1. Who we are
Enjoy Tickets is a trading name of Enjoy Tickets Ltd, registered in England and Wales, company number 16330135, registered office Office 28 Basepoint, Dartford Business Park, Victoria Road, Dartford, Kent, DA1 5FS. We decide how and why your personal information is used on Enjoy Tickets, which makes us its controller under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for people in the European Union, the EU General Data Protection Regulation (EU GDPR).
- Our registration with the Information Commissioner's Office (ICO) is in progress.
- For anything about your personal information, email privacy@enjoytickets.co.uk or use our contact form.
This notice covers enjoytickets.co.uk, the shops that sell through our checkout (“Tickets by Enjoy Tickets”), and the Enjoy Tickets app. The organisers whose events we sell, and the partners who sell our events, have their own privacy notices for what they do with your information.
2. What we collect
When you buy, or join a waitlist
- your first and last name and email address and, if you choose, a phone number so we can reach you about your tickets
- what you bought: the event, tickets, seats, extras, any Flexible ticket, gift card or group booking, the prices, any code you used, and your order reference
- your answers to the optional boxes at checkout “Let the organiser email me about their other events” and “Email me about events and offers from Enjoy Tickets” (and, for orders placed before 9 October 2026, your answers to the boxes then shown for sharing your name and email with the organiser and for appearing in photos and videos)
- a reference for your payment from our payment processor, and whether it succeeded or was refunded. We never see or keep your full card number: you enter it on the payment page only.
- the name and email address of anyone you pass a ticket to, and anyone who passes one to you
- if you sell a ticket through fan resale: the listing, its price and the sale
- for the waitlist: the event, ticket type and how many you asked for, and your email address
If you open an account
- your name, email address, whether you confirmed it, and your password, which is stored scrambled so nobody can read it
- events you save, organisers you follow, your notification settings, and your help requests
When you use the website
- a checkout session cookie, which links tickets held for you, codes you entered and your orders to your browser, so you can buy without an account
- a random visitor id for our own analytics, with the pages and events you view, the steps of buying you reach, the website or campaign that brought you, and whether you use a phone or a computer. We do not store your IP address with these, and if you buy, the order records which channel brought it
- for a waiting room: a random id for your browser and a scrambled version of your IP address, used only to limit how many places one connection can take
- Google Analytics information, but only if you accept all cookies. See our Cookie policy.
- Meta pixel information, but only if you accept all cookies: the pages you view, tickets you add, checkouts you start and purchases, for our own ads and, on an organiser's pages, for that organiser's. See our Cookie policy.
When you use the app
- a random id the app makes for your device, which stands in for a browser at checkout and in a waiting room
- if you allow notifications: your device's push token, whether it is an iPhone or Android phone, the app version, your time zone and your notification settings
At the event
- when your ticket or extra was scanned, at which entrance, and by which door device
When you go to buy tickets on another ticket site
Some organisers sell their event on another ticket site, such as iaBilet. When you press the button to buy tickets for one of these events, on the website or in the app, we ask you to sign in, and we record your name, email address, the event, and when you pressed it (and whether it was on the website or in the app). You buy on the other site under its own terms and privacy notice; we do not see your payment there.
When you contact us
- your name, email address, order reference and what you write, with any files you attach. Photos are saved again on our side, which removes any location data in them
We do not ask for sensitive information such as health details. If you tell us about access needs so we can arrange a wheelchair space or a companion ticket, we use that only to help with your request and share it with the organiser only to arrange it.
Gift cards and group bookings
- for a gift card: your name and email address as the buyer, the recipient's name and email address, the sender name and message you write, the amount, the code, when it was sent, and what it was spent on
- for a group booking: the leader's name and email address, each payer's name and email address, and the places each of them paid for
3. Why we use it, and our lawful bases
Data protection law requires a lawful basis for each use of your information. These are ours:
| What we do | Lawful basis |
|---|---|
| Selling you tickets, taking payment, sending your tickets, refunds, transfers, fan resale, extras, the Flexible ticket, gift cards, group bookings and the waitlist | Contract: we need it to do what you asked |
| Your account, saved events, following organisers and the new event emails you get from following them | Contract: the service you signed up for |
| Giving the organiser the details they need to run the event: letting you in, checking tickets, and telling you about important changes to the event | Contract, and the legitimate interests of the organiser and us in running the event safely |
| Letting the organiser email you about their other events, when you ticked the box | Consent, which you can withdraw at any time |
| Sending you our own emails about events and offers, when you ticked our box at checkout or agreed elsewhere, and seeing which ones you open and click so we send fewer and better ones | Consent, which you can withdraw at any time |
| One reminder email or notification about a checkout you left unpaid | Legitimate interests: helping you finish a booking you started. Every reminder has a link to stop them |
| Keeping sales and payment records, tax and accounting, and answering lawful requests from authorities | Legal obligation |
| Preventing fraud and abuse, enforcing ticket limits and code rules, keeping the waiting room fair, and keeping our systems secure | Legitimate interests: protecting buyers, organisers and us |
| Answering your help requests | Contract where it is about your order, otherwise legitimate interests |
| Our own analytics, and showing organisers and partners where their sales came from | Legitimate interests: improving Enjoy Tickets and paying partners correctly |
| Giving a partner your name and email address so they can contact you about their events and offers, when you ticked their box at checkout | Consent, which you can withdraw at any time with the partner or with us |
| Recording who we send to an event sold on another ticket site, and giving the organiser your name and email address so they can confirm whether you bought | Legitimate interests: being paid our commission on the tickets our buyers buy, and the organiser checking what they owe us |
| Google Analytics | Consent, given in the cookie banner |
| Meta pixels (ours and organisers’), and telling Meta about your purchase so ads can be measured | Consent, given in the cookie banner |
| Push notifications in the app | Consent, given in your phone’s settings, plus a switch for each kind in the app |
4. Who we share it with
The organiser of your event
We sell tickets on the organiser's behalf, so they get the guest list for their event: the buyer's name and email address, the name on each ticket, ticket types and seats, check in times, how you found the event, and your marketing choice. They need it to run the event: to let you in, check tickets and tell you about important changes. This is part of buying a ticket, so it is explained at checkout rather than asked with a tick box. A phone number you give at checkout is not shared with the organiser: only Enjoy Tickets staff see it, to reach you about your tickets. They may email you about their other events only if you ticked “Let the organiser email me about their other events”, which is never ticked for you. The organiser is a separate controller for what they do with it, under their own privacy notice, which we link to at checkout when they give it to us.
Photography and video filming may take place at events, including recordings of the audience and general atmosphere. The organiser and its authorised partners may use the footage and photographs for event documentation and promotion where the law allows. We say so on the event page, at checkout and in our Terms, and the organiser puts up signs at the venue. Buying a ticket is not consent where separate consent is required: the organiser asks for it separately where the law requires it.
Orders placed before 9 October 2026 had two boxes at checkout, for sharing your name and email with the organiser and for appearing in photos and videos. If you unticked either one, your choice still applies to those orders: the organiser got only what the door needs, and must not use photos or videos in which you can be clearly identified to promote their events.
Door staff's phones keep the event's list (names, ticket types, seats and a scrambled form of each code, never the code itself) so they can scan when the venue has no signal.
Partners
- If a partner sent you to us through their link, button or shop and you bought, the partner sees that order in their dashboard with its reference, tickets and total, so they can be paid their commission. They do not see your name, email address or ticket codes: you are our customer, and if you ask them for help they pass your order reference to us.
- Some partners ask, with an unticked box at checkout, whether they may contact you about their events and offers. If you tick it, that partner receives your name and email address for that purpose and is responsible for how it uses them. You can unsubscribe with the partner at any time, or tell us and we pass it on.
- If you bought through a partner's own checkout, the partner gave us your name and email address to issue your tickets, and they receive your order and ticket details back from us.
Organisers of events sold on another ticket site
When you go from us to another ticket site to buy tickets for an organiser's event, we share your name and email address, and when you went, with that event's organiser. Each month they confirm whether you bought tickets there, so they can pay us our commission on the tickets our buyers bought. They may use it only for that, never for marketing. Use the same email address on the other site, so the organiser can match you.
People you pass tickets to
When you pass a ticket on, the email they get says it came from you, by name.
The companies that help us run Enjoy Tickets
These process information for us, under contracts that only let them use it to provide their service:
| Who | What they do | Where |
|---|---|---|
| Hetzner Online | Hosts our website, database and uploaded files | Helsinki, Finland (EU) |
| Revolut Ltd | Processes card, Apple Pay and Google Pay payments and refunds, as our payment processor | United Kingdom |
| Resend | Sends our emails: tickets, account, order, help and marketing emails, and tells us which are delivered, opened or clicked | United States |
| Expo (650 Industries) | Delivers app notifications, through Apple’s and Google’s push services | United States |
| Google Analytics, only if you accept all cookies; Google Wallet, only if you add a ticket to it | United States and elsewhere | |
| Meta Platforms Ireland | Meta pixels, only if you accept all cookies: page views and purchases for our own ads, and for an organiser’s ads on that organiser’s pages. A purchase is also sent from our server, with your email address and name scrambled (hashed), and your IP address and browser | Ireland, United States and elsewhere |
| OpenFreeMap | Map images on event and venue pages. Your browser fetches them directly, so they see your IP address; we send them nothing else | Europe |
If you add a ticket to Apple Wallet, we make the pass file and your phone keeps it; we do not send it to Apple. Revolut also has its own legal duties, for example to prevent fraud, for which it is a controller under its own privacy notice.
Others, only when needed
- the police, courts, tax authorities or regulators, when the law requires it, or to prevent fraud or crime
- our professional advisers, such as lawyers and accountants
- a buyer of our business, if it is ever sold, who must then protect your information in the same way
We never sell your personal information.
5. Sending information outside the UK and the EU
Our servers are in Finland, in the European Union. The UK and the EU each recognise the other as protecting personal information properly, so information can move between them without extra steps.
Some providers above are in the United States. When information goes there, we rely on the UK and EU decisions for companies certified under the EU and US Data Privacy Framework and its UK extension, or on the standard contract clauses approved for this by the UK and the EU. You can ask us for a copy of the safeguards that apply.
6. How long we keep it
| Information | How long |
|---|---|
| Orders, tickets, refunds and payment references | At least 6 years after the end of the financial year of the sale, because tax law requires it. They stay even if you close your account. |
| Your account, saved events, follows and notification settings | Until you close your account. They are deleted when you do. |
| Saved events in your browser (when logged out) | In your browser until you log in, when they move to your account, or until you clear your browser data |
| Waitlist places | Until you leave the waitlist, buy, or close your account |
| Your presses of the button to buy tickets on another ticket site | Until you close your account, when they are deleted. If the organiser confirmed that you bought tickets, that record is kept with our accounting records, like orders. |
| Waiting room places, with the scrambled IP address | Deleted 7 days after the waiting room ends |
| App notification log | 30 days. The record of each notification sent: 60 days |
| App push tokens | Until you sign out, close your account, or your phone tells us the token no longer works |
| Our own analytics | 25 months |
| Google Analytics | 14 months, set in Google Analytics |
| Help requests and attachments | 3 years after the last message |
| Gift cards and their purchases | With our accounting records: at least 6 years after the card expires or is fully spent |
| Group bookings | With the orders each person paid for (see Orders above) |
| Nightly backup copies of our database | 14 days |
7. Your rights
You have the right to:
- see the personal information we hold about you, and get a copy
- have it corrected if it is wrong
- have it deleted, unless we must keep it, for example sales records
- limit how we use it while a question about it is sorted out
- object to us using it on the basis of legitimate interests, and to direct marketing at any time
- get it in a portable format, where we use it on the basis of contract or consent
- withdraw your consent at any time, where we rely on it
To use any of these, email privacy@enjoytickets.co.uk or use our contact form, from the email address you use with us if you can. It is free. We may ask you to confirm who you are, and we reply within one month.
You can do much of this yourself: change your notification settings in your account or the app, unfollow organisers, leave a waitlist from the link in its email, stop checkout reminders from the link in the email, change your cookie choice, and close your account.
We do not make decisions about you that have legal or similarly significant effects based only on automated processing.
8. Marketing and your choices
- “Let the organiser email me about their other events” at checkout is off unless you tick it. If you do, the organiser of that event may email you about their other events. Saying no never stops you buying a ticket or getting the messages you need about your event. Every such email must let you unsubscribe.
- Sharing your details and photos: these are not tick boxes. The organiser gets the details needed to run the event, and photography is covered by the notice described under Who we share it with.
- Organisers you follow: when one puts a new event on sale, we send you one email about it. Each has a link to unfollow.
- Checkout reminders: at most one per event, with a link to stop them.
- “Email me about events and offers from Enjoy Tickets” at checkout is a separate box, also off unless you tick it. If you do, we send you our own emails about events and offers from news.enjoytickets.co.uk, in your language. We may also email people who agreed to hear from us in another way, for example on a sign-up form, and we keep a record of where and when they agreed. Every email has a one-click unsubscribe link, and once you unsubscribe we never email you marketing again unless you tick the box again. Our email provider tells us when an email is delivered, opened or clicked, and we use that only to see which emails work. Emails about your tickets and orders still arrive.
9. Children
You must be at least 16 to buy tickets or open an account, and 16 and 17 year olds need a parent's or guardian's permission. We do not knowingly collect information from anyone under 16. If you think a child has given us their information, contact us and we will delete it.
10. Keeping it safe
Everything between your browser and us is encrypted. Passwords are stored scrambled. Card details never reach our servers. Ticket codes change when tickets are passed on, resold or sent to a corrected email address, so old copies stop working. Our team, organisers and partners only see what their role needs, and our staff actions are logged. No system is perfectly secure, but if something goes wrong that puts you at risk, we will tell you and the ICO as the law requires.
11. How to complain
Please talk to us first, and we will try to put things right. You also have the right to complain to a data protection authority:
- in the UK, the Information Commissioner's Office: on the ICO website, or by phone on 0303 123 1113
- in the EU, the authority in the country where you live or work, or where you think the problem happened. For example, the Data Protection Commission in Ireland, the Data Protection Authority in Belgium, the authority for your state in Germany, or the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania
12. Changes to this notice
We update this notice when what we do changes. The version date is at the top of the page. If a change matters to you, for example a new use of your information, we will tell you by email or on the site before it happens.