1. Who is the data controller
The controller of your personal data is [COMPANY NAME PENDING] (Company no. [PENDING]), trading as WeBuyAllTickets, registered office [ADDRESS PENDING]. For any privacy query, contact us at [DPO/CONTACT EMAIL PENDING].
2. What data we collect
When you use our sell funnel and lead form, we collect:
- Contact details — your name, email address and phone number.
- Ticket details — the event, date, venue, section/seat, quantity and how you intend to transfer the tickets.
- Transaction details — the estimate shown, the offer made, and (if you sell) the bank details needed to pay you.
- Technical & campaign data — basic analytics and any UTM campaign parameters in the link you arrived through.
3. How we use it and our lawful basis
- To prepare and confirm your offer and complete the sale — lawful basis: performance of a contract (and steps taken at your request before entering one).
- To verify tickets and prevent fraud — lawful basis: legitimate interests (protecting our service and event organisers) and legal obligation.
- To make payment to you — lawful basis: performance of a contract.
- Analytics to improve the service — lawful basis: consent, where required (see cookies below).
4. Who we share it with
We share data only as needed to run the service: with our hosting and database providers, email/messaging providers used to alert our team, and payment providers. We may disclose data to event organisers, payment providers and authorities where necessary to prevent or investigate fraud, or where required by law. We do not sell your personal data.
5. How long we keep it
We keep enquiry and transaction data only as long as necessary: for completed sales, for as long as needed to meet legal, accounting and anti-fraud obligations; for enquiries that do not proceed, for a short period and then we delete or anonymise the data. [Specific retention periods to be confirmed by a UK solicitor.]
6. Cookies & analytics consent
We use a small number of essential cookies needed for the site to work. Where analytics (such as Google Analytics) are used, they load only when configured and, where required, subject to your consent. A full cookie-consent banner is planned and will be added before launch; until then, analytics is only enabled when an analytics ID is configured.
7. Your rights
Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any right, contact us at the address above. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Related terms
For how the sale itself works, see our Terms of Sale.