Privacy Policy

Who we are

ExeTix (exetix.co.uk) is the data controller for the personal data described below. You can contact us at exetixsupport@gmail.com.

What we collect

Your email address and display name (for your account), the ticket files you upload when selling, and payment/order records from Stripe when you buy or sell — including, if you choose to connect a payout account as a seller, your Stripe Connect account details (Stripe collects and verifies these directly; we never see or store your bank details ourselves). We don't see or store your card details either — Stripe handles those directly. If you sign in with Google, we receive your name, email, and profile picture from Google. Sellers can choose to show "Anonymous seller" instead of their display name on their own listings — buyers still see how many tickets that seller has sold, just not who they are.

Why we process it

Mainly because it's necessary to run the marketplace you've signed up for: creating your account, showing your listings and purchases, processing payments and payouts, and releasing purchased ticket files to buyers. We also rely on legitimate interest to prevent fraud and abuse of the platform. We don't sell your data to third parties.

Ticket files you upload

Your ticket file stays private. Buyers never see it before they pay, and it is released to the buyer only once a sale completes. The file is stored privately and can only be opened through a short-lived link we generate for someone entitled to see it.

An ExeTix administrator may also open your ticket file to check it is a genuine ticket for the event you listed it against. We do this to protect buyers from fraudulent listings, relying on our legitimate interest in preventing fraud on the platform. Ticket files often show the original purchaser's name and an order reference, so every time anyone opens one — you or an administrator — we record who opened it and when. You can ask us for the record of who has opened your ticket file.

Who we share it with

These providers process data on our behalf to run the service:

• Supabase — our database, authentication, and file storage provider
• Stripe — our payment processor and, for sellers, payout provider (Stripe Connect)
• Resend — sends transactional emails: ticket-purchase confirmations, and notifying you when a ticket you registered interest in becomes available
• Vercel — hosts the website itself

Some of these providers may process data on servers outside the UK (for example, in the US or EU); where that happens, we rely on the safeguards those providers themselves have in place for international transfers.

Cookies

We use only essential cookies needed to keep you signed in. ExeTix doesn't use advertising or tracking cookies, and we don't store anything else on your device.

Visitor statistics

We count how many pages are viewed and roughly how many people visit, so we know whether the site is being used. We don't use a third-party analytics service, and nothing is stored on your device for this.

When you load a page we record the page's address and the time. To avoid counting the same person twice in a day, we also record a one-way hash generated from your IP address, your browser details, and a random value that changes every day. Your IP address and browser details are used only to generate that hash and are never written to our records. The random daily value is permanently deleted when it changes, after which the hash cannot be traced back to any IP address, browser, or person — including by us.

We rely on our legitimate interest in understanding basic usage of our own service. Because this involves briefly processing your IP address, you can object to it — see how to contact us below.

How long we keep it

We keep account and order data for as long as your account is active, and for a reasonable period afterward where we're required to for tax, fraud-prevention, or dispute-resolution purposes. You can ask us to delete your account and associated data at any time — see below.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or export your personal data, or to restrict or object to how we use it. Contact us at exetixsupport@gmail.com to exercise any of these.

Complaints

If you're unhappy with how we've handled your data, contact us first at exetixsupport@gmail.com and we'll acknowledge your complaint within 30 days. You also have the right to complain directly to the UK Information Commissioner's Office (ico.org.uk) at any time.

Changes

We may update this policy as ExeTix develops. Continued use of the platform after a change means you accept the updated policy.