Privacy Notice

The controller of your personal data is WeBuyAllTickets, the United States business that operates WeBuyAllTickets. We are based in the United States; your data is stored and processed there, by us and by the providers we use (Supabase, Vercel, Discord, Telegram, Resend, Meta and Google for advertising measurement). For any privacy query, contact us at info@webuyalltickets.com.

When you use our sell funnel and lead form, we collect:

• Contact details — your name, email address and phone number.
• Ticket details — the event, date, venue, section, row, quantity, where the tickets are held (app, PDF or paper), anything you flag about the seats, what you paid per ticket if you tell us, and how you intend to transfer the tickets.
• Transaction details — the estimate shown, the offer made and whether you accepted it, and (if you sell) your chosen payout method and the payout handle or bank details needed to pay you.
• Ticket files — the ticket files you upload to hand over your tickets, and any transfer note you add.
• Technical & campaign data — your IP address and browser type, basic analytics, any UTM campaign parameters and click identifiers (gclid/fbclid) in the link you arrived through, and your cookie choices.

• To prepare and confirm your offer and complete the sale — lawful basis: performance of a contract (and steps taken at your request before entering one).
• To verify tickets and prevent fraud — lawful basis: legitimate interests (protecting our service and event organisers) and legal obligation.
• To make payment to you — lawful basis: performance of a contract.
• To hand over your tickets and complete the sale — uploaded ticket files and payout handles are processed only to complete the sale, stored privately and deleted when no longer needed — lawful basis: performance of a contract.
• Analytics to improve the service, and advertising measurement — lawful basis: consent (see cookies below).

We share data only as needed to run the service:

• Hosting & database — our website host (Vercel), and the database and private file storage (Supabase) where your enquiry and any uploaded ticket files are stored.
• Team alerts — when you submit the form, your enquiry details (including your name, email, phone and ticket information) are sent to our internal team via Discord and Telegram notifications and by email (sent through Resend), so a real person can prepare your offer quickly.
• Advertising measurement— if you accept marketing cookies, we tell Meta and Google Ads that a lead happened, using a hashed (irreversible) version of your email and phone, your IP address and browser type, so we can measure our ads. Decline marketing cookies and we don't.
• Payment providers — to pay you when you sell.

We may also disclose data to event organisers, payment providers and authorities where necessary to prevent or investigate fraud, or where required by law. We do not sell your personal data.

We keep enquiry and transaction data only as long as necessary:

• Enquiries that don't proceed: deleted or anonymised after 12 months.
• Completed sales: 7 years for tax and anti-fraud records.
• Uploaded ticket files and payout handles: up to 90 days after the sale closes, then deleted.

We use a small number of essential cookies needed for the site to work. With your consent we also use Google Analytics to understand how the site is used, and marketing cookies (Meta and Google Ads) to measure our advertising — both load only after you accept themvia our cookie-consent banner. Google's tag loads in cookieless mode until you accept; no analytics cookies are set unless you do. You can decline, and neither will run. Change your choice any time via ‘Cookie settings’ in the footer.

Depending on where you live, you have the right to ask us for:

• Access — a copy of the personal data we hold about you.
• Rectification — correction of anything that is inaccurate or incomplete.
• Erasure — deletion of your data where we no longer need it.
• Restriction — a pause on how we use your data while a query is resolved.
• Objection — to processing based on our legitimate interests, including any direct marketing.
• Portability — your data in a structured, machine-readable format.
• Withdrawal of consent — at any time, where consent is our lawful basis — without affecting what was done before.

To exercise any of these rights, contact us at the email address above and we will respond as required by applicable law. If you're in the UK you can complain to the Information Commissioner's Office (ico.org.uk).

For how the sale itself works, see our Terms of Sale.