Privacy and Cookies Statement ("Privacy Statement")

1. We, HolisTix Ticketing Ltd, operate this Privacy Statement because we are committed to safeguarding the privacy of those using our services (including but not limited to the Site defined below) and the confidentiality of any information that we collect about you. This Privacy Statement sets out how we will use any personal information that we may obtain from you in connection with our services (including but not limited to the Site). If we change any of the terms of this Privacy Statement we will post the revised statement on the Site behind the “Privacy and Cookies Statement” link at the bottom of each page.
  The HolisTix website (home page https://tickets.holistix.io) (“the Site”) is operated by HolisTix Ticketing Ltd.
  Whenever you submit your information to us in connection with our services or your use of the Site, whether it be by using the Site, by email, over the telephone or in person, you acknowledge that we will collect and use such information in accordance with the terms of this Privacy Statement and, if you opt in when requested by us, are consenting to be added to our mailing list. Please see section 4 below for further information if you no longer wish to receive such mailings from us.
  You have the right to lodge a complaint with the Information Commissioner's Office ("ICO") if you have any concerns with regard to the way in which we process your personal data. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
  You warrant that any information you supply to us is accurate and up to date (whether or not the information is about you), that you will inform us if any information that you provide us with requires updating, and that if you submit a third party's details to us (including but not limited to via the Site) you have that third party's permission or an alternative legal basis to do so.

1. It is possible to visit and browse some sections of the Site without being required to tell us who you are or reveal any information about you (e.g. if you do not log in to the Site).
  We may keep a record of any information that you post or upload using the Site, or if you contact us, we may keep a copy of that correspondence. We may also keep details of your use of the Site, including, but not limited to, traffic data, location data and other communication data, and the resources that you access and download using the Site. We do not make decisions based on any purely automated processing of personal data. We will use this information for our interests in the following ways:
  - to develop our systems and services and ensure that content from the Site is presented in the most effective manner for you and for your computer/device;
  - to provide you with information or services that you request from us;
  - to carry out our obligations arising from any contracts entered into between us;
  - to monitor your compliance with the terms and conditions applicable to any contracts entered into between us;
  - to allow you to participate in interactive features of the Site;
  - to notify you about changes to our services and/or the Site; and
  - to create anonymised reports based on your usage of the Site.
  If you purchase tickets from us we will specifically ask you for consent to communicate with you by email, and we will use your name, contact details, bank account details and payment card details where necessary for the performance of any contract between us (for example to issue any refunds that may become payable). Where you are paying by card, you will be redirected to the website of our payment services provider Stripe in order to make your payment (we do not store any card details on our servers). After the payment has been completed you will be redirected back to the Site. Please note that Stripe may collect personal information from you which will be used in accordance with Stripe’s own privacy policy (which you should read). More information regarding Stripe can be accessed via https://stripe.com/en-gb/. We are not liable for the practices of Stripe in respect of your personal information.
  In the event that you provide us with feedback regarding the Site or our services, we may disclose that feedback to our suppliers and to other users of the Site and our services where it is in our legitimate interests to do so in order to improve the services that we provide. This includes any information that you provide to us if you report a problem with the Site or our services.
  Where you have given consent, we will use your information to inform you of forthcoming shows, special offers, promotions, new products, new services, changes to the site and any other activity we consider is of legitimate organisational interest via post, telephone, email, SMS or other appropriate means. If you subscribe to our mailing list but subsequently decide that you no longer wish to receive such mailings please see section 4.
  If you correspond with us (e.g. using email), we may retain the content of your correspondence together with your contact details and our responses where necessary for our and your legitimate interests in order that we can appropriately manage your relationship with us, to reply to your correspondence and for training and quality purposes. This may include us recording and monitoring our telephone calls with you for such purposes.
  Where you attend an event organised or promoted by us, we or third parties may conduct filming, photography and sound recording of the event, which may include you as a member of the audience. These records may be used and commercially exploited by us or by third parties who purchase or licence the intellectual property in those records and who will exploit those records for their own legitimate interests.
  Where we need to collect personal data in connection with any services which you request or order from us and you fail to provide that data when requested, we may not be able to provide such services or perform any related contract that we have or are trying to enter into with you.
  We may disclose personal data about you:
  - to performing companies, using our ticketing platform, whose performances you have attended;
  - with third parties who are directly involved in dealing with any request, enquiry, complaint or other correspondence submitted by you or in the performance of any contract between us and you;
  - with third parties who are processing your information on our behalf for specified purposes in accordance with our instructions;
  - with third parties who are providing us with professional advice where necessary for our legitimate interests in obtaining such advice and permitted by law;
  - where we are legally required to do so;
  - in connection with criminal investigations, legal proceedings or prospective legal proceedings where necessary for our related legitimate interests and where permitted by law;
  - where necessary for our legitimate interests and permitted by law in establishing, exercising or defending our legal rights (including providing information to others for the purposes of fraud prevention) and protecting the rights, property or safety of HolisTix Ticketing Ltd, our customers, suppliers or others;
  - and where we have stated or informed you otherwise (e.g. in this Privacy Statement or on the Site).
  We may also disclose your personal information to third parties in the event that we propose to dispose of or acquire any business or assets (in which case we may disclose your personal information to the prospective acquirer or seller of such business or assets and/or their professional advisors) or if we or substantially all of our assets are proposed to be acquired by a third party. Any such disclosure will be made where necessary for the legitimate interests of us and/or the third party in respect of the proposed transaction; however we will not transfer your personal information to any such third party unless we are satisfied that they are able to provide an adequate level of protection in respect of your personal information.
  Except as provided in this Privacy Statement, we will not provide or disclose your information to third parties without your express consent for any purpose (including but not limited to direct marketing). We do not sell personal information under any circumstances.

1. You can ask that such information is no longer sent to you by emailing us at support@holistix.io, or by writing to us at HolisTix Ticketing Ltd, C/O Ozkan Accountants, Vantage Point, 2nd Floor, Suite 12, New England Road, Brighton, United Kingdom, BN1 4GW, or by clicking on the appropriate link in the footer of any of our marketing emails or following instructions in any related SMS message. Any such withdrawal of consent will not affect the lawfulness of our processing based on your consent before you withdrew it.

1. We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know that information. However, the Internet is global and no data transmitted via the Internet can be guaranteed by us to be completely secure during transmission. We cannot guarantee the security of any information that you disclose online and we will not be responsible for any breach of security unless this is due to our negligence or wilful default.
  In certain circumstances we may use the services of a supplier outside the European Economic Area (EEA) for purposes referred to in this Privacy Statement (for example, we use Stripe for processing payments). This may involve your personal information being processed by the relevant supplier on our behalf or on the supplier's own behalf outside of the EEA. If we do this, we will require the relevant supplier to put in place appropriate technical and organisational data protection security measures (for example, as part of our contract with the relevant supplier).
  We have put in place procedures to deal with any suspected data security breach and will notify you and/or any applicable regulator of a suspected breach where we are legally required to do so.

1. You have a legal right to see a copy of the personal information that we keep about you and to correct any inaccuracies, subject to certain exemptions. In some circumstances you may also have the right to:
  - request that we erase any personal information held about you;
  - restrict our processing of your personal information (e.g. to suspend processing while verifying accuracy or reasons);
  - data portability (i.e. request the transfer of personal information to a third party); and
  - object to our processing of your personal information where we rely on legitimate interest (or those of a third party).
  Where we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time without reason by contacting us (though this will not affect the lawfulness of our use of your data before you have withdrawn consent).
  Requests of the nature set out above should be made in writing to the Information Compliance Officer, HolisTix Ticketing Ltd, C/O Ozkan Accountants, Vantage Point, 2nd Floor, Suite 12, New England Road, Brighton, United Kingdom, BN1 4GW, or via email at support@holistix.io. We will respond to your request as soon as possible and in any event within one month. We may request proof of your identity before disclosing information or complying with any request.
  You will not generally have to pay a fee to exercise any of your rights described above. However, we may charge a reasonable fee if a request is clearly unfounded or excessive, or refuse to comply in such circumstances.

1. Any personal information held by us will be retained for as long as needed to fulfil the purpose(s) for which it was collected. Specific retention periods are available upon request.
  For example, if you have subscribed to our newsletter, your preferences will be retained unless and until:
  - we cease producing our newsletter, or
  - you withdraw your consent.
  We securely delete or suppress your personal data without delay after such events. We also regularly review our retention of data, ensuring it is updated, archived or securely deleted if it becomes outdated.

1. The Site uses cookies to ensure the best possible user experience. These cookies include:
  - Strictly Necessary Cookies (e.g. ForceFlashSite, HS, smSession, XSRF-TOKEN)
  - Functionality Cookies (e.g. svSession, SSR-caching)
  - Security Cookies (e.g. TS*, TS01*******, TSxxxxxxxx, TSxxxxxxxx_d)
  Most cookies are first-party. Some are third-party cookies for security and functionality purposes. Cookie preferences can be adjusted in your browser settings or via the Site’s cookie settings area. For more information, visit www.aboutcookies.org.
  We do not use cookies to market third-party interests.