Privacy policy

This page is available in English only. The English version prevails.

1. What we collect

We collect only what is needed to sell you a ticket and get you through the door. It comes from three places:

We do not collect full card numbers or CVV codes — those go straight to the payment provider, and we only ever see the last four digits and the result. We also do not collect biometrics, your contacts, or precise location.

2. How we use it

• Running the service — creating orders, issuing tickets, sending entry passes.
• On-sale and price alerts — only for shows you have chosen to follow.
• Security — spotting abnormal ordering (for example one device buying in bulk) so that ordinary buyers get a fair shot.
• Support — processing refunds, exchanges and complaints.
• Analytics — aggregated, de-identified reporting on how the platform is used. Never about an individual.

We do not sell your personal data, and we do not use it for third-party ad targeting.

3. Sharing and third parties

We share only where it is necessary, and only on terms at least as strict as this policy:

4. Cookies and similar technologies

Three kinds. The first two are required for the site to work and cannot be switched off:

• Essential — keeping you signed in and holding your basket and checkout progress.
• Security — preventing duplicate submissions and automated abuse.
• Analytics — page-view counts. You can refuse these in your browser without affecting your ability to buy tickets.

You can clear this site's data at any time. Doing so also removes your session and any locally stored order history.

5. How long we keep it

• Account data — for as long as the account exists, then deleted or anonymised within 30 days of closure.
• Transaction and invoice records — 5 years, as accounting and tax rules require.
• Access logs — 6 months.

6. Your rights

You can exercise any of these at any time. We respond within 15 working days.

• Access — get a copy of the personal data we hold about you.
• Correction — edit it yourself under My tickets › Profile, or ask support.
• Deletion — outside the statutory retention periods above. Once deleted, order history can no longer be looked up.
• Withdraw consent — turn off notifications, refuse analytics cookies.
• Close your account — from the account page, or by email.
• Complain — if you believe we have broken the law, you may complain to your local data protection authority.

7. Security

HTTPS across the whole site. Passwords are salted and hashed, never reversible. Payment data is handled by a PCI DSS certified provider; full card numbers never land on our servers. Internal access follows least privilege and is audited. In the event of a breach we will notify affected users and the relevant regulator within 72 hours.

8. Children

Accounts are not offered to children under 14. Users aged 14 to 18 should have a guardian's consent. If we discover we have collected a child's data without that consent, we delete it promptly.

9. International transfers

Shows are staged in Singapore, Hong Kong, Macau, South Korea and mainland China, so attendee names and similar details must be passed to the local promoter or ticketing system in order to issue a ticket. We say so on the checkout page and transfer only the minimum fields needed.

10. Changes and contact

If this policy changes materially — for instance if we start collecting more, or share with someone new — we will post a notice on the site and email you 7 days before it takes effect. Continuing to use Tickyo means accepting the updated policy.

Privacy questions: privacy@tickyo.com
Data protection contact: Tickyo Data Compliance

See also the refund and support policy.