Privacy Policy

Last updated: 29 July 2026

This Privacy Policy explains how Global Tour Creatives (Ireland) Limited (“we”, “us”, “our”) collects and uses personal data when you use Tickets and Passes (ticketsandpasses.com and related apps or pages).

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

1. Data controller

The data controller is:

Global Tour Creatives (Ireland) Limited
2/3 Castle Street
Bray
Co. Wicklow
Ireland

Privacy queries, access requests, and unsubscribe requests: privacy@ticketsandpasses.com

2. Personal data we collect

Depending on how you use the service, we may collect:

• Identity and contact data — name, email address, mobile phone number
• Order and ticket data — event, seats, order reference, ticket identifiers, delivery preferences
• Payment-related data — payment status, amount, currency, and limited card metadata returned by our payment provider (we do not store full card numbers)
• Account data — if you create an account: login credentials (stored securely, e.g. hashed passwords) and saved preferences
• Marketing preferences — whether you opted in to hear about events and offers
• Technical and usage data — IP address, browser type, device information, approximate location derived from IP, pages viewed, and similar logs needed for security and service operation
• Support data — messages and details you send when contacting support

We collect data directly from you (checkout, account forms, support) and automatically when you use the site (logs, cookies or similar technologies as described below).

3. Why we use your data (purposes and legal bases)

Under GDPR, we need a legal basis for each use of personal data:

• Ticket purchase and delivery — to process your order, hold seats, take payment via our payment provider, issue tickets (including QR codes and wallet passes), and send confirmations.
  Legal basis: performance of a contract (Art. 6(1)(b)).
• Customer support — to respond to questions about orders, tickets, refunds, or technical issues, using your email and/or phone number where needed.
  Legal basis: performance of a contract and/or legitimate interests in assisting customers (Art. 6(1)(b) and (f)).
• Account and order history — if you register, to save tickets and preferences and speed up future checkout.
  Legal basis: performance of a contract (Art. 6(1)(b)).
• Service operation and security — fraud prevention, abuse detection, debugging, keeping holds and inventory accurate, and protecting our platform.
  Legal basis: legitimate interests (Art. 6(1)(f)).
• Legal and accounting obligations — tax, accounting, and regulatory record-keeping.
  Legal basis: legal obligation (Art. 6(1)(c)).
• Marketing — email or other messages about events, offers, or news from Tickets and Passes or related shows, only where you have opted in (or where applicable law otherwise allows, with a clear right to object).
  Legal basis: consent (Art. 6(1)(a)) and, where relevant, legitimate interests with an easy opt-out (Art. 6(1)(f)).

You can withdraw marketing consent or unsubscribe at any time by using the link in our emails or by writing to privacy@ticketsandpasses.com. Withdrawal does not affect the lawfulness of processing before withdrawal, and we may still contact you about your existing orders.

4. Phone numbers and email addresses

We use your email address to deliver tickets, order confirmations, service messages (e.g. hold expiry, changes to an event), and support replies. With your consent, we may also use it for marketing.

We use your mobile phone number for order-related contact (for example delivery issues, urgent event updates, or support) and, only if you agree, for marketing or transactional SMS. We do not sell your phone number.

5. Who we share data with

We share personal data only as needed to run the service, for example:

• Payment processors (e.g. Stripe) — to take and confirm payment
• Hosting and infrastructure providers (e.g. cloud hosting, content delivery, email delivery) — to operate the website and send messages
• Venue or event partners — limited order/attendance information needed to admit you or run the event
• Professional advisers and authorities — where required by law or to establish/exercise legal claims

Service providers act under contracts that require appropriate protection of personal data. We do not sell your personal data.

6. International transfers

Some providers may process data outside the European Economic Area (EEA). Where they do, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, and supplementary measures where needed.

7. How long we keep data

• Orders and tickets — for as long as needed to provide the tickets and for a reasonable period afterwards for support, disputes, and legal/accounting duties (typically up to 7 years for transaction records where required).
• Marketing lists — until you unsubscribe or we decide the consent is no longer valid; we then suppress or delete as appropriate.
• Support messages — for a limited period needed to resolve your query and improve the service.
• Technical logs — for shorter operational periods unless needed for security investigations.

When data is no longer required, we delete or irreversibly anonymise it where feasible.

8. Your rights

Under GDPR you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (“right to be forgotten”) in certain cases
• Restrict or object to certain processing
• Data portability (receive data you provided in a structured, commonly used format)
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority

In Ireland, the supervisory authority is the Data Protection Commission (www.dataprotection.ie).

To exercise your rights, email privacy@ticketsandpasses.com. We may need to verify your identity before fulfilling a request.

9. Cookies and similar technologies

We use necessary cookies or local storage for core features (for example session and seat-hold identifiers, checkout preferences, and security). These are required for the site to work.

If we use optional analytics or marketing cookies, we will request consent where required and allow you to refuse them. You can control cookies through your browser settings; blocking some cookies may affect site functionality.

10. Children’s data

Our services are aimed at adults purchasing tickets. We do not knowingly collect personal data from children for marketing. Ticket purchases for family events may include children’s attendance details only as needed for the order.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Significant changes may also be notified on the website or by email where appropriate.

12. Contact

For any privacy-related request, including access, deletion, or marketing unsubscribe:

Email: privacy@ticketsandpasses.com
Post: Global Tour Creatives (Ireland) Limited, 2/3 Castle Street, Bray, Co. Wicklow, Ireland