This notice describes what personal data OTS stores and why. It is a draft and will change before launch.
Who is responsible
[Company legal name], [Registered address]. Contact: [Support email].
What we store
- Email address: to sign you in and to contact you about your orders and tickets.
- Display name: the name you give us, printed on your tickets.
- Orders: which event, how many tickets, the payment method you chose, the amount, the status, the times, and the payment provider's reference.
- Tickets: the name on each ticket, its status (valid, used or transferred), and who it was sent to or received from.
- Entry scans: when a ticket was scanned at the gate, which gate device scanned it, and the result.
What we do not store
Card details never touch OTS servers. You enter card and wallet details on Paymob's page, and kiosk payments are made in cash at the kiosk. We receive only the result of the payment, the amount and a reference.
On your device
- A session cookie keeps you signed in.
- After your entry code unlocks, your ticket's secret is saved in your browser's storage so that the code can work without signal. It is removed when you sign out or transfer the ticket.
- OTS pages do not load third-party scripts.
Why we use it
- To sell tickets, take payment through the provider, and issue tickets.
- To check tickets at the gate and to stop a ticket from being used twice.
- To refund payments, answer support requests, and investigate suspected misuse.
Who sees it
- Payment providers receive what they need to take the payment.
- The event organizer and OTS support staff see order and attendee details for that event, so they can run the event and help you.
- Gate devices at the event check tickets. A gate laptop keeps an encrypted list of valid tickets for offline checking and deletes it after the event.
- [Any other recipients, such as email or hosting providers, to be listed by the company]
How long we keep it, and your rights
[Retention period for each kind of data]
[Your rights over your data and how to use them]
[Where data is stored and any transfers abroad]