Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, phone number, and password when you register
• Profile information: Avatar, bio, and preferences you choose to add
• Transaction data: Purchase history, ticket details, and payment confirmation (we do not store card numbers)
• Communications: Messages you send to support, reviews you write, and feedback you provide

1.2 Information Collected Automatically

• Device information: Browser type, operating system, and device identifiers
• Server logs: Requests to our own servers, including the page requested and the time — kept for security and debugging, not analysed for behaviour
• Location data: Approximate location from IP address (used for event recommendations)
• Cookies: Session cookies for authentication, preference cookies for settings

2. How We Use Your Information

We use your information to:

• Process ticket purchases and deliver tickets to you
• Communicate about your orders, events, and account
• Recommend events based on your interests and location
• Provide customer support and resolve disputes
• Prevent fraud, bot activity, and policy violations
• Send marketing communications (with your consent; opt-out anytime)

3. How We Share Your Information

We share your information only in these circumstances:

• Event Organizers: When you purchase a ticket, the organizer receives your name and email for event management and check-in purposes
• Payment Processors: Stripe processes your payments. Your payment data is handled according to Stripe's privacy policy
• Service Providers: Email delivery (Resend), search (Meilisearch), and infrastructure providers that help us operate
• Legal Requirements: When required by law, subpoena, or to protect rights and safety

We never sell your personal data to third parties. We never share your data for targeted advertising by third parties.

4. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Encrypted password storage using bcrypt
• PCI DSS compliance via Stripe (we never touch card data)
• Role-based access controls for internal systems
• Regular security audits and dependency monitoring
• JWT-based authentication with token rotation

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time
• Restriction: Request we limit how we process your data

To exercise any of these rights, email info@thedesievents.com and we'll respond within 30 days.

6. Cookies and measurement

We use essential cookies only — the ones that keep you signed in, remember your language and make checkout work. We run no advertising cookies and no third-party tracker: no Google Analytics, no Meta pixel, nothing that follows you to another site.

We do measure our own site, and we would rather say so plainly than hide behind the word “cookie”. A random identifier is stored in your browser — not a cookie, and not derived from anything about you — and we record which pages you open, what you search for, which filters you use, and where checkout goes wrong. If you are signed in, that activity is linked to your account. It stays with us; it is never sold and never shared with an advertising network.

Passwords, card details and anything that looks like an email address or phone number are removed before any of it is stored, in the browser and again on our servers.

You can turn it off, and if your browser sends Global Privacy Control or Do Not Track we stop before recording anything at all. The switch is on our cookie and measurement page.

7. Data Retention

We retain your account data for as long as your account is active. Transaction records are kept for 7 years for tax and legal compliance. There is no self-service delete button — ask us at info@thedesievents.com and we remove your personal data within 30 days, except where legal retention is required.

8. Children's Privacy

Our Platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

9. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable, to protect your data in accordance with this policy.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Platform. Your continued use after changes constitutes acceptance.

11. Contact Us

For privacy questions or concerns: info@thedesievents.com