Privacy Policy

Trackside Seats (“we”, “us”, “our”) is the data controller responsible for your personal data. We are a business based in the United Kingdom, and our contact address is [BUSINESS ADDRESS]. You can reach us about this policy or your personal data at help@tracksideseats.com.

We are registered with the Information Commissioner’s Office (ICO) under registration number [ICO REGISTRATION NUMBER, to add once registered].

Depending on how you use our website, we may collect the following categories of personal data:

• Identity and contact data: your name, email address, phone number and billing address.
• Order and attendee data: the tickets and packages you buy, and any guest or attendee details (such as names) that our supply partners require to issue tickets for an event.
• Payment data: payment is processed by our payment providers. We do not store your full card details on our systems.
• Account data: your login credentials and preferences, if you create an account.
• Communications data: messages you send us and your marketing preferences.
• Usage and device data: your IP address, browser and device type, and how you interact with our website, collected through cookies and similar technologies.

Where you provide personal data about other people (for example the names of guests attending with you), you confirm that you have their permission to share it with us for this purpose.

Under the UK GDPR we must have a lawful basis for processing your personal data. We use your data for the following purposes, on the bases shown:

• To process your order, provide your tickets and manage your account. Lawful basis: performance of our contract with you.
• To take payment and prevent, detect and investigate fraud. Lawful basis: performance of our contract, our legitimate interests in protecting our business, and compliance with legal obligations.
• To send service communications such as order confirmations, ticket delivery updates and notices of event changes. Lawful basis: performance of our contract with you.
• To provide customer support. Lawful basis: performance of our contract and our legitimate interests in helping you.
• To send marketing emails about events and offers. Lawful basis: your consent, or our legitimate interests under the PECR “soft opt-in” where you are an existing customer. You can opt out at any time.
• To analyse and improve our website and services. Lawful basis: your consent for non-essential analytics cookies, and our legitimate interests in improving our service.
• To keep business and accounting records and comply with the law. Lawful basis: compliance with our legal obligations.

We use cookies and similar technologies. Strictly necessary cookies are essential to make the website work (for example to manage your basket and checkout) and do not require your consent. We only set non-essential cookies — such as analytics and marketing cookies — with your consent.

Non-essential cookies we may use include analytics tools (such as Google Analytics via Google Tag Manager, and Microsoft Clarity) and marketing tools (such as Klaviyo). You can accept or reject non-essential cookies through our cookie banner and change your choice at any time; it is as easy to withdraw consent as it is to give it.

We do not sell your personal data. We share it only with the following categories of recipient, and only as needed:

• Our ticket supply partners, who fulfil your order and issue your tickets, and who need the order and attendee details to do so.
• Payment providers who process your payment securely (Stripe and Airwallex).
• Technology providers who act as our processors, including hosting and database services (Supabase), email delivery (Resend), marketing (Klaviyo), analytics (Google and Microsoft), content management (Sanity) and our customer chat assistant. These providers act on our instructions under a contract.
• Professional advisers, and law-enforcement or regulatory bodies, where we are required or permitted by law to share data.

Some of our providers are located outside the United Kingdom, which means your personal data may be transferred internationally. Where it is, we make sure the transfer is protected: we rely on UK “adequacy” regulations where they apply, or on appropriate safeguards such as the ICO’s International Data Transfer Agreement (IDTA) or the Addendum to the EU Standard Contractual Clauses, in line with UK GDPR requirements.

We keep your personal data only for as long as we need it for the purposes set out in this policy. Order and transaction records are generally kept for at least six years to meet UK tax and accounting requirements. Account data is kept while your account is active, and marketing data until you opt out. When data is no longer needed, we delete or anonymise it.

We use appropriate technical and organisational measures to protect your personal data, including encryption of data in transit, payment processing through PCI DSS-compliant providers, and access controls that limit who can see your data. No method of transmission or storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security.

Under the UK GDPR you have the following rights over your personal data:

• The right to be informed about how we use your data (which this policy provides).
• The right of access to a copy of your data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your data in certain circumstances.
• The right to restrict or object to processing, including objecting to direct marketing.
• The right to data portability.
• The right to withdraw consent at any time, where we rely on your consent.

To exercise any of these rights, contact us at help@tracksideseats.com. We will respond within one month. There is normally no charge, though we may refuse or charge for manifestly unfounded or excessive requests as the law allows.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We may use automated checks to help prevent fraud, but these do not replace human judgement where a significant decision is made.

We only send you marketing where you have consented, or where you are an existing customer and we are permitted to under the PECR “soft opt-in” for our own similar products and services. Every marketing message includes an easy way to unsubscribe, and you can opt out at any time by using that link or contacting us.

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

If you have a concern about how we handle your data, please contact us first at help@tracksideseats.com so we can try to put it right. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk or by calling its helpline on 0303 123 1113.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “last updated” date. Please review it periodically to stay informed about how we protect your data.