Data Protection Notice

Privacy and Personal Data Protection Notice in accordance with UAE Federal Decree-Law No. 45 of 2021

Last updated: March 2025

Someone's Ticket

This Privacy and Personal Data Protection Notice has been prepared by Someone's Ticket in its capacity as a data controller to inform users about the processing of personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable data protection regulations within the United Arab Emirates.

This notice applies to personal data processed through Someone's Ticket services, including its website, mobile applications, customer support channels, and other ticket distribution channels (collectively referred to as the "Sales Channels").

1. Data Controller Information

The entity responsible for processing personal data collected through the Platform is:

Company Name: Someone's Ticket

Platform: Someone's Ticket Ticketing Platform

Business Activity: Digital event ticketing and ticket distribution services

Contact details for data protection inquiries are available through the Platform's Contact or Help Center sections.

2. Categories of Personal Data Processed

Someone's Ticket may process the following categories of personal data in connection with ticket purchases and platform use.

Identity Information

  • Name
  • Surname

Contact Information

  • Email address
  • Phone number
  • Address information when required for billing or delivery

Customer Transaction Information

  • Ticket purchases
  • Order history
  • Event participation records
  • Support requests and communications
  • Refund or exchange requests

Financial Information

  • Payment method information processed through secure payment providers
  • Billing and invoicing information

Someone's Ticket does not store full payment card numbers.

Technical and Security Information

  • IP address
  • Device identifiers
  • Platform usage logs
  • Authentication data

Marketing Preferences

  • Campaign and promotional communication preferences when consent is provided

Website and Platform Usage Data

  • Browsing activity
  • Interaction with events and listings
  • Cookies and analytics data collected through platform technologies

Customer Service Data

  • Call center recordings
  • Support communications

Legal Compliance Information

  • Information contained in correspondence with authorities or regulatory bodies

3. Purposes and Legal Basis for Processing Personal Data

Personal data may be processed for the following purposes and legal bases under the UAE PDPL and applicable laws.

Contractual Necessity

Personal data may be processed where necessary to perform contractual obligations related to ticket purchases, including:

  • Processing ticket sales and reservations
  • Delivering digital tickets
  • Managing refunds or cancellations
  • Processing payments and invoices
  • Providing customer support
  • Managing user accounts

Legal Obligations

Personal data may be processed where required to comply with applicable laws and regulatory obligations, including:

  • Financial reporting obligations
  • Tax compliance requirements
  • Fraud prevention and investigation
  • Responding to lawful government requests

Legitimate Business Interests

Personal data may be processed where necessary for Someone's Ticket's legitimate interests, including:

  • Platform security and fraud detection
  • Service improvement and analytics
  • Maintaining platform performance
  • Transaction monitoring

Such processing is carried out in a manner that respects users' rights and freedoms.

User Consent

Where required by law, personal data may be processed based on user consent for purposes including:

  • Marketing communications
  • Promotional campaigns
  • Event recommendations

Users may withdraw consent at any time.

4. Methods of Personal Data Collection

Personal data may be collected through various channels, including:

  • Website and mobile applications
  • Ticket purchase transactions
  • Customer support interactions
  • Electronic communications
  • Cookies and tracking technologies
  • Payment service providers

Data collection may be conducted through automated or manual methods, in accordance with applicable legal requirements.

5. Sharing of Personal Data

Personal data may be shared with third parties only where necessary and in accordance with applicable laws. Recipients may include:

Event Organizers

Personal data may be shared with event organizers for purposes including:

  • Ticket validation
  • Venue entry management
  • Event communication

Payment Service Providers

Secure payment gateways and financial institutions that process transactions may handle payment information.

Technology and Infrastructure Providers

Personal data may be shared with service providers responsible for:

  • Hosting infrastructure
  • Cloud services
  • Data storage
  • Ticket verification systems
  • Cybersecurity services

Logistics Providers

Where physical ticket delivery is requested, shipping and courier providers may receive necessary delivery information.

Marketing Partners

Where consent has been provided, data may be shared with marketing partners for promotional activities.

Legal Authorities

Personal data may be disclosed to governmental authorities where required by law or legal process.

6. International Data Transfers

Personal data may be transferred outside the United Arab Emirates when necessary to provide services.

Such transfers occur only when appropriate safeguards are implemented in accordance with the requirements of the UAE Personal Data Protection Law.

These safeguards may include:

  • Contractual data protection commitments
  • Secure infrastructure arrangements
  • Approved international transfer mechanisms

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.

Retention periods may depend on:

  • Contractual obligations
  • Legal compliance requirements
  • Accounting regulations
  • Dispute resolution needs

Once the retention period expires, personal data may be:

  • Deleted
  • Anonymized
  • Securely archived where legally required

8. Protection of Personal Data

Someone's Ticket implements technical and organizational measures designed to protect personal data against unauthorized access, misuse, or loss.

Security measures include:

  • Encrypted data transmission using SSL technology
  • Access control systems
  • Security monitoring and logging
  • Vulnerability testing and system audits
  • Secure infrastructure management

Risk assessments and security reviews are conducted regularly to maintain platform security.

9. User Rights Under UAE Data Protection Law

Under the UAE Personal Data Protection Law, individuals may have the right to:

  • Request confirmation whether personal data is processed
  • Request access to personal data
  • Request correction of inaccurate data
  • Request deletion of personal data where applicable
  • Request restriction of processing
  • Object to certain types of processing
  • Request transfer of personal data where legally applicable

Requests related to personal data may be submitted through Someone's Ticket customer support channels.

Someone's Ticket will respond to requests within the timeframes established by applicable laws.

10. Updates to This Privacy Notice

Someone's Ticket reserves the right to update this Privacy Notice to reflect legal or operational changes.

Updated versions will be published on the Platform.

Users are encouraged to review this notice periodically.