an individual who can be identified from it.

1.2 Who this policy covers? #

• Buyers: people who browse, book tickets, join courses or online events, use rewards, or talk to our assistants.
• Organizers and their teams: people who list and sell events and use the publisher console or an organizer website.
• Brands and Creators: people who use the ads console or the creator programme.
• Partners: affiliate partners, country and channel partners, and integration partners.
• Visitors: anyone who uses the Platform without an account.

Words with capital letters, such as Organizer, Brand, Creator and Coins, have the meaning given in the Terms of Service.

2. What we collect, and where it comes from? #

2.1 Sensitive data #

We do not ask for health, religion, caste or similar information. Some organizers ask for information they need for safety, such as an emergency contact or an allergy, in their own forms. If you give it, it goes to that organizer. Please give only what you are comfortable sharing. Financial data in our systems is limited to order and payment references and payout bank details; the payment gateway handles your payment instrument.

2.2 Other people's data #

If you enter details of another person, for example when you book for friends or family, you confirm that you have the right to do so. If you tell us someone else's data was given without their permission, we will act on it.

3. Why we use your data, and our basis? #

Under the Digital Personal Data Protection Act, 2023 we use personal data with your consent, or for the limited "legitimate uses" the Act allows, such as to give you a service you asked for, to meet a legal duty, or to respond to an emergency. Under the SPDI Rules, 2011 we take your consent for the data we collect and the purpose.

3.1 Withdrawing consent #

You can withdraw consent at any time. See Your rights and choices. Withdrawing does not affect use that happened before. If a service needs the data to work, we may no longer be able to give that service, for example we cannot deliver a ticket without a contact.

3.2 Notice at the point of collection #

Where we collect your data in a form or screen, that screen tells you what we need and why, and this policy gives the full notice. If you cannot read English, you can ask us for the notice in another language listed in the Eighth Schedule to the Constitution of India, where the law gives you that right.

4. Who receives your data: organizers, brands, creators and partners? #

4.1 Organizers and others as separate data fiduciaries #

When an organizer receives your data to run its event, the organizer decides how to use it. It is a separate data fiduciary and has its own duties under law. We require organizers in our Terms of Service to use attendee data only to run the event and for lawful purposes, to keep it secure and to respect your rights. Contact the organizer directly about what it does with your data. Brands, creators and partners are also responsible for the data they receive from you or generate themselves.

4.2 Organizer websites #

When you buy on an organizer's own website that runs on ticketprix, the organizer is the main data fiduciary for the visit and for the data collected by its own tags. We process the Order and payment for the Platform as set out here. The organizer's privacy notice on its website explains its own use.

4.3 Organizer tracking tags #

On plans that allow it, organizers can add their own Meta Pixel, Google Analytics 4, Google Tag Manager or similar tags to an event page. If an organizer does so, that organizer collects data about your visit on that page and is responsible for it. See Cookies.

4.4 We do not sell your personal data #

We do not sell your personal data. We do not give advertisers a list of people. We may share data as this policy says and with a buyer of the business, as set out in Other disclosures.

5. Service providers and sub-processors #

We have contracts with our providers that limit how they can use your data and require them to protect it. We update this list when we add or change a provider in a way that matters to you. The list names a provider only when we use it for that purpose.

6. Advertising and personalisation #

6.1 Contextual and personalised ads #

• Contextual ads are chosen from the page and city you are on. They do not use your history.
• Personalised ads can also use your interests, groups an advertiser chose, and your bookings. They are on by default for signed-in people until you turn them off.
• If you turn personalised ads off, ads are picked only from the page and city you are on.
• We do not knowingly track the behaviour of children or direct targeted ads at anyone we know is under 18.

6.2 What we use for ads? #

To show and measure ads we use the page you are on, your city, device and browser details, a random visitor identifier stored in a cookie, how often an ad has been shown to you, and your interactions with ads (shown, clicked, claimed, hidden, reported). If personalised ads are on, we may also use your interests, audience groups and booking history. Brands receive aggregated reports, not your identity.

6.3 Your ad controls #

• Why this ad. Open it under any ad to see why you got it.
• Report this ad. Pick a reason (misleading, offensive, not relevant, scam, prohibited content, or other). Your report is sent to us with the ad it is about.
• Hide ads from an advertiser. Available when you are signed in. You can show them again in Ads and offers preferences.
• Ads and offers preferences. In your account, go to Ads and offers preferences. You can turn off personalised ads and popups (the city popup and stories on the home page), and choose whether sponsored offers can appear in emails and WhatsApp messages we send you. Email and WhatsApp offers are off until you turn them on.
• Frequency caps. We use your browser's storage to remember that you saw or closed a popup, story or side-rail ad, so that you do not see it too often. If your browser blocks this storage, we show you fewer of these ads.

Ads on third-party sites and social media for ticketprix, which we run through Meta and Google tags, are subject to those platforms' own settings. You can change them in your Meta or Google ad settings.

7. Cookies and similar technologies #

Cookies are small files that a site places in your browser. We also use browser storage (localStorage and sessionStorage), which works the same way. Together we call these "cookies" in this policy.

7.1 How to control cookies? #

• Use your browser settings to block or delete cookies and site storage. If you block strictly necessary items, you may not be able to sign in or complete a booking.
• Turn off personalised ads and popups in Ads and offers preferences in your account.
• Use the settings of Meta and Google to limit ads from those platforms, and Microsoft's controls for Clarity.
• Choose your device's advertising and tracking options on mobile.

8. Messages we send you #

• Service messages (sign-in codes, tickets, reminders, changes, refunds, invoices and security notices) go by email, SMS, WhatsApp, RCS and app notifications to the details on your account. You cannot opt out of these while you hold an order or account.
• Promotional messages (offers, new event alerts, abandoned-order reminders and sponsored offers) go only where you agreed or the law allows. By continuing to checkout you also agree that we may send service messages about your order by SMS, RCS, WhatsApp and email.
• WhatsApp. If you opt in, we send messages from our official WhatsApp Business account named Sporfy Technologies Private Limited, to the number you used to sign in. You can opt out in the chat.
• Email. Use the unsubscribe link in any promotional email.
• SMS and other channels. Follow the opt-out instructions in the message, or change your choices in Ads and offers preferences.
• Organizers. An organizer may also message you about the event you booked, or, if you agreed, about its other events. Contact the organizer to stop those.

9. Other disclosures #

• Law and authorities. We disclose personal data to courts, regulators, tax authorities, police and other government bodies when the law requires it or when we have a good-faith belief that it is needed to comply with a legal duty, an order or a lawful request.
• Safety and rights. We may disclose data to protect the life, health or safety of a person, to prevent or investigate fraud, abuse or security problems, and to establish, exercise or defend legal claims.
• Business changes. If we merge with, are bought by or sell part of our business to another company, personal data may be transferred to it. We will tell you if it changes who is responsible for your data, and the new owner must follow this policy or give you notice of a new one.
• Group companies. We may share data with companies in our corporate group that help us run the Platform, under this policy.
• With your direction. We share data where you ask us to, for example when you connect a service or claim a partner's offer.

10. International transfers #

• Parts of our service are hosted and managed on cloud infrastructure and by providers that may be located outside India. Your personal data may be accessed from or stored in those places.
• We transfer personal data outside India only as the Digital Personal Data Protection Act, 2023 and the rules under it allow, and we use contracts that require the receiving company to protect it.
• If you buy tickets for an event outside India, or from outside India, your data goes to the organizer and our providers in the places they work.
• Country and channel partners who run ticketprix in another country handle buyer data in that country under a data processing agreement that follows the local law.

11. How long we keep data? #

We do not keep data for a fixed time that is the same for everything. We decide by these rules: how long you have an account; how long an order, refund or dispute can still be raised; how long the law requires us to keep records; whether the data is needed to prevent fraud or to protect our legal position; and whether you have withdrawn your consent or asked us to delete data.

Even after you delete your account, we may keep data that the law requires, that we need to handle a dispute, or that is already part of a record other people can see, such as an invoice. If you want a shorter retention for something we hold, write to us.

12. How we protect data? #

• Encryption in transit. The Platform and our APIs use encrypted connections (HTTPS).
• Access control. Only people who need the data to do their job can reach it. Access is by role, and organizer team access is by the roles the organizer gives.
• Sign-in and tokens. You sign in with a one-time code. Sessions use short-lived tokens, and we expire sessions and tokens.
• Payments. Payment details are handled by PCI-compliant payment gateways. We do not store your full card number.
• Vendors. We choose providers with care, limit what they can access and require them to protect data.
• Monitoring. We watch for suspicious orders, fraud and refund abuse.
• What you can do. Do not share your one-time code. Log out of shared devices. Tell us at once if you see anything unusual.

We take reasonable steps in line with the SPDI Rules, 2011 and the Digital Personal Data Protection Act, 2023. We do not claim any specific security certification in this policy.

13. Your rights and how to use them #

13.1 How we respond? #

• We may need to check that you are the person the data is about before we act. We may ask you to confirm through the number or email on the account.
• We acknowledge your request within 48 hours and aim to answer it within one month. If the law sets a different or shorter period, we follow it. We may take longer for complex requests and will tell you why.
• Some requests we cannot complete in full. For example we must keep invoices and records that the law requires, and we cannot delete an organizer's own copy of attendee data. We will explain what we kept and why.
• We do not charge for a rights request unless it is clearly excessive or repeated.

You have duties too. You must give accurate details, and must not file false complaints.

14. Children's data #

• You must be 18 or older to create an account or make a booking.
• A parent or guardian may book tickets for a child. The details of the child come from the parent or guardian, who accepts this policy and gives consent for the child.
• Where the law requires verifiable consent of a parent or guardian to handle a child's data, we ask for it. We do not run tracking or behavioural monitoring of children, and we do not direct targeted advertising at them.
• If you believe that a child under 18 has an account or that we hold a child's data without proper consent, write to support@ticketprix.com and we will act on it.
• Organizers of age-restricted events must respect the age limit. Some check ID at the door.

15. Data breaches #

If there is a personal data breach, we investigate and contain it, and we notify the Data Protection Board of India and the people affected in the way and within the time the Digital Personal Data Protection Act, 2023 and the rules under it require. We also report to the Indian Computer Emergency Response Team (CERT-In) as the Information Technology Act, 2000 and its directions require. A notice to you says what happened, what data was involved, what we are doing, and what you can do.

16. Links to other sites and services #

The Platform links to and works with other services, such as organizer websites, brand offers, payment pages, meeting and video platforms, maps and social platforms. Their own privacy policies apply once you leave the Platform or use them. We do not control them and are not responsible for their privacy practices. Please read their policies.

17. AI assistants and automated decisions #

• Idhal answers questions and helps buyers with bookings in chat, including on WhatsApp. Imai helps organizers and brands by chat or voice.
• We store your conversations with these assistants, and the context needed to answer, such as the event page you are on. Your messages may be processed by the AI model providers and the chat service that run the tools.
• We may review conversations, and use them in a limited way to improve the service, to investigate problems and to keep the Platform safe. Please do not put sensitive details in a chat.
• AI answers can be wrong. An assistant cannot change our terms or decide a refund. A person reviews disputes.
• We also use automated tools for fraud and refund-abuse checks, search and ad ranking, ad checks that form part of an ad review, and an organizer credibility score for early settlement. The results of scratch cards, wheels and slots are drawn by our servers. If an automated decision affects you in a significant way, you can ask us to review it. Write to support@ticketprix.com and a person will look at it.

18. If you are outside India #

ticketprix is based in India and the Platform is governed by Indian law. If you are in the European Economic Area, the United Kingdom or another place with its own data protection law, you may also have rights in that law, such as access, correction, erasure, restriction, objection, portability and withdrawing consent, and the right to complain to your local data protection authority. To use them, write to support@ticketprix.com. Where a country partner runs ticketprix in your country, it handles your data in that country under local law. We do not claim any certification or adequacy status for our service.

19. Changes to this policy #

We may update this policy as our service or the law changes. The version, the effective date and the last updated date are at the top of this page. For material changes we give reasonable notice by email, in the Platform or on this page. If a change needs your consent, we ask for it. We use your personal data in the way this policy said when you gave it to us, unless you agree to a change. Earlier versions are available on request.

20. Grievance Officer and contact #

In line with the Information Technology Act, 2000, its rules, the Consumer Protection (E-Commerce) Rules, 2020 and the Digital Personal Data Protection Act, 2023, the Grievance Officer and data protection contact is:

Name

Muthaiah Thiagarajan

Phone

044 40115066

Email

muthu@sporfy.com

Company

Sporfy Technologies Private Limited, Sporfy Activity Centre (SAC01), opp. to MNC Matriculation School, Velayutham Nagar, Muthalipalayam, Neelambur, Tamil Nadu 641407

Support

support@ticketprix.com, hello@ticketprix.com, phone 044 40115066, Monday to Saturday, 10 AM to 6 PM Indian Standard Time

Please include the mobile number or email on your account, what you want us to do, and any order number. If you are not satisfied, you can approach the Data Protection Board of India or another authority the law names. Our wider complaint process is in the Terms of Service.