Privacy Policy

Ticksit (Pty) Ltd ("Ticksit", "we", "us", "our") operates the platform available at ticksit.co.za. We are a company registered in the Republic of South Africa and are subject to the Protection of Personal Information Act, 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act, 25 of 2002 (ECTA).

As your Information Officer under POPIA, our registered representative can be contacted at legal@ticksit.co.za. We are committed to treating your personal information with respect and transparency.

Account information: When you create an account we collect your name, email address, and a securely hashed password. Business details such as your company name, trading name, and contact number may also be collected.

Usage data: We collect information about how you interact with the platform — pages visited, features used, actions taken, and session duration. This data is aggregated and used to improve the product experience.

Event and contact data: Attendee lists, email marketing contacts, and social account handles you upload or generate within the platform remain your data at all times. We act as an operator processing this data on your behalf.

Payment information: Payment card details are processed exclusively by our PCI DSS-compliant payment provider, Paystack, and are never stored on Ticksit servers.

Organiser bank details: to pay out ticket sales, we send the bank account details an organiser enters to Paystack, which holds them. Ticksit keeps only the bank name, account holder and the last four digits of the account number.

My Ticksit (ticket buyers): if you sign in to My Ticksit, we use your email address to find the bookings made with it, and we store the albums you create and the photos you upload. Uploaded photos are re-encoded and their location and camera details (EXIF and GPS) are removed. You can delete your albums, uploads and My Ticksit account at any time under Account; your bookings stay with the organisers who sold them.

Device and technical data: IP addresses, browser type, operating system, and device identifiers may be collected for security and diagnostic purposes.

Website visitor data: when you browse ticksit.co.za, we log each page view — your IP address, the approximate location derived from it (country, region and city), your browser, operating system and device type, screen size, language, the page you viewed and the website you came from. We use this to understand how the site is used, to see where our visitors are, and to detect abuse. It is stored for 90 days and then deleted, is visible only to authorised Ticksit administrators, and is not sold or shared for advertising. We set no cookies for this. If your browser sends a Do Not Track or Global Privacy Control signal, we do not record your visit. We may block IP addresses that show abusive behaviour, such as spam or attacks. To investigate abuse, an authorised administrator may look up the network provider details of an IP address using the ipwho.is lookup service; only the IP address itself is sent, and the result is kept for no longer than the visit records. You may ask us to delete the records associated with your IP address by emailing legal@ticksit.co.za.

To provide, maintain, and improve the Ticksit platform and its five modules (Events, Mail, Social, Pulse, Flow).

To communicate with you about your account, product updates, billing, and support requests.

To send transactional emails (receipts, event confirmations, booking alerts). Marketing emails are only sent with your explicit consent and can be withdrawn at any time.

To detect and prevent fraud, abuse, and security incidents.

To comply with our legal obligations under South African law, including POPIA, ECTA, and the Consumer Protection Act 68 of 2008.

We do not sell your personal information to third parties. We do not use your data to train AI models or for advertising purposes beyond what is described in this policy.

Your data is stored on AWS infrastructure in the Africa (Cape Town) region (af-south-1). We keep your data within South Africa by default and do not transfer personal information outside the Republic without your explicit consent or a lawful basis under section 72 of POPIA.

We apply industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ encryption in transit, role-based access controls, and regular security reviews.

Where we engage sub-processors (cloud hosting, payment processing, analytics), each is bound by a data processing agreement requiring equivalent levels of protection.

Under POPIA you have the right to: (a) request access to your personal information; (b) request correction of inaccurate information; (c) request deletion of your personal information where no lawful basis exists for retention; (d) object to the processing of your information; and (e) withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated.

To exercise any of these rights, email us at legal@ticksit.co.za. We will acknowledge your request within 3 business days and respond substantively within 30 days as required by POPIA.

GDPR note: If you access Ticksit from the European Economic Area, we extend equivalent GDPR-aligned rights including data portability and the right to erasure under Article 17 of the GDPR.

We use essential cookies to keep you authenticated and remember your preferences. Our website analytics set no cookies — see "Website visitor data" in section 2 for exactly what is recorded, and for how long.

See our full Cookie Policy for a breakdown of each cookie category.

We may update this policy to reflect changes in our practices, legal requirements, or platform features. We will notify you of material changes via email and an in-app notice at least 14 days before they take effect.

The version date at the top of this page indicates when it was last updated. Archived versions are available on request.