Privacy Policy

Ticksy Pty Ltd (“we”, “us”, “our”)

Last updated: 25 July 2026

Ticksy operates an online ticketing platform allowing users to browse, purchase, and manage tickets to events (“the Platform”). This Privacy Policy explains how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using the Platform, you agree to the collection and handling of your personal information as described in this policy.

1. What Personal Information We Collect

We may collect the following categories of personal information:

Identity and contact information: name, email address, phone number, postal address, date of birth
Account information: username, password (encrypted), account preferences
Payment information: credit/debit card details, billing address (processed via PCI-DSS compliant third-party payment processors — we do not store full card numbers)
Transaction information: tickets purchased, event history, order value, resale or transfer activity
Device and technical information: IP address, browser type, device identifiers, operating system
Usage data: pages viewed, search queries, click patterns, referral source (via cookies and similar technologies)
Location data: approximate location derived from IP address, or precise location if you enable location services
Communications: correspondence with our customer support team, survey responses, competition entries
Information from third parties: event organisers, promoters, venues, marketing partners, social media platforms (if you log in via a third-party account), and fraud-prevention services

We do not intentionally collect sensitive information (e.g. health, religious beliefs) unless required for accessibility services (e.g. accessible seating requests), in which case we seek your consent.

2. How We Collect Personal Information

We collect personal information:

Directly from you when you create an account, purchase tickets, contact customer support, or participate in promotions
Automatically through cookies, pixels, and similar tracking technologies when you use the Platform
From third parties such as event organisers, payment processors, marketing partners, or public sources, where reasonably necessary

Where practicable, we collect personal information directly from you. If we collect it from a third party, we will take reasonable steps to notify you.

3. Why We Collect, Hold, Use and Disclose Personal Information

We use personal information for purposes including:

Processing and fulfilling ticket purchases, including delivery (digital or physical)
Verifying your identity and preventing fraudulent transactions or ticket scalping in breach of our terms
Managing your account and providing customer support
Sending transactional communications (order confirmations, event updates, cancellations)
Sending marketing communications about events, presales, and offers (where you have opted in, or as otherwise permitted by law) — you can opt out at any time
Improving and personalising the Platform, including analytics and recommendations
Complying with legal obligations, including tax, consumer law, and law enforcement requests
Investigating complaints, disputes, or suspected unlawful activity

4. Disclosure of Personal Information

We may disclose personal information to:

Event organisers, promoters, and venues — to facilitate entry, seating allocation, and compliance with event terms
Buyers or sellers on our resale platform — if you buy or sell a ticket through our resale marketplace, we may disclose limited information (e.g. name, contact details) to the other party solely to fulfil that order
Payment processors and financial institutions — to process transactions
IT service providers and cloud hosting providers — for platform infrastructure and data storage
Marketing and analytics service providers
Fraud prevention and identity verification services
Professional advisers (legal, accounting) where necessary
Government or regulatory bodies where required by law
A purchaser or potential purchaser in the event of a business sale, merger, or restructure

We do not sell personal information to third parties for their own independent marketing purposes without your consent.

Overseas Disclosure

Some of our service providers (e.g. cloud hosting, payment processing, customer support tools) may store or process personal information outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs, including through contractual protections. In some cases, APP 8.1 may not apply if an exception applies (e.g. you have consented, or the disclosure is required by law).

5. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to:

Keep you logged in and remember preferences
Understand how users interact with the Platform (analytics)
Deliver targeted advertising and measure campaign performance
Detect fraudulent or bot activity during high-demand ticket sales

You can manage or disable cookies through your browser settings; however, this may affect the functionality of the Platform (e.g. checkout may not work without essential cookies).

6. Direct Marketing

We may send you marketing communications about events, presales, and promotions if:

You have provided consent (e.g. opted in during account creation or checkout), or
You are an existing customer and the communication relates to similar events/services, consistent with APP 7

You can opt out at any time by:

Clicking “unsubscribe” in any marketing email
Updating your communication preferences in your account settings
Contacting us using the details in Section 11

We will still send you transactional/service communications relevant to tickets you’ve purchased (e.g. event cancellations) even if you opt out of marketing.

7. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including:

Encryption of data in transit and at rest
Access controls limiting staff access to personal information on a need-to-know basis
Secure, PCI-DSS compliant payment processing
Regular security reviews and monitoring for suspicious activity

No method of transmission or storage is 100% secure. If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.

8. Data Retention

We retain personal information only as long as necessary to fulfil the purposes described in this policy, or as required by law (e.g. tax and financial record-keeping obligations typically require 5–7 years). When no longer required, we will take reasonable steps to destroy or de-identify the information.

9. Automated Decision-Making

We may use automated systems (including rule-based tools and AI-enabled systems) as part of operating the Platform, for example:

Fraud and bot detection — flagging or blocking suspicious purchasing activity during high-demand ticket sales (e.g. rapid multi-account purchasing, suspected scalping)
Queue and virtual waiting room management — allocating queue position and purchase windows
Dynamic and demand-based pricing — adjusting ticket or resale prices based on demand signals
Personalised recommendations and marketing — suggesting events based on your purchase and browsing history

Where an automated system makes, or substantially and directly assists, a decision that could reasonably be expected to significantly affect your rights or interests (for example, blocking a purchase or cancelling an order due to suspected fraud), we will:

Disclose the kinds of personal information used in that automated decision-making
Disclose the kinds of decisions made solely by automated means, and those substantially assisted by automated means
Provide a way for you to request that a human review a significant automated decision affecting you

To request a review of an automated decision, or ask a question about how a particular decision was made, contact us using the details in Section 13. We aim to respond within 45 days.

10. Your Right to Take Further Action

Beyond making a complaint to us or the OAIC (see Section 12), you may also have a personal right of action for a serious invasion of privacy under the statutory tort introduced into Australian law in 2025. This allows an individual to sue where their privacy has been seriously invaded — for example, through misuse of information relating to them — regardless of whether that conduct also breaches the APPs. This is separate from, and in addition to, your rights under the Privacy Act and this policy.

11. Access and Correction

You have the right to request access to, and correction of, the personal information we hold about you. To make a request:

We will respond within a reasonable period (generally within 30 days). We may need to verify your identity before providing access. In limited circumstances (e.g. where access would unreasonably impact the privacy of others, or is prohibited by law), we may refuse a request and will explain why.

There is generally no fee for making a request, though we may charge a reasonable fee for providing access if the request requires substantial resources.

12. Complaints

If you believe we have breached the APPs or mishandled your personal information, you can lodge a complaint:

Contact us directly using the details below — we aim to resolve complaints within 30 days
If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992

13. Contact Us

For privacy-related questions, access/correction requests, or complaints:

Privacy Officer

Ticksy Pty Ltd

Email: privacy@ticksy.com.au

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.