Privacy policy

Who we are

MzansiTickets is a ticketing platform built in South Africa. Organisers list their events here and sell tickets through it; buyers pay for those tickets and hold them here. This policy covers what the website and the two apps behind it do with your details.

What we collect

• When you create an account: your first and last name, your email address, and a password — which we keep only as a hash, so nobody here can read it back.
• When you buy a ticket: the name on each ticket, what you bought, and the email address the tickets are sent to. Buying does not need an account, but it does need that address — it is where the tickets go.
• When you sign in with Google: your name, your email address and your Google account reference. Nothing else.
• When you organise an event: your organiser name, contact details and the Paystack account that receives your money.
• While you use the site: ordinary server logs — the address you connected from, the page you asked for, the time and your browser — and the session cookie that keeps you signed in.

Why we use it

• to take your payment and issue your tickets;
• to email your tickets, and to tell you if an event is cancelled, moved or refunded;
• to run the door — a ticket's code is checked once, against the ticket it belongs to;
• to pay organisers what their events sold;
• to answer you when you write in;
• and to keep the records we are required by law to keep.

We do not sell your details, and there is no advertising or tracking script on this site.

Who else sees it

• Paystack, which takes the payment and pays the organiser out.
• Google, but only if you choose to sign in with Google, and only for the sign-in itself.
• Our hosting, database and email providers, which run the service on our behalf.
• The organiser of the event you bought for, who sees the orders and the names on the tickets for their own event — that is what makes the door list work.
• Anyone with a lawful right to it, if we are required to hand it over.

How long we keep it

An account for as long as it is open. Order and ticket records for as long as tax and accounting rules require after the sale, and a little longer if a payment is disputed. Server logs for a short period. Deleting your account removes your details, but not the order records we are obliged to keep.

Your rights

Under the Protection of Personal Information Act you may ask what we hold about you, ask us to correct it, ask us to delete what we are not required to keep, and object to our using it. Write to the address below and we will come back to you. If you are not satisfied with our answer, the Information Regulator of South Africa can be reached at inforeg@justice.gov.za.

Cookies

This site sets one kind of cookie: the session cookie that keeps you signed in, together with the token that protects the forms you submit. There are no advertising, analytics or cross-site tracking cookies.

Security

The site is served over HTTPS, passwords are stored as hashes, and a ticket's code is signed so a guessed one cannot be let in at a door. No system is perfect, so if you think an account of yours has been used by somebody else, tell us straight away.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects what we collect or who sees it, we will say so on this page rather than expect you to notice.