Privacy Policy

1. Introduction

This Privacy Policy explains what information TicketLover Marketplace LLC ("TicketLover", "we", "us") collects, how we use it, and the choices you have. It applies to the TicketLover website, mobile experience and any related services.

We collect only what we need, store it securely, and never sell personal information to third parties.

2. Information we collect

Account information you provide directly: name, email, phone, password (hashed), profile photo, billing address and payout details.

Transaction information: orders, listings, payments, refunds, ticket delivery details and chargeback records.

Device and usage information collected automatically: IP address, browser type, pages viewed, referrer, device identifiers and approximate location (based on IP).

Communication: messages you send to support, reviews you post, and any content you upload to the marketplace.

3. How we use information

To operate the marketplace — process orders, deliver tickets, calculate payouts, send order confirmations and security alerts.

To protect users — detect fraud, enforce the Terms of Service, comply with legal obligations and investigate abuse.

To improve the service — analyse usage trends, debug issues, test new features and personalise recommendations (e.g. suggested events).

To communicate — service notices, marketing emails (only if you opt in) and responses to your support requests.

4. Sharing & disclosure

Sellers see the information necessary to fulfil your order (name and delivery contact). Buyers see the seller's display name and rating.

Trusted vendors (payment processors, email delivery, fraud detection) process data on our behalf under strict contractual safeguards. They are not permitted to use your information for any other purpose.

Legal requests: we may disclose information when required by law, court order or to protect the rights and safety of users.

Business transfers: in the event of a merger, acquisition or sale of assets, user information may transfer to the successor entity under the same Privacy Policy commitments.

5. Cookies & similar technologies

We use first-party cookies to keep you signed in, remember your preferences, and measure how the site is used. Third-party cookies (analytics, fraud prevention) are used sparingly and may be disabled in your browser settings.

You can manage cookie preferences at any time via the cookie banner or your browser settings. Disabling essential cookies may impair certain features.

6. Your rights & choices

Access & portability: you can download your account data from your account settings at any time.

Correction: update your profile information directly in the account settings, or contact support.

Deletion: you may request account deletion via support. We will close your account within 30 days of confirmation, retaining only the records required by law or for fraud prevention.

Marketing opt-out: every marketing email contains an unsubscribe link. Service notices about your orders cannot be opted out of while you have an active account.

EU/UK residents have additional rights under GDPR; California residents have additional rights under CCPA — including the right to know, delete and opt out of any sale of personal information (we do not sell).

7. Data security

All data is encrypted in transit (TLS 1.2+) and at rest. Sensitive payment data is tokenised and stored only by PCI-compliant processors.

We use multi-factor authentication for our team accounts, regular penetration testing, and follow industry best practices for vulnerability management.

No system is perfectly secure. If we ever discover a breach affecting your data, we will notify you and the appropriate authorities within the timeframes required by law.

8. Data retention

We retain account information for as long as your account is active, and for up to 7 years after closure to comply with financial, tax and anti-fraud obligations.

Aggregated and anonymised data may be retained indefinitely for analytics and product improvement.

9. International transfers

TicketLover is operated from the United States. If you access the service from outside the US, your information will be transferred to and processed there. We use Standard Contractual Clauses or equivalent safeguards for transfers from the EEA, UK and Switzerland.

10. Children

TicketLover is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email and in-app notification at least 14 days before they take effect.

12. Contact our privacy team

Questions, requests or complaints? Email info@ticketlover.org with "Privacy" in the subject line, or write to our Data Protection Officer at TicketLover Marketplace LLC, 222 Liberty Street, Suite 14, New York, NY 10006.