Privacy policy

Who we are

We are the “controller” of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect, why, and our legal basis

• Ticket details you enter (such as the artist, venue, date, seat, a message and names). We use these to show your preview and make your PDF. While you're designing, they're saved only in your own browser. They reach us when you pay, as part of your order. Legal basis: it's needed to provide what you ordered (contract).
• A photo you add: it never leaves your device. It's read, framed and drawn into your ticket in your own browser, and the PDF is made there too, so we never receive, see or store it. It's kept in your browser's own storage until you clear that. To buy, only the word “photo” and how you framed it are sent to us.
• Order details: which design you bought, the order reference, whether it was paid, and the country on your billing details (we use it to choose paper size). Legal basis: contract, and our legal duty to keep accounting records.
• Payment and contact details: your email address, billing details and card or wallet details. These are collected and processed by Stripe, not us. Stripe is a separate controller of that information; see Stripe's privacy policy. Legal basis: contract.
• Technical information: your IP address, browser type and the pages you request, recorded in logs by our hosting provider. We use it to run the site, keep it secure and fix faults. Legal basis: legitimate interests in running a safe, working website.
• Messages you send us, and your email address if you write to us, so we can reply and keep a record. Legal basis: legitimate interests, or contract if it's about an order.

We don't ask for more than this, and we don't make decisions about you by automated means.

Cookies and similar technologies

We use your browser's local storage to save your draft ticket on your own device, so your work is still there if you come back. This is part of the service you asked for and isn't shared with us. You can clear it in your browser settings. We don't use advertising, analytics or tracking cookies. If that changes, we'll ask first and update this page. Our payment provider may use cookies on its payment pages to take payments securely and prevent fraud.

Who we share your information with

• Stripe, who take your payment, handle tax and fraud checks, and store your order record, including the ticket details you entered.
• Our hosting provider (Netlify), who run the website and make your PDF.
• Our professional advisers (such as accountants), and the authorities, where the law requires it.

We don't sell your information or share it for other companies' marketing.

Sending information abroad

Some of these providers process information outside the UK, including in the United States. Where they do, they use approved safeguards such as the UK's international data transfer agreement or addendum, or the UK–US data bridge, so that your information stays protected.

How long we keep it

• Your draft ticket stays in your browser until you clear it.
• Order records, including the ticket details, are kept in your order record with Stripe, and we keep accounting records for 6 years, as UK tax rules require.
• Messages to us are kept for as long as needed to deal with them, and usually no more than 2 years afterwards.
• Server logs are kept for a short period set by our host, and are then deleted.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• have inaccurate information corrected;
• ask us to delete your information, in some circumstances;
• ask us to restrict how we use it, or object to our use of it based on legitimate interests;
• receive information you gave us in a portable format, where it applies.

To use any of these, email help@theticketgift.com. We'll reply within one month. We may need to check who you are first.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use your information we'll update this page and the date at the top.