Privacy Policy

The World Ticket Market website is operated by the business identified below. That business decides how and why the personal information described in this policy is used and is responsible for it.

Brand

World Ticket Market

Website

worldticketmarket.com

Ticket suppliers, event organizers and venues that receive information to fulfil an order handle it under their own privacy terms. This policy covers only the processing carried out by World Ticket Market.

This policy applies to the World Ticket Market website in every language version, to customer accounts, to orders placed through the website and to messages you send us. It does not apply to websites, applications or services operated by others, even when we link to them or when you use them to receive a ticket.

We receive information directly from you when you:

• create an account or update your personal details;
• add tickets to your cart and continue to checkout;
• enter contact or attendee details for an order;
• contact us with a question, request or complaint.

Please give only the information that is requested and make sure it is accurate. If you provide details about another person, such as a fellow attendee, make sure they know you are sharing them with us for this purpose.

You can create an account with an email address and password, or by signing in with Google. For each account we keep:

• your name and email address;
• whether your email address has been confirmed;
• your preferred language;
• the date the account was created and the time of your last sign-in;
• a record of each active sign-in session, including a shortened description of the browser used, so that you can review and end sessions from your account.

If you choose a password, we store only a secure hash of it, never the password itself. To protect accounts against automated guessing, the network address (IP address) of a sign-in attempt is used temporarily to limit the number of attempts.

From your account you can update your name and preferred language, review and sign out active sessions and delete your account.

If you choose to sign in with Google, we ask Google only for the permissions needed to identify you. The scopes requested are exactly openid, email and profile, and Google lets you choose which Google account to use.

Through these scopes we receive:

• your name;
• your email address and whether Google has verified it;
• the web address of your Google profile picture;
• your Google account identifier and the sign-in tokens Google issues, which we store to link your Google account to your World Ticket Market account.

We use this information only to create and secure your account and to sign you in. We do not use it for advertising, we do not sell it and we do not share it with others except as needed to operate sign-in. If Google reports that the email address on your Google account is not verified, sign-in is refused.

World Ticket Market's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove World Ticket Market from the list of applications connected to your Google account at any time in your Google Account security settings. Doing so stops future Google sign-ins but does not delete your World Ticket Market account; you can delete it separately from your account area.

When you place an order we record the information needed to process and support it:

• contact details for the order: email address, full name and, if provided, a phone number;
• the event, ticket category, quantity, prices, fees and currency;
• the order reference, the payment status and the fulfilment status;
• attendee details, where the organizer or supplier requires them for a particular ticket.

If you are not signed in, your cart is kept in your own browser using local storage. If you are signed in, your cart is saved to your account so that it is available on your other devices.

When you contact us, we keep the content of your message, your contact details and any documents you choose to send, such as screenshots or proof of attempted entry. We use them to answer you, to investigate the issue with the supplier where needed and to keep a record of how the request was handled.

Like most websites, our servers receive technical information with each request, such as your IP address, browser type, device type, the page requested and the time of the request. We use it to deliver pages, keep the service secure, prevent abuse and diagnose faults.

We also measure page performance, as described in Analytics.

We use a small number of cookies and browser storage entries that are necessary for the website to work, such as keeping you signed in, protecting forms, remembering your language and keeping your cart. We do not use advertising or marketing cookies. The full list is in our Cookie Policy.

We use personal information to:

• create, secure and manage your account;
• show events, prices and availability and keep your cart;
• process orders and pass the necessary details to the ticket supplier;
• send service messages, such as email confirmation and password-reset links;
• answer questions and handle complaints, claims and refund requests;
• protect the website and our customers against fraud, abuse and security threats;
• understand and improve the performance of the website;
• meet legal, tax and accounting obligations and establish or defend legal claims.

Where the law that applies to you requires a legal basis for processing, and where those concepts apply, we rely on the following:

Contract

to provide your account and to process and support orders you request.

Legitimate interests

to keep the website secure, prevent abuse, measure performance and improve the service, balanced against your rights.

Legal obligation

to keep records required by tax, accounting and consumer law and to respond to lawful requests.

Consent

where we ask for it. You can withdraw consent at any time without affecting processing that took place before.

Tickets sold on World Ticket Market are provided by external ticket suppliers. To fulfil an order, we share the details the supplier needs, such as the name and email address on the order and attendee details where the organizer requires them. The supplier may pass those details to the event organizer or venue when that is needed to issue, transfer or validate the ticket.

Suppliers, organizers and venues use this information under their own terms and privacy policies. We share only what is needed for the order.

We use service providers that process information on our behalf and only for the services they provide to us:

• a cloud hosting and managed database provider, described in Hosting;
• an email delivery service that sends account emails, such as email confirmation and password-reset messages;
• Google, when you choose to sign in with Google;
• a performance-measurement tool, described in Analytics.

We do not sell personal information. We may also disclose information where required by law, to protect the rights and safety of our customers or others, or as part of a reorganization or transfer of the business, subject to this policy.

Online payment is not currently live on the website. No payment provider is connected, and the website does not ask for or collect card numbers.

Before online payments start, this policy will be updated to name the payment provider and explain what information it receives.

The website and its database are currently hosted by Railway, a cloud platform that runs the website and its PostgreSQL database. Account, cart and order information is stored there.

The website includes Vercel Speed Insights, a performance-measurement tool. It does not set cookies. Where it is active, it records page-performance measurements, such as loading times, together with the page visited and the general type of device and browser. This information is used to improve the speed of the website and not to identify you.

Our service providers, ticket suppliers and event organizers may process information in countries other than the one where you live, including countries whose data protection laws differ from yours. Where the law requires it, we take appropriate steps to protect information transferred abroad.

We keep personal information only for as long as it is needed for the purposes described in this policy. In deciding how long, we consider:

• whether you still have an account with us;
• whether an order, refund request, claim or dispute is still open;
• how long tax, accounting and consumer law requires records to be kept;
• how long security and abuse-prevention records remain useful.

A sign-in session lasts up to 30 days unless you sign out earlier. When you delete your account, you are signed out everywhere and your account details and saved cart are removed. Order records may be retained where they are needed for legal, accounting or dispute purposes.

We use reasonable technical and organizational measures to protect personal information, including encrypted connections, hashed passwords, limits on repeated sign-in attempts and the ability to review and end sessions from your account.

No website or online service can be completely secure. Please use a strong, unique password, keep your devices secure and tell us promptly if you believe your account has been misused. We will never ask you for your password.

We do not currently send marketing emails. The emails you receive from us are service messages connected to your account or order, such as email confirmation and password-reset links.

If we start sending marketing messages, we will ask for your consent where the law requires it and every message will include a simple way to unsubscribe.

Depending on the law that applies to you, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• ask us to delete your information;
• restrict or object to certain processing;
• receive your information in a portable format;
• withdraw consent where we rely on it;
• complain to a data protection supervisory authority.

You can update your details and delete your account yourself from your account. For any other request, use the contact details in the panel at the end of this page. We may need to confirm your identity before acting on a request, and some information may be kept where the law requires or allows it.

The website is not directed at children. To create an account or place an order you must be able to enter into a binding contract under the law that applies to you. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us so that we can remove it.

Receiving or using a ticket may require a club, venue, league or ticketing application, or a mobile wallet. Those services are operated by others and have their own privacy terms. We are not responsible for how they handle your information.

We may update this policy when our services, providers or legal obligations change. The date at the top of this page shows when it was last revised. Where a change is significant, we will take reasonable steps to let you know.

For questions about this policy or to make a privacy request, use the contact details in the panel at the end of this page. Please include the email address linked to your account or order so that we can find your information.