Privacy Policy

1. Introduction

TGC Leisure ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the TicketMe platform (the "Platform").

TGC Leisure is the data controller responsible for your personal data. We are registered in Scotland and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect information that you provide directly to us and information that is collected automatically when you use our Platform.

Information You Provide

• Account information: Name, email address, and password when you create an account.
• Purchase information: Name, email address, phone number, date of birth, postcode, town/city, county/region, and payment details when you buy tickets.
• Communication data: Any information you provide when you contact us for support or feedback.
• Newsletter subscription: Email address when you subscribe to our mailing list.

Information Collected Automatically

• Usage data: Pages visited, time spent on pages, links clicked, and other interactions with the Platform.
• Device information: Browser type, operating system, device type, and screen resolution.
• Log data: IP address, access times, and referring URLs.
• Cookies and similar technologies: See our Cookies section below for more details.

3. How We Use Your Information

We use your personal information for the following purposes:

• Process ticket orders: To complete your purchases and deliver electronic tickets to you.
• Send order confirmations: To provide receipts, tickets, and updates about your purchases.
• Provide customer support: To respond to your inquiries and resolve issues.
• Send marketing communications: To send newsletters and promotional content (only with your consent).
• Improve our services: To analyse usage patterns, measure conversion performance, and enhance the Platform's functionality.
• Prevent fraud: To detect and prevent fraudulent transactions and abuse.
• Comply with legal obligations: To meet our regulatory and legal requirements.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to fulfil our contract with you (e.g., processing ticket purchases).
• Legitimate interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, service improvement).
• Consent: Processing based on your explicit consent (e.g., marketing communications).
• Legal obligation: Processing necessary to comply with applicable laws.

5. Data Sharing

We may share your personal information with the following parties:

• Event Organisers: We share your name and ticket information with Event Organisers to facilitate your entry to events. This may include your name as it appears on the ticket.
• Payment processors: We use Stripe to process payments securely. Your payment information is handled directly by Stripe in accordance with their privacy policy.
• Email service providers: We use third-party services to send transactional and marketing emails.
• Analytics providers: We use Google Analytics and similar analytics tools to understand how our Platform is used.
• Advertising and measurement partners: We share conversion and attribution data, including hashed customer identifiers where appropriate, to measure ad performance and reported conversions.
• Legal authorities: We may disclose information if required by law or to protect our rights.

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data: Retained while your account is active and for 3 years after account closure.
• Purchase history: Retained for 7 years for accounting and tax purposes.
• Marketing preferences: Retained until you withdraw consent or unsubscribe.
• Analytics data: Retained in anonymised form for trend analysis.

7. Your Rights (GDPR)

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data in certain circumstances.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests or for marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details in the Contact section below. We will respond to your request within one month.

8. Cookies

We use cookies and similar technologies to enhance your experience on our Platform:

• Essential cookies: Required for the Platform to function properly (e.g., session management, authentication).
• Analytics cookies: Help us understand how visitors interact with the Platform, including through Google Analytics.
• Advertising and measurement cookies: Help us attribute bookings to campaigns and understand marketing performance.
• Preference cookies: Remember your settings and preferences.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL.
• Secure storage of passwords using industry-standard hashing algorithms.
• Regular security assessments and updates.
• Access controls limiting who can access personal data.
• Secure payment processing through PCI-compliant providers.

10. International Transfers

Your data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

11. Children's Privacy

Our Platform is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.