Draft – not yet approved
Notes for the reviewer
- Fill in [Operator's legal name] and [Operator's postal address] in "Who we are".
- Native's permission (for the Union's ticket site) and Fixr's permission are needed before launch. Both sites' terms may not allow an app to use them this way.
- Check the 6-year period for financial records with an accountant before launch (Decision 11).
- Check each service's data region and transfer safeguard against its current terms before launch.
- Before launch, record which outside sites Native's and Fixr's pages in the app contact: the sign-in pages people see and the hidden payment pages. If any of them track people, this page needs to say so.
- These notes come off the page once it's approved.
Privacy policy
What we collect, why, who handles it for us, how long we keep it and how to delete it.
Who we are
Saints Tickets is run by [Operator's legal name], [Operator's postal address]. We're the controller of your personal data under UK data protection law: the UK GDPR and the Data Protection Act 2018.
To ask anything about your data, email support@saintstickets.co.uk
What we collect
- Your email address, verified with a code when you sign up.
- Your full name. Buyers see only your first name, how many sales you've completed and when you joined.
- Your phone number, verified with a code sent by SMS.
- The email address or account id of the Native or Fixr account you link, so tickets can be sent to it.
- Your phone's push notification token, your notification settings and the events you watch.
- Each time you sign in to Saints Tickets, the type of phone and app the sign-in came from, kept until you sign out. Not your IP address.
- Your listings, bids, orders, payments, refunds and payouts, and a record of the Union and Fixr tickets you buy in the app.
- Disputes: what you report, and the messages and photos you send. The other person in the dispute sees them too.
- Your card's brand and last four digits, and Stripe's references to your card, payments and payouts.
- An audit log of each step a ticket and a payment go through, with times. It's evidence for disputes and card chargebacks.
- When something goes wrong in the app: error codes and the app version, linked to your account, and crash reports that aren't linked to you.
- What you type in search is used to find events, and isn't kept.
What we never get
- Your Native and Fixr passwords, codes and sign-in tokens stay on your phone. You sign in on their own page inside the app, and the sign-in is never sent to us. What you type on that page goes to Native or Fixr, under their own privacy policy.
- The details saved to a Fixr profile (date of birth, sex) go from your phone to Fixr and never to us. If Fixr needs your name and phone number on your profile, the app fills them in from your phone, with your OK.
- We never hold card numbers: Stripe does. Your phone sends your card details straight to Stripe, under the Union's (Native's) or Fixr's own Stripe account when you buy from them. The app doesn't save your card on your Native or Fixr account; if you've already saved one on Native's own site, the app can offer it when you buy from the Union.
- Your bank details and the identity details you give Stripe to get paid. You type them on Stripe's own pages, and we only learn whether your setup is complete.
- Your location. The app never asks for it.
Why we use it, and our lawful basis
- To run your account and your sales: signing you in, moving tickets, taking payments, paying sellers, refunds, disputes and the notifications about them. Lawful basis: our contract with you.
- Notifications you choose, such as outbid alerts or new listings for events you watch. You can switch these off in the app. Lawful basis: our contract with you, because you ask for them.
- To protect everyone from scams: verifying phone numbers, flagging accounts that share a phone number or a card, and keeping the transfer log as evidence. Lawful basis: our legitimate interest in preventing fraud, which protects you too.
- To find and fix problems, from error and crash reports. Lawful basis: our legitimate interest in running an app that works.
- To keep records of orders, payments and payouts. Lawful basis: our legal obligation under UK tax law.
We don't track you: nothing in the app follows you across other companies' apps or websites. We don't sell your data, show you ads or use your data for marketing.
Who handles it for us
These services run parts of the app. They handle your data on our instructions:
- Convex: our database and server, in the EU (Ireland).
- Stripe: payments, refunds, sellers' identity checks and payouts. Stripe's code in the app also collects signals about your device to stop fraud. Stripe uses some data for its own purposes, such as fraud prevention and legal checks, under its own privacy policy.
- Cloudflare: this website and our domain.
- Resend: sending our emails, such as sign-in codes and receipts, and receiving emails to our support address.
- Sentry: error and crash reports, in the EU, set up to leave out your name, email and phone number.
- Expo: sending push notifications to your phone, and app updates.
- Twilio: sending and checking the SMS codes for your phone number (Twilio Verify).
- Apple and Google: delivering push notifications to iPhones and Android phones.
When the app moves or buys a ticket for you, the Union's ticket site (run by Native) or Fixr gets what it needs, such as the account the ticket goes to. They're responsible for that under their own privacy policies.
The other side of a sale or a dispute sees only what that needs: buyers see a seller's first name, and both sides of a dispute see its messages and photos.
We share data with others only when the law requires it, or to stop fraud, for example with Stripe or the police.
International transfers
Our database is in the EU (Ireland), which UK law treats as protecting data properly. Some of the services above, such as Stripe, Twilio, Resend, Expo, Cloudflare, Apple and Google, may handle data in the US or elsewhere. When they do, it's protected by safeguards UK law accepts, such as the UK–US data bridge or the UK's international data transfer agreement and addendum.
How long we keep it
- While you have an account, we keep what's needed to run it.
- When you delete your account, your profile, phone number, the Native or Fixr email you linked and your push tokens are removed within 30 days.
- Records of orders, payments, payouts and the audit log are kept for 6 years, with your details removed where possible, because UK tax law expects financial records to be kept.
- Stripe keeps its own records under its own rules.
- If you have an open order or dispute, your account is deleted once it's settled.
- Copies of the emails we've sent you are removed after 30 days.
Deleting your account also clears the tickets saved on your phone and signs this phone out of Native and Fixr. Your Native and Fixr accounts and your tickets aren't touched.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of your data;
- correct it;
- delete it;
- stop or limit how we use it, or object to it;
- send it to you or someone else in a format a computer can read.
We'll reply within a month, as the law requires. To ask, email support@saintstickets.co.uk
How to delete your account
In the app: You → Delete account.
Or on our website, where we email you a link to confirm it's you.
Complaints
If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Changes to this policy
If we change this policy, we'll publish the new version on this page.
Contact
Questions about your data? Email support@saintstickets.co.uk