1. Who we are
This Privacy Policy explains how Ticket360 Tecnologia e Soluções LTDA, registered under CNPJ 10.316.298/0001-05, headquartered at Rua Borges de Figueiredo, 303, Sala 224 – Mooca, São Paulo – SP, 03110-010, Brazil ("Ticket360", "we", "us"), processes personal data of users of our website, platform and services.
We process personal data in accordance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados – LGPD, Law No. 13,709/2018), the Brazilian Internet Civil Framework (Law No. 12,965/2014) and other applicable laws.
2. Data we collect
We may collect the following categories of personal data:
- Identification and contact data: name, CPF, date of birth, e-mail address and phone number;
- Purchase data: events, tickets purchased, order history, billing information and proof of eligibility for half-price tickets when applicable;
- Payment data: payment method and transaction status. Full card data is processed directly by certified payment processors and is not stored by us;
- Access and device data: IP address, date and time of access, browser, device type, cookies and similar technologies;
- Event access data: ticket validation and check-in records;
- Communications: messages you send us through our contact channels.
3. How we use your data
We use personal data for the following purposes and legal bases under the LGPD:
- Processing ticket purchases, issuing tickets and allowing event access (performance of a contract);
- Preventing fraud and ensuring the security of transactions and accounts (legitimate interest and credit protection);
- Providing customer support and handling refund requests (performance of a contract);
- Complying with legal, tax and regulatory obligations, including keeping access logs (legal obligation);
- Sending information about events you purchased tickets for (performance of a contract);
- Sending marketing communications and offers (consent, which can be withdrawn at any time);
- Improving our website, platform and services (legitimate interest).
4. Sharing of data
We do not sell personal data. We may share data only when necessary with:
- Event organizers, for access control, half-price verification, communication about the event and fulfillment of their legal obligations;
- Payment processors and anti-fraud providers, to process and protect transactions;
- Technology providers, such as hosting, cloud and e-mail services, bound by confidentiality obligations;
- Public authorities, when required by law, regulation or court order.
5. International data transfers
Some of our technology providers may store data on servers located outside Brazil. In these cases, we ensure the transfer complies with the LGPD and that the data receives an adequate level of protection.
6. Cookies
We use cookies and similar technologies to keep you signed in, remember preferences, measure website performance and, with your consent where required, show relevant advertising. You can manage or disable cookies in your browser settings; however, some features of the website may not work properly without them.
7. Data retention
We keep personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Access logs are kept for at least 6 (six) months, as required by the Brazilian Internet Civil Framework, and purchase and tax records are kept for the periods required by tax and consumer legislation.
8. Security
We adopt technical and administrative measures to protect personal data against unauthorized access, loss, alteration or disclosure, including encrypted connections (HTTPS), access controls and monitoring. No system is completely secure, but we work continuously to protect your information.
9. Your rights
Under Article 18 of the LGPD, you have the right to:
- Confirm whether we process your personal data and access it;
- Correct incomplete, inaccurate or outdated data;
- Request anonymization, blocking or deletion of unnecessary or excessive data;
- Request portability of your data to another provider;
- Obtain information about the entities with which we share your data;
- Withdraw consent and request deletion of data processed based on consent;
- File a complaint with the National Data Protection Authority (ANPD).
To exercise your rights, contact us at [email protected]. We may ask for information to confirm your identity before responding.
10. Children and teenagers
Our services are intended for adults. Tickets for children and teenagers must be purchased by a parent or legal guardian, who is responsible for the information provided. We do not knowingly collect data from children without the consent of a parent or guardian.
11. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will always be available on this page with the date of the last update. Significant changes will be communicated through our website or by e-mail.
12. Contact and data protection officer
If you have questions about this policy or about how we process your personal data, please contact our data protection officer:
Ticket360 Tecnologia e Soluções LTDA
CNPJ: 10.316.298/0001-05
Rua Borges de Figueiredo, 303, Sala 224 – Mooca, São Paulo – SP, 03110-010, Brazil
E-mail: [email protected]
Phone: +55 (11) 2797-0777