Privacy Policy
Last updated: 18 February 2026
1. Who We Are
TKKT is an event ticketing platform at tkkt.co.za. This policy explains what personal information we collect, why, and how we protect it, in compliance with the Protection of Personal Information Act (POPIA).
2. What We Collect
| Data | When | Why |
|---|---|---|
| Name, email, phone | Buying a ticket | Ticket delivery and event communication |
| Name, email | Creating an organiser account | Account management and payouts |
| Name, email, message | Contact form | Responding to your enquiry |
| Name, email, WhatsApp | Joining a waitlist | Notifying you when tickets are available |
We do not collect payment card details. Payments are processed entirely by the organiser's chosen payment gateway (currently Yoco, PayFast, or Paystack), and card data never touches our servers.
3. How We Use Your Data
- Ticket buyers: To send your ticket (with QR code) via email, and to allow the event organiser to manage check-ins.
- Organisers: To manage your account, display your public event pages, and communicate about your events.
- Contact form: To respond to your message. We may receive your message via Pushover notification for faster response.
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.
4. Who Sees Your Data
- Event organisers see the name, email, and phone number of people who buy tickets to their events.
- Yoco, PayFast, and Paystack may process payments on behalf of organisers (each organiser picks one). Card data flows directly to the chosen gateway and never to TKKT.
- Mandrill (Mailchimp Transactional) sends transactional emails (ticket confirmations, organiser onboarding).
We do not share your data with anyone else.
5. Data Storage and Security
- Data is stored on a server in a South African data centre.
- All connections use HTTPS encryption.
- Passwords are hashed and never stored in plain text.
- Database access is restricted to authenticated application processes only.
6. Your Rights Under POPIA
You have the right to:
- Access your personal information we hold.
- Correct inaccurate information.
- Delete your data (subject to legal retention requirements).
- Object to processing of your data.
- Withdraw consent at any time.
To exercise any of these rights, contact us. We will respond within 30 days.
7. Cookies
TKKT uses minimal cookies:
- Session cookies: Required for organiser login and checkout flow. These expire when you close your browser.
- CSRF tokens: Security tokens to prevent cross-site request forgery.
We do not use analytics cookies, tracking cookies, or third-party advertising cookies.
8. Data Retention
- Ticket records are kept for 12 months after the event for organiser reporting and dispute resolution.
- Organiser accounts are kept while active. Inactive accounts may be removed after 12 months.
- Contact form messages are kept for 6 months.
9. Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last updated.
10. Contact
For privacy-related questions or POPIA requests: contact us.