Privacy Policy

1. Introduction

HOW TICKETS is committed to protecting the privacy and security of your personal data. As data controller, we ensure that your information is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Collected

• Identification data: name, surname, email address, telephone number.
• Payment data: processed by our provider Stripe, not stored by HOW TICKETS.
• Browsing data: cookies, IP address.
• Order data: details of tickets purchased, events selected.

3. Purposes of Processing

• Processing orders and delivering tickets.
• Customer relationship management and after-sales service.
• Sending tickets by email.
• Marketing communications, subject to your prior consent.
• Improving our services and user experience.
• Compliance with our legal and regulatory obligations.

4. Legal Basis for Processing

• Contract performance: processing necessary for the provision of ordered services.
• Consent: for marketing communications.
• Legitimate interest: service improvement and fraud prevention.
• Legal obligation: compliance with legal and regulatory requirements.

5. Data Recipients

• Internal HOW TICKETS services for order management.
• External providers: host (OVH), payment service (Stripe), email service.
• Event organisers, only if necessary for contract performance.

6. Retention Period

Data is retained for the period necessary for the purposes for which it is collected, including:

• Order data: 6 years from the date of the event (in accordance with UK tax requirements).
• Browsing data: 13 months for cookies.
• Marketing data: until consent is withdrawn.

7. Data Transfers

Data transfers outside the United Kingdom may occur, particularly with our provider Stripe. These transfers are governed by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. User Rights (UK GDPR)

• Right of access: obtain confirmation that your data is being processed.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your data under certain conditions.
• Right to data portability: receive your data in a structured format.
• Right to object: object to the processing of your data for legitimate reasons.
• Right to restriction: request restriction of processing of your data.

To exercise these rights, contact us at: contact@howtickets.com. We will respond within one month.

9. Cookies

We use different types of cookies:

• Essential cookies: necessary for the website to function.
• Analytics cookies: to analyse site usage and improve our services.
• Marketing cookies: to personalise advertisements.

You can manage your cookie preferences through your browser settings.

10. Data Security

We implement technical and organisational measures to protect your data, including data encryption via HTTPS and strict security protocols.

11. Policy Changes

This privacy policy may be updated. We will inform you of any changes via our website or by email.

12. DPO Contact

For any questions regarding the protection of your data, you can contact our Data Protection Officer at: contact@howtickets.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).