Privacy Policy

1. Introduction

NeneTickets Ltd ("NeneTickets", "we", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights under the Kenya Data Protection Act, 2019.

2. Information We Collect

We collect the following categories of personal data:

• Contact information: Your name, email address, and phone number provided at checkout or account registration.
• Payment information: Transaction reference numbers and payment status. We do not store your card or M-Pesa PIN — payments are processed by Paystack.
• Ticket data: The events you purchase tickets for, ticket types, and quantities.
• Usage data: Pages visited, events viewed, and actions taken on the Platform (collected anonymously for analytics).
• Device data: Browser type, operating system, and IP address for security and fraud prevention.

3. How We Use Your Information

We use your personal data to:

• Process your ticket purchases and send booking confirmations.
• Send your e-ticket and QR code via email and SMS.
• Communicate important updates about events you have booked (e.g. cancellations or venue changes).
• Prevent fraud and ensure platform security.
• Improve the Platform through aggregate, anonymised analytics.
• Comply with our legal obligations under Kenyan law.

We do not sell your personal data to third parties.

4. Sharing Your Information

We may share your personal data with:

• Event organisers: Your name, phone number, email, and ticket details are shared with the organiser of events you attend for check-in and attendee management purposes.
• Payment processors: Paystack receives transaction data necessary to process your payment. Paystack's privacy policy applies to their handling of your data.
• Service providers: We use Upstash (database), Vercel (hosting), and Clerk (authentication) to operate the Platform. These providers process data on our behalf under confidentiality agreements.
• Legal authorities: Where required by Kenyan law or a valid court order.

5. Data Retention

We retain your personal data for as long as necessary to provide the Platform services and comply with our legal obligations. Ticket and transaction records are retained for a minimum of 7 years as required by Kenyan tax law. You may request deletion of your account data at any time (see Section 7).

6. Cookies

The Platform uses essential cookies to maintain your session and authentication state. We use anonymised analytics cookies to understand how the Platform is used. You can disable non-essential cookies in your browser settings, though this may affect Platform functionality.

7. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Objection: Object to processing of your data for marketing purposes.
• Portability: Request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, email us at privacy@nenetickets.co.ke. We will respond within 21 days.

8. Security

We implement industry-standard security measures to protect your data, including HTTPS encryption, secure database storage, and access controls. However, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately.

9. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Platform. Continued use of the Platform after changes constitutes your acceptance of the updated Policy.

11. Contact Us

For privacy-related queries or to exercise your rights, contact our Data Protection Officer: