Privacy Policy

LipaTix ("we", "us", "our", "Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our ticketing platform, website, and related services. It applies to all users of the Platform, including event organizers and ticket buyers.

We collect personal information that you voluntarily provide to us when you register for an account, create or manage an event, purchase tickets, or otherwise interact with our Platform. The types of information we collect include:

Category	Specific Information	Purpose
Account Information	Full name, email address, phone number, password	Account creation, authentication, communication
Organizer Information	Business name, business registration number, tax ID, physical address, payout details (M-Pesa number or bank account)	Event verification, commission calculation, payout processing, compliance
Ticket Buyer Information	Name, email address, phone number, ticket selection, payment details (processed via secure payment gateway)	Ticket fulfillment, event entry verification, communication about event changes or cancellations
Event Information	Event title, description, date, time, venue location, ticket types, pricing, promotional images	Listing events for sale, enabling discovery by potential attendees
Usage Data	IP address, browser type, device information, pages visited, referral source, timestamps	Platform analytics, security monitoring, performance optimization
Communication Data	Customer support inquiries, messages, feedback, survey responses	Providing support, improving our services, resolving disputes

We use the information we collect for legitimate business purposes, including:

• Service Delivery: Processing ticket sales, facilitating payouts to organizers, generating digital tickets, verifying entry at events, and managing event listings.
• Communication: Sending transaction confirmations, event reminders, policy updates, and responding to support requests. For marketing communications, we obtain explicit consent where required.
• Security & Fraud Prevention: Monitoring for suspicious activity, detecting fraudulent transactions, preventing unauthorized access, and protecting the integrity of the Platform.
• Legal Compliance: Fulfilling our obligations under Kenyan law, including tax reporting, anti-money laundering requirements, and responding to lawful requests from authorities.
• Platform Improvement: Analyzing usage patterns, troubleshooting technical issues, and enhancing user experience.

For users in the European Economic Area (EEA) or where applicable, we process personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (e.g., delivering tickets, processing payments).
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving services, preventing fraud, and ensuring platform security, provided these interests do not override your data protection rights.
• Legal Obligation: Processing is required to comply with applicable laws and regulations.
• Consent: For marketing communications and optional data sharing, we obtain your explicit consent, which you may withdraw at any time.

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We engage trusted third-party vendors to perform functions on our behalf, such as payment processing, cloud hosting, email delivery, and customer support. These vendors are contractually obligated to protect your information and use it only for the purposes we specify.
• Event Organizers: When you purchase a ticket to an event, your name and contact information (as provided during checkout) are shared with the event organizer to enable event entry, communication about the event, and attendee management. Organizers are prohibited from using your data for unrelated marketing without your consent.
• Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and prominent notice on our Platform of any such change.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit using TLS/SSL protocols
• Secure storage of payment information using PCI DSS-compliant payment gateways (we do not store full credit card details)
• Access controls limiting employee access to personal data to only those who require it for legitimate business purposes
• Regular security assessments and vulnerability scanning
• Two-factor authentication for organizer accounts

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Information: Retained for the duration of your account and for up to 5 years after account closure for legal, tax, and dispute resolution purposes.
• Transaction Records: Ticket sales and payout records are retained for 7 years to comply with tax and accounting requirements.
• Event Data: Event information is retained for 3 years after the event date for historical and analytical purposes.
• Usage Logs: Aggregated and anonymized usage data may be retained indefinitely for analytical purposes.

Upon request, we will delete or anonymize your personal information, subject to any legal obligations to retain certain records.

Depending on your location, you may have certain rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal information, subject to legal retention obligations.
• Right to Restrict Processing: Request limitation of how we use your information.
• Right to Data Portability: Request transfer of your information to another service provider in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@lipatix.com. We will respond within 30 days. For Kenyan residents, you also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been violated.

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and improve our services. Types of cookies we use:

• Essential Cookies: Required for basic platform functionality, such as authentication, session management, and payment processing. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Analytics Cookies: Help us understand how users interact with our Platform (e.g., Google Analytics) to improve performance and features.
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. We obtain your consent before deploying these.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect platform functionality. For more information, see our Cookie Policy.

Our Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. Parents or guardians who believe their child has provided us with personal information should contact us immediately.

LipaTix is based in Kenya, and your information may be transferred to, stored, and processed in Kenya or other countries where our service providers operate. When we transfer data internationally, we implement appropriate safeguards, such as Standard Contractual Clauses, to ensure your information remains protected in accordance with this Privacy Policy and applicable data protection laws.

If you are an event organizer using LipaTix, you may receive personal information about ticket buyers. You agree that:

• You will use attendee data solely for event-related purposes (e.g., communication about the event, entry verification, and attendee management).
• You will not sell, rent, or share attendee data with third parties for marketing purposes without obtaining explicit consent from attendees.
• You will comply with all applicable data protection laws, including the Kenyan Data Protection Act, and are responsible for your own data processing activities.
• You will implement reasonable security measures to protect attendee data from unauthorized access or disclosure.

If we become aware that an organizer has violated these obligations, we may suspend or terminate their account and take appropriate legal action.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you via:

• Email to the address associated with your account (for registered users)
• Prominent notice on our website or dashboard

The "Effective Date" at the top of this policy indicates when it was last revised. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy. If you disagree with any changes, you should discontinue using our Services and request deletion of your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: