Privacy Policy

UMscope Ticket ("UMscope", "we", "us") is an event ticketing and invitations platform operated by Umscope Ltd, 1216 Ibiyinka Olorunbe, Victoria Island, Lagos 101241, Nigeria. This policy explains what personal data we collect when you use umscopeticket.com, why we collect it, who we share it with and the rights you have under the Nigeria Data Protection Act 2023 ("NDPA").

For most of the data described here we are the data controller. When an organiser uploads their own guest list for a private event, the organiser is the controller of that list and we process it on their behalf (see section 6).

Data you give us

• Account details: first and last name, username, email address, phone number, address, password (we only store a hashed version, never the password itself) and an optional profile photo.
• Ticket purchases: the buyer's name, email and phone number, the tickets bought, and any coupon used.
• RSVPs to private events: your name, email and phone number, whether you are attending, how many people you are bringing, and any answers to the organiser's questions.
• Gifts: the amount, your message, whether you chose to stay anonymous, and registry items you claim.
• Organisers: event details, flyers and videos, organiser and staff contact details, and the bank account you use for payouts.
• Messages you send our support team, by chat or email.

Data collected automatically

• Usage and device data, such as pages viewed, browser type, approximate location from your IP address and referring site, through Google Analytics and Firebase Analytics.
• Check-in records: when a ticket or pass is scanned at an event and by whom.
• Login records and security logs used to keep accounts safe.

Data from others

• From Paystack: confirmation that a payment succeeded or failed, and the account name for a payout account. We never receive or store your full card details.
• From organisers: your name, email and phone number if an organiser adds you to the guest list of a private event.

The NDPA requires a lawful basis for each use of personal data. Ours are:

• Performing our contract with you: creating your account, selling and delivering tickets, emailing passes and receipts, letting you RSVP, processing gifts, checking you in and paying organisers.
• Legal obligations: keeping financial records, preventing fraud and money laundering, and responding to lawful requests from authorities.
• Legitimate interests: keeping the platform secure, fixing problems, and sending service messages about events you booked. We balance these against your rights and you can object at any time (section 8).
• Consent: analytics and live chat cookies (section 9) and marketing emails about other events and features. You can withdraw consent at any time, through Cookie settings in the footer, the unsubscribe link or by emailing us, without affecting what we did before.

We do not sell your personal data, and we do not make decisions about you based only on automated processing that have legal or similarly significant effects.

• Event organisers. When you buy a ticket or RSVP, the organiser of that event sees your name, contact details, ticket or RSVP details and check-in status so they can run the event. Organisers must use this data only for their event and in line with the NDPA.
• Event staff named by the organiser, who see what they need to check guests in.
• Paystack, which processes card, bank and transfer payments, gifts and payouts.
• Service providers who run parts of our service for us: hosting, email delivery, Cloudinary (image and video storage), Google Analytics and Firebase (analytics), Google Maps (venue maps) and Tawk.to (live chat).
• Authorities, when the law requires it or to protect the rights, property or safety of our users, the public or UMscope.
• A buyer or successor if our business is sold or merged, under the same protections described here.

Our service providers may only use your data to provide their service to us, under written terms that require them to keep it secure.

Some of our providers, including Google, Cloudinary and Tawk.to, store data on servers outside Nigeria. When your data leaves Nigeria we rely on the safeguards the NDPA allows, such as the destination having adequate data protection law or contractual commitments from the provider, and we only transfer what the provider needs.

Organisers can add guests to private events by hand or by uploading a list. For that data the organiser is the data controller and UMscope is a data processor acting on their instructions. The organiser is responsible for having a lawful basis to share your details with us and to contact you.

If you received an invitation and want your details removed, you can ask the organiser, or email support@umscopeticket.com and we will pass your request on and help.

• Account data: for as long as your account is open. To close your account, email us from your account's email address; we delete or anonymise your profile within 30 days, except what we must keep below.
• Payment, ticket and payout records: for as long as Nigerian company and tax law requires us to keep financial records (currently six years).
• Private event guest lists, RSVPs and passes: until the organiser deletes the event, and no longer than 12 months after the event date unless the organiser asks us to keep them for their records.
• Support conversations: up to 24 months after the conversation ends.
• Analytics data: kept by Google Analytics and Firebase for no more than 14 months.

Under the NDPA you have the right to:

• Be told how your data is used, which is what this policy does.
• Get a copy of the personal data we hold about you.
• Have inaccurate or incomplete data corrected.
• Have your data deleted when we no longer need it or have no lawful basis to keep it.
• Restrict how we use your data while a concern is being resolved.
• Object to our use of your data based on legitimate interests, and to direct marketing at any time.
• Withdraw any consent you have given.
• Receive your data in a common, machine-readable format, or have it sent to another provider.
• Not be subject to decisions based only on automated processing that significantly affect you.

To use any of these rights, email support@umscopeticket.com from the email address on your account. We may ask you to confirm your identity. We will respond within 30 days. You can update most account details yourself on your profile page.

If you are unhappy with how we handled your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng). We would appreciate the chance to resolve it with you first.

We use a small number of cookies and browser storage. On your first visit we ask which ones you allow, and nothing beyond essential cookies is set until you choose.

• Essential (always on): keep you signed in, remember your checkout progress, remember your cookie choice and protect against fraud. The site cannot work without these.
• Analytics (only with your consent): Google Analytics and Firebase Analytics, and our own visitor count, help us understand how the site is used.
• Live chat (only with your consent): Tawk.to runs the chat with our support team and remembers your conversation. Without it you can still reach us by email.

You can change or withdraw your choice at any time with Cookie settings at the bottom of every page. You can also block or delete cookies in your browser settings; blocking essential cookies will stop sign-in and checkout from working.

We protect your data with encrypted connections (HTTPS), hashed passwords, access limited to the people who need it, and payment processing by Paystack, which is certified to the PCI DSS card security standard. No system is completely secure, so please use a strong password and keep it private.

If a breach puts your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as the NDPA requires, and tell you without undue delay where the risk to you is high.

You must be 18 or older to create an account or buy tickets. Under the NDPA, personal data of anyone under 18 may only be processed with the consent of a parent or guardian, so a parent or guardian should book on a child's behalf. If you believe a child has given us their data, email support@umscopeticket.com and we will delete it.

We may update this policy as our service or the law changes. We will change the date at the top, and if the changes are significant we will tell you by email or on the site before they take effect.

For anything about your personal data, email support@umscopeticket.com, call +234 816 455 8014, or write to Umscope Ltd, 1216 Ibiyinka Olorunbe, Victoria Island, Lagos 101241. See also our Terms & Conditions.