Skip to content

Legal

Privacy notice

What we collect when you use Enjoy Tickets, why we need it, who sees it, how long we keep it, and the rights you have over it, under UK and EU data protection law.

Last updated 11 October 2026Need help with an order? Help centre or contact us

At a glance

  • We collect what we need to sell you tickets and get you in: your name, email address and what you bought. Never your full card number.
  • The organiser of your event gets the guest list they need to run it. They can email you about their other events only if you tick that box at checkout, which is never ticked for you.
  • Google Analytics and Meta pixels (ours, and an organiser's on their own pages) run only if you accept all cookies. Our own simple analytics use a random visitor id and no IP address.
  • We never sell your personal information.
  • Our servers are in Finland, in the EU. Some providers, such as our email service, are in the United States, with legal safeguards.
  • You can see, correct or delete your information, and close your account at any time. Ask us at privacy@enjoytickets.co.uk.
On this page
  1. 1. Who we are
  2. 2. What we collect
  3. 3. Why we use it, and our lawful bases
  4. 4. Who we share it with
  5. 5. Sending information outside the UK and the EU
  6. 6. How long we keep it
  7. 7. Your rights
  8. 8. Marketing and your choices
  9. 9. Children
  10. 10. Keeping it safe
  11. 11. How to complain
  12. 12. Changes to this notice

1. Who we are

Enjoy Tickets is a trading name of Enjoy Tickets Ltd, registered in England and Wales, company number 16330135, registered office Office 28 Basepoint, Dartford Business Park, Victoria Road, Dartford, Kent, DA1 5FS. We decide how and why your personal information is used on Enjoy Tickets, which makes us its controller under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for people in the European Union, the EU General Data Protection Regulation (EU GDPR).

  • Our registration with the Information Commissioner's Office (ICO) is in progress.
  • For anything about your personal information, email privacy@enjoytickets.co.uk or use our contact form.

This notice covers enjoytickets.co.uk, the shops that sell through our checkout (“Tickets by Enjoy Tickets”), and the Enjoy Tickets app. The organisers whose events we sell, and the partners who sell our events, have their own privacy notices for what they do with your information.

2. What we collect

When you buy, or join a waitlist

  • your first and last name and email address and, if you choose, a phone number so we can reach you about your tickets
  • what you bought: the event, tickets, seats, extras, any Flexible ticket, gift card or group booking, the prices, any code you used, and your order reference
  • your answers to the optional boxes at checkout “Let the organiser email me about their other events” and “Email me about events and offers from Enjoy Tickets” (and, for orders placed before 9 October 2026, your answers to the boxes then shown for sharing your name and email with the organiser and for appearing in photos and videos)
  • a reference for your payment from our payment processor, and whether it succeeded or was refunded. We never see or keep your full card number: you enter it on the payment page only.
  • the name and email address of anyone you pass a ticket to, and anyone who passes one to you
  • if you sell a ticket through fan resale: the listing, its price and the sale
  • for the waitlist: the event, ticket type and how many you asked for, and your email address

If you open an account

  • your name, email address, whether you confirmed it, and your password, which is stored scrambled so nobody can read it
  • events you save, organisers you follow, your notification settings, and your help requests

When you use the website

  • a checkout session cookie, which links tickets held for you, codes you entered and your orders to your browser, so you can buy without an account
  • a random visitor id for our own analytics, with the pages and events you view, the steps of buying you reach, the website or campaign that brought you, and whether you use a phone or a computer. We do not store your IP address with these, and if you buy, the order records which channel brought it
  • for a waiting room: a random id for your browser and a scrambled version of your IP address, used only to limit how many places one connection can take
  • Google Analytics information, but only if you accept all cookies. See our Cookie policy.
  • Meta pixel information, but only if you accept all cookies: the pages you view, tickets you add, checkouts you start and purchases, for our own ads and, on an organiser's pages, for that organiser's. See our Cookie policy.

When you use the app

  • a random id the app makes for your device, which stands in for a browser at checkout and in a waiting room
  • if you allow notifications: your device's push token, whether it is an iPhone or Android phone, the app version, your time zone and your notification settings

At the event

  • when your ticket or extra was scanned, at which entrance, and by which door device

When you go to buy tickets on another ticket site

Some organisers sell their event on another ticket site, such as iaBilet. When you press the button to buy tickets for one of these events, on the website or in the app, we ask you to sign in, and we record your name, email address, the event, and when you pressed it (and whether it was on the website or in the app). You buy on the other site under its own terms and privacy notice; we do not see your payment there.

When you contact us

  • your name, email address, order reference and what you write, with any files you attach. Photos are saved again on our side, which removes any location data in them

We do not ask for sensitive information such as health details. If you tell us about access needs so we can arrange a wheelchair space or a companion ticket, we use that only to help with your request and share it with the organiser only to arrange it.

Gift cards and group bookings

  • for a gift card: your name and email address as the buyer, the recipient's name and email address, the sender name and message you write, the amount, the code, when it was sent, and what it was spent on
  • for a group booking: the leader's name and email address, each payer's name and email address, and the places each of them paid for

3. Why we use it, and our lawful bases

Data protection law requires a lawful basis for each use of your information. These are ours:

Why we use personal information, and the lawful basis for each use
Selling you tickets, taking payment, sending your tickets, refunds, transfers, fan resale, extras, the Flexible ticket, gift cards, group bookings and the waitlistContract: we need it to do what you asked
Your account, saved events, following organisers and the new event emails you get from following themContract: the service you signed up for
Giving the organiser the details they need to run the event: letting you in, checking tickets, and telling you about important changes to the eventContract, and the legitimate interests of the organiser and us in running the event safely
Letting the organiser email you about their other events, when you ticked the boxConsent, which you can withdraw at any time
Sending you our own emails about events and offers, when you ticked our box at checkout or agreed elsewhere, and seeing which ones you open and click so we send fewer and better onesConsent, which you can withdraw at any time
One reminder email or notification about a checkout you left unpaidLegitimate interests: helping you finish a booking you started. Every reminder has a link to stop them
Keeping sales and payment records, tax and accounting, and answering lawful requests from authoritiesLegal obligation
Preventing fraud and abuse, enforcing ticket limits and code rules, keeping the waiting room fair, and keeping our systems secureLegitimate interests: protecting buyers, organisers and us
Answering your help requestsContract where it is about your order, otherwise legitimate interests
Our own analytics, and showing organisers and partners where their sales came fromLegitimate interests: improving Enjoy Tickets and paying partners correctly
Giving a partner your name and email address so they can contact you about their events and offers, when you ticked their box at checkoutConsent, which you can withdraw at any time with the partner or with us
Recording who we send to an event sold on another ticket site, and giving the organiser your name and email address so they can confirm whether you boughtLegitimate interests: being paid our commission on the tickets our buyers buy, and the organiser checking what they owe us
Google AnalyticsConsent, given in the cookie banner
Meta pixels (ours and organisers’), and telling Meta about your purchase so ads can be measuredConsent, given in the cookie banner
Push notifications in the appConsent, given in your phone’s settings, plus a switch for each kind in the app

4. Who we share it with

The organiser of your event

We sell tickets on the organiser's behalf, so they get the guest list for their event: the buyer's name and email address, the name on each ticket, ticket types and seats, check in times, how you found the event, and your marketing choice. They need it to run the event: to let you in, check tickets and tell you about important changes. This is part of buying a ticket, so it is explained at checkout rather than asked with a tick box. A phone number you give at checkout is not shared with the organiser: only Enjoy Tickets staff see it, to reach you about your tickets. They may email you about their other events only if you ticked “Let the organiser email me about their other events”, which is never ticked for you. The organiser is a separate controller for what they do with it, under their own privacy notice, which we link to at checkout when they give it to us.

Photography and video filming may take place at events, including recordings of the audience and general atmosphere. The organiser and its authorised partners may use the footage and photographs for event documentation and promotion where the law allows. We say so on the event page, at checkout and in our Terms, and the organiser puts up signs at the venue. Buying a ticket is not consent where separate consent is required: the organiser asks for it separately where the law requires it.

Orders placed before 9 October 2026 had two boxes at checkout, for sharing your name and email with the organiser and for appearing in photos and videos. If you unticked either one, your choice still applies to those orders: the organiser got only what the door needs, and must not use photos or videos in which you can be clearly identified to promote their events.

Door staff's phones keep the event's list (names, ticket types, seats and a scrambled form of each code, never the code itself) so they can scan when the venue has no signal.

Partners

  • If a partner sent you to us through their link, button or shop and you bought, the partner sees that order in their dashboard with its reference, tickets and total, so they can be paid their commission. They do not see your name, email address or ticket codes: you are our customer, and if you ask them for help they pass your order reference to us.
  • Some partners ask, with an unticked box at checkout, whether they may contact you about their events and offers. If you tick it, that partner receives your name and email address for that purpose and is responsible for how it uses them. You can unsubscribe with the partner at any time, or tell us and we pass it on.
  • If you bought through a partner's own checkout, the partner gave us your name and email address to issue your tickets, and they receive your order and ticket details back from us.

Organisers of events sold on another ticket site

When you go from us to another ticket site to buy tickets for an organiser's event, we share your name and email address, and when you went, with that event's organiser. Each month they confirm whether you bought tickets there, so they can pay us our commission on the tickets our buyers bought. They may use it only for that, never for marketing. Use the same email address on the other site, so the organiser can match you.

People you pass tickets to

When you pass a ticket on, the email they get says it came from you, by name.

The companies that help us run Enjoy Tickets

These process information for us, under contracts that only let them use it to provide their service:

Service providers that process personal information for Enjoy Tickets
Hetzner OnlineHosts our website, database and uploaded filesHelsinki, Finland (EU)
Revolut LtdProcesses card, Apple Pay and Google Pay payments and refunds, as our payment processorUnited Kingdom
ResendSends our emails: tickets, account, order, help and marketing emails, and tells us which are delivered, opened or clickedUnited States
Expo (650 Industries)Delivers app notifications, through Apple’s and Google’s push servicesUnited States
GoogleGoogle Analytics, only if you accept all cookies; Google Wallet, only if you add a ticket to itUnited States and elsewhere
Meta Platforms IrelandMeta pixels, only if you accept all cookies: page views and purchases for our own ads, and for an organiser’s ads on that organiser’s pages. A purchase is also sent from our server, with your email address and name scrambled (hashed), and your IP address and browserIreland, United States and elsewhere
OpenFreeMapMap images on event and venue pages. Your browser fetches them directly, so they see your IP address; we send them nothing elseEurope

If you add a ticket to Apple Wallet, we make the pass file and your phone keeps it; we do not send it to Apple. Revolut also has its own legal duties, for example to prevent fraud, for which it is a controller under its own privacy notice.

Others, only when needed

  • the police, courts, tax authorities or regulators, when the law requires it, or to prevent fraud or crime
  • our professional advisers, such as lawyers and accountants
  • a buyer of our business, if it is ever sold, who must then protect your information in the same way

We never sell your personal information.

5. Sending information outside the UK and the EU

Our servers are in Finland, in the European Union. The UK and the EU each recognise the other as protecting personal information properly, so information can move between them without extra steps.

Some providers above are in the United States. When information goes there, we rely on the UK and EU decisions for companies certified under the EU and US Data Privacy Framework and its UK extension, or on the standard contract clauses approved for this by the UK and the EU. You can ask us for a copy of the safeguards that apply.

6. How long we keep it

How long Enjoy Tickets keeps each kind of personal information
Orders, tickets, refunds and payment referencesAt least 6 years after the end of the financial year of the sale, because tax law requires it. They stay even if you close your account.
Your account, saved events, follows and notification settingsUntil you close your account. They are deleted when you do.
Saved events in your browser (when logged out)In your browser until you log in, when they move to your account, or until you clear your browser data
Waitlist placesUntil you leave the waitlist, buy, or close your account
Your presses of the button to buy tickets on another ticket siteUntil you close your account, when they are deleted. If the organiser confirmed that you bought tickets, that record is kept with our accounting records, like orders.
Waiting room places, with the scrambled IP addressDeleted 7 days after the waiting room ends
App notification log30 days. The record of each notification sent: 60 days
App push tokensUntil you sign out, close your account, or your phone tells us the token no longer works
Our own analytics25 months
Google Analytics14 months, set in Google Analytics
Help requests and attachments3 years after the last message
Gift cards and their purchasesWith our accounting records: at least 6 years after the card expires or is fully spent
Group bookingsWith the orders each person paid for (see Orders above)
Nightly backup copies of our database14 days

7. Your rights

You have the right to:

  • see the personal information we hold about you, and get a copy
  • have it corrected if it is wrong
  • have it deleted, unless we must keep it, for example sales records
  • limit how we use it while a question about it is sorted out
  • object to us using it on the basis of legitimate interests, and to direct marketing at any time
  • get it in a portable format, where we use it on the basis of contract or consent
  • withdraw your consent at any time, where we rely on it

To use any of these, email privacy@enjoytickets.co.uk or use our contact form, from the email address you use with us if you can. It is free. We may ask you to confirm who you are, and we reply within one month.

You can do much of this yourself: change your notification settings in your account or the app, unfollow organisers, leave a waitlist from the link in its email, stop checkout reminders from the link in the email, change your cookie choice, and close your account.

We do not make decisions about you that have legal or similarly significant effects based only on automated processing.

8. Marketing and your choices

  • “Let the organiser email me about their other events” at checkout is off unless you tick it. If you do, the organiser of that event may email you about their other events. Saying no never stops you buying a ticket or getting the messages you need about your event. Every such email must let you unsubscribe.
  • Sharing your details and photos: these are not tick boxes. The organiser gets the details needed to run the event, and photography is covered by the notice described under Who we share it with.
  • Organisers you follow: when one puts a new event on sale, we send you one email about it. Each has a link to unfollow.
  • Checkout reminders: at most one per event, with a link to stop them.
  • “Email me about events and offers from Enjoy Tickets” at checkout is a separate box, also off unless you tick it. If you do, we send you our own emails about events and offers from news.enjoytickets.co.uk, in your language. We may also email people who agreed to hear from us in another way, for example on a sign-up form, and we keep a record of where and when they agreed. Every email has a one-click unsubscribe link, and once you unsubscribe we never email you marketing again unless you tick the box again. Our email provider tells us when an email is delivered, opened or clicked, and we use that only to see which emails work. Emails about your tickets and orders still arrive.

9. Children

You must be at least 16 to buy tickets or open an account, and 16 and 17 year olds need a parent's or guardian's permission. We do not knowingly collect information from anyone under 16. If you think a child has given us their information, contact us and we will delete it.

10. Keeping it safe

Everything between your browser and us is encrypted. Passwords are stored scrambled. Card details never reach our servers. Ticket codes change when tickets are passed on, resold or sent to a corrected email address, so old copies stop working. Our team, organisers and partners only see what their role needs, and our staff actions are logged. No system is perfectly secure, but if something goes wrong that puts you at risk, we will tell you and the ICO as the law requires.

11. How to complain

Please talk to us first, and we will try to put things right. You also have the right to complain to a data protection authority:

  • in the UK, the Information Commissioner's Office: on the ICO website, or by phone on 0303 123 1113
  • in the EU, the authority in the country where you live or work, or where you think the problem happened. For example, the Data Protection Commission in Ireland, the Data Protection Authority in Belgium, the authority for your state in Germany, or the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania

12. Changes to this notice

We update this notice when what we do changes. The version date is at the top of the page. If a change matters to you, for example a new use of your information, we will tell you by email or on the site before it happens.

Most answers are in the Help centre. If yours is not, send us a message and we reply by email.

Enjoy Tickets is a trading name of Enjoy Tickets Ltd, registered in England and Wales, company number 16330135. Registered office: Office 28 Basepoint, Dartford Business Park, Victoria Road, Dartford, Kent, DA1 5FS.