Last updated 30 September 2026
Privacy Policy
Your data, your say. Here's what we collect, why, and how you control it. We follow the EU GDPR and Nigeria's Data Protection Act (NDPA) 2023.
Who we are
TRAX runs this ticketing and events platform and is the data controller for your account data. For an event, the organizer also gets the attendee details they need to run it.
What we collect
- Account: name, email, phone (if given), role.
- Orders & tickets: event, ticket type, amount, reference, check-in status.
- Payments: handled by Paystack. We never see or store your full card details.
- Wallet: balance and transactions.
- Messages you send us through the contact form.
- Technical: login session data and your cookie choice.
Why we use it (legal basis)
- Contract — to create your account, sell and deliver tickets, and let you in at the gate.
- Legal obligation — tax, accounting and fraud records.
- Legitimate interest — securing the platform and replying to your messages.
- Consent — optional cookies and marketing. You can withdraw any time.
Who we share it with
- Event organizers — for events you book.
- Paystack — payment processing.
- Our hosting and database providers — to run the service.
- Google — only if you sign in with Google or view a map.
We don't sell your data. Some providers may process data outside Nigeria or the EU; we rely on standard contractual safeguards.
How long we keep it
Account data while your account is open. Order and payment records for up to 6 years for tax and legal reasons. Contact messages for up to 2 years.
Your rights
- Access or get a copy of your data.
- Correct wrong data.
- Delete your data (except what the law says we must keep).
- Object to or restrict processing.
- Data portability.
- Withdraw consent — change cookies any time via "Cookie settings" in the footer.
- Complain to your data regulator (e.g. the Nigeria Data Protection Commission or your EU authority).
To use any right, message us through the contact form in the footer. We reply within 30 days.
Security
Encrypted connections, access controls per role, and payments via a certified provider.
More
See our Cookie Policy and Refund Policy.
