Privacy Policy

1. Who is responsible

TKTFY is run by BTech Innovations Company Limited, which is responsible for your information as the data controller. Contact us about anything in this policy at BTechInnovationsCompanyLimited@gmail.com or +256 780 389 247 or +256 748 613 807.

Organizers also receive their own buyers’ details (see section 4). For that copy, the organizer is responsible too and must follow the same law.

2. What we collect

If you buy tickets

• Your name, email address and phone number, which you enter at checkout.
• The mobile money transaction ID and the number you paid from, which you enter after paying.
• Your order, your tickets, and when each ticket was scanned at the door.

We never see or store your mobile money PIN.

If you sell tickets (organizers)

• Your account: email address and password (handled by Google Firebase; we never see your password), or your Google sign-in.
• Your public profile: name, logo, description, city, social media links and the contact details you show buyers.
• Verification details, which stay private: your legal or business name, URSB number for a business, physical address, a photo of your ID document, your mobile money payout account, and your merchant name and codes.
• Your events, sales, fee payments, promotions, and our notes from verifying you.

If you contact us or send a complaint

• Your name, phone number, email if you give it, any order or transaction number, and what you tell us.

Everyone

• Technical information that our hosting records automatically when you load a page, such as your IP address, browser type and the time of the request. It’s used for security and to fix problems.

3. Why we use it

• To give you your tickets and let organizers check them at the door.
• To confirm payments and prevent fraud, for example making sure each transaction ID is used only once.
• To verify organizers so buyers can trust who they’re paying.
• To run the service: working out fees, handling support requests, refunds and disputes, and fixing problems.
• To meet legal duties, such as keeping financial records or answering lawful requests.

We use your information because it’s needed to provide what you asked for (your tickets, or your organizer account), with your consent, and to meet legal duties. We don’t send you marketing, and we don’t sell your information.

4. Who can see it

• The event’s organizer sees the name, email and phone number of everyone who buys tickets to their event, plus the transaction details, so they can confirm payments, check people in and contact them about the event. They can download this list.
• TKTFY administrators can see the information needed to verify organizers, check payments and help with disputes.
• Service providers who run parts of TKTFY for us and may only use the information to do so: Google (Firebase and Google Cloud) stores our data and hosts the site. If we turn on ticket emails or card payments, our email provider (Resend) and payment provider (Flutterwave) will also receive what they need, and we’ll update this policy.
• WhatsApp receives a ticket link only when you, or an organizer, choose to send it with a WhatsApp button.
• Authorities, if the law requires us to share it.

The public sees only what organizers choose to publish: their public profile and event pages.

5. Where it’s stored

Our data is stored and processed by Google Cloud in data centres in the European Union (Belgium and the Netherlands), which means outside Uganda. Organizer sign-in details (email address and password) are handled by Google’s Firebase Authentication, which may process them in the United States. EU data protection law gives your information at least the level of protection that Ugandan law requires, and Google is bound by contract to protect it wherever it processes it. By using TKTFY you consent to these transfers.

6. How long we keep it

• Orders, tickets and payment records: 2 years after the event, for refunds, disputes and accounting, then deleted.
• Organizer accounts and profiles: while the account is open. When an organizer deletes their account (or we do), we remove their login and personal details straight away, and keep only their name alongside the sales and fee records.
• ID photos and other verification details: deleted as soon as the organizer account is deleted. Fee and payout records may be kept longer if the law requires it.
• Hosting logs: deleted automatically, normally within 30 days.

7. Your rights

Under Uganda’s Data Protection and Privacy Act, you can:

• ask what information we hold about you, and get a copy;
• ask us to correct information that’s wrong or incomplete;
• ask us to delete your information, unless we must keep it for a legal reason or an open dispute;
• object to how we use your information, or withdraw your consent;
• complain to the Personal Data Protection Office (PDPO) if you think we’ve misused your information.

To use these rights, contact us at BTechInnovationsCompanyLimited@gmail.com. Tell us the email or phone number you used so we can find your information. We may ask you to confirm who you are, and we’ll reply within 30 days. Organizers can update most of their details themselves in their profile, and can delete their account there too.

8. How we protect it

• Browsers can’t read our database directly. Every request goes through our server, which checks who is asking.
• Ticket QR codes are digitally signed, so they can’t be guessed or forged.
• ID photos can be seen only by the organizer who uploaded them and by TKTFY administrators.
• Everything is sent over encrypted (HTTPS) connections.

No system is perfectly secure. If a breach puts your information at risk, we’ll tell you and the Personal Data Protection Office, as the law requires.

9. Cookies and your browser

We store only what’s needed to keep organizers signed in. We don’t use advertising or tracking cookies, or analytics that follow you around the web.

10. Children

Buyers under 18 should have permission from a parent or guardian, who should enter their own contact details at checkout. Organizer accounts are for people aged 18 and over.

11. Changes and contact

We’ll update this policy when we change how we handle information, and the date at the top will show the latest version. Questions or requests: BTechInnovationsCompanyLimited@gmail.com, +256 780 389 247 or +256 748 613 807, or write to BTech Innovations Company Limited, Hoima City, Uganda.