Privacy Policy

At Mtickets, we are committed to safeguarding your privacy and ensuring the protection of your personal data in line with the Kenya Data Protection Act, 2019 (DPA). This Privacy Policy outlines how we collect, use, share, and protect the information you provide while using our services.

By accessing or using our website, you agree to the terms of this Privacy Policy.

1. Who We Are

Mtickets is an online platform that allows users to purchase and manage tickets for events. Our registered office is located in [Insert City, Kenya].

2. Information We Collect

We may collect the following categories of personal data:

a. Personal Identification Information

Full Name
Email Address
Phone Number
Billing/Shipping Address

b. Transactional and Payment Data

Ticket order history
Payment method (Note: We use third-party processors and do not store your card details)

c. Technical Data

IP address
Device and browser information
Access times and referring URLs

d. Event Preferences

Events browsed or purchased
Location preferences (if enabled)

3. Lawful Basis for Processing Data

Under the Kenya DPA, we collect and process your data based on:

Consent (e.g. when signing up for marketing updates)
Contractual necessity (e.g. ticket purchase and delivery)
Legal obligation (e.g. tax compliance)
Legitimate interests (e.g. fraud prevention, analytics)

4. How We Use Your Information

We use your data to:

Process and fulfill ticket orders
Send event confirmations, updates, and notifications
Provide customer support
Improve our website and services
Send promotional offers (if you opt in)
Comply with legal requirements

5. Sharing of Information

We do not sell your personal data.

However, we may share it with:

Event Organizers, to provide entry and updates related to your ticket
Payment Gateways, for secure processing (e.g. M-Pesa, card payments)
Email and SMS Providers, for order confirmations
Law Enforcement or Regulators, where legally required

6. Your Rights Under the Kenya DPA

You have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data
Object to the processing of your data
Withdraw consent at any time

To exercise these rights, contact us at [Insert Contact Email]. We will respond within the timelines prescribed by the DPA.

7. Data Retention

We retain personal data only as long as necessary to:

Fulfill ticketing and legal obligations
Resolve disputes
Enforce agreements

After this, your data will be securely deleted or anonymised.

8. Security Measures

We implement industry-standard safeguards, including:

SSL encryption
Restricted data access
Regular system updates

While we strive to protect your data, no method is 100% secure.

9. Cookies and Tracking

Mtickets uses cookies and similar technologies to:

Remember your preferences
Analyse site traffic
Enable login and secure sessions

You can control cookies through your browser settings.

10. Children’s Privacy

Our platform is not intended for individuals under 13 years. We do not knowingly collect data from minors. If we become aware of such collection, we will delete the data immediately.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the content or privacy practices of those third-party sites.

12. Changes to This Policy

We may revise this Privacy Policy from time to time. Any updates will be posted on this page with a revised “Effective Date.” Please review this page periodically.