Privacy Policy

TicketPlugJA is operated by Neon Goat Studios in Jamaica. We are the data controller for the information described here. For anything about your information, email [email protected].

When you buy a ticket, the event's organizer also receives some of your details to run their event (see section 5). The organizer is responsible for how they use them.

• When you buy tickets: your name, email address, phone number, country, what you bought and when. Card payments are handled by WiPay: we receive whether the payment succeeded and, at most, the last four digits of the card, never the full number.
• If you start checking out but don't finish: the name, email address and phone number you typed into the checkout form, saved as you type, and which tickets you chose.
• If you create an account: your name, email and password (stored only as a secure hash), and your tickets and transfers.
• At the event: when and at which gate each ticket was scanned, and by which scanner.
• If you contact us: what you send in the form or email. We keep a scrambled code derived from your IP address, not the address itself, only to limit spam.
• Organizers: business and contact details, tax registration number (TRN), identity and business documents, and payout bank details, which are stored encrypted. See our Organizer Agreement.
• Technical information: for security, sign-ins record the device's IP address and browser type, and important changes are logged. We count visits to event pages without identifying you.

• To sell you tickets, send them to you, and let you in at the event (to perform our contract with you).
• To handle refunds, transfers, cancellations and your questions.
• If you didn't finish checking out, so our team can help you complete your purchase, for example if a payment didn't go through (our legitimate interests). We don't pass these details to the organizer.
• To prevent fraud, fake tickets and abuse, and to keep the platform secure (our legitimate interests).
• To verify organizers and pay them (our contract with them, and legal requirements).
• To keep accounting and tax records required by Jamaican law.

We don't sell your information, and we don't use it for advertising. We only send marketing if you have asked for it, and you can stop it at any time.

We use only the cookies the site needs to work, not advertising or tracking cookies:

• a sign-in cookie, if you have an account (up to 30 days);
• a checkout cookie that keeps your held tickets yours while you pay (7 days);
• a promoter cookie, if you arrived through a promoter's link, so they get credit for your purchase (30 days);
• a scanner cookie on phones paired as door scanners (60 days).

• The event organizer: the name, email, phone and ticket details of their ticket holders, to run the event, manage entry and contact attendees about it. Door staff see names and ticket types, not contact details.
• Service providers who work for us: WiPay (card payments), Brevo (sending email), Vercel (hosting), Neon (database), Cloudflare (file storage) and Sentry (error monitoring, set up not to receive your personal details). They may only use your information to provide their service to us.
• Authorities, when the law requires it, or to protect people from fraud or harm.

Some of these providers store information outside Jamaica, including in the United States and Europe. We only use providers that protect it with appropriate security and contractual safeguards.

• Orders, payments, refunds and payouts: as long as Jamaican tax and accounting law requires.
• Accounts: until you ask us to delete yours, apart from records we must keep by law.
• Organizer verification documents: while the organizer account is active, then only as long as the law requires.
• Details typed into an unfinished checkout: 90 days, unless you then buy, when they become part of your order.
• Contact messages: as long as needed to deal with them.

Connections to the site are encrypted, passwords are hashed, bank details are encrypted, access to personal information is limited to people who need it, and sensitive actions are logged. No system is perfectly secure; if a breach affects you, we will tell you and the Information Commissioner as the law requires.

Under the Data Protection Act, 2020 you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct information that is wrong;
• stop or limit how we use it, including for any direct marketing;
• delete it, where we don't need to keep it by law.

Email [email protected] and we will respond within the time the law allows. You can also complain to the Office of the Information Commissioner in Jamaica.

TicketPlugJA isn't meant for children under 18 buying tickets on their own. If you believe a child has given us their information, contact us and we will delete it.

We will update this policy when how we handle information changes. The date at the top shows the latest version; significant changes will be shown on the site or emailed to account holders.