TicketBerry Privacy Policy

For personal data processed for TicketBerry’s own purposes, the data controller is:

Tasmeem for Managing Events

Trading as: TicketBerry

Registered Address: Al Kulliyah Al Elmiyah Al Eslamiyah St, No. 13, 1st Circle, Amman

Hashemite Kingdom of Jordan

Email: [email protected]

Telephone: +962 79 103 0007

TicketBerry processes personal data in accordance with applicable privacy and data-protection laws, including the Jordanian Personal Data Protection Law No. 24 of 2023 and regulations and instructions issued pursuant to it, where applicable.

Depending on how you use TicketBerry, we may collect the following categories of information.

A. Account and Identity Information

This may include:

• full name;
• email address;
• mobile number;
• date of birth;
• username or account identifier;
• password or authentication credentials in protected form;
• nationality or gender where genuinely required;
• identification information where required for a particular Event, security or legal purpose; and
• account preferences.

We seek to collect only information reasonably necessary for the relevant purpose.

B. Ticket and Transaction Information

This may include:

• Events viewed or purchased;
• Ticket categories;
• seating information;
• Order numbers;
• transaction amounts;
• purchase dates;
• Ticket transfers;
• refund information;
• Ticket status;
• check-in or Ticket-validation information;
• promotional codes; and
• transaction history.

C. Payment Information

Payments may be processed by authorized third-party payment service providers.

Depending on the payment arrangement, TicketBerry may receive information such as:

• payment status;
• payment method;
• transaction reference;
• card type;
• limited masked card information;
• payment token; and
• fraud or authentication results.

TicketBerry does not intentionally collect or retain card security codes such as CVV/CVC after payment authorization.

Full payment-card information is handled in accordance with the applicable payment-provider and payment-security arrangements.

D. Event Attendance Information

When Tickets are scanned or validated, we may collect:

• Ticket identifier;
• validation status;
• date and time of entry;
• venue or access point;
• transfer status; and
• other information reasonably required to validate admission or investigate Ticket misuse.

E. Customer Support Information

When you contact us, we may collect:

• correspondence;
• emails;
• support requests;
• telephone or chat information;
• complaints;
• refund requests;
• documents you voluntarily provide; and
• information necessary to investigate or resolve your request.

F. Device and Technical Information

When you use the Platform, we may automatically collect information such as:

• IP address;
• device type;
• browser type;
• operating system;
• application version;
• language;
• approximate location derived from IP address;
• device identifiers;
• login information;
• pages or Events viewed;
• referral source;
• timestamps;
• error and diagnostic information; and
• security logs.

G. Cookies and Similar Technologies

We may use cookies, pixels, SDKs, local storage and similar technologies to operate and secure the Platform, remember preferences, understand Platform usage and, where permitted, support analytics and marketing.

Further information is provided in our Cookie Policy.

We may collect personal data:

• Directly from you, including when you create an account, purchase a Ticket, transfer a Ticket, contact Customer Support or update your preferences.
• Automatically, when you browse or use the Platform.
• From Organizers and venues, where necessary to administer an Event or resolve a Ticketing issue.
• From payment and fraud-prevention providers, including transaction status and verification results.
• From persons purchasing or transferring Tickets for you, where they provide information necessary to complete the transaction or transfer.
• From third-party services, where you choose to connect or interact with such services and applicable permissions allow the information to be provided to us.

We may process personal data to:

Provide TicketBerry Services

Including to:

• create and administer accounts;
• process Orders;
• issue and deliver Tickets;
• facilitate Ticket transfers;
• manage seating or Ticket categories;
• validate Tickets;
• provide Event access;
• process refunds;
• provide customer support; and
• communicate important Event information.

Process and Secure Payments

Including to:

• process transactions;
• authenticate payments;
• prevent unauthorized payments;
• manage refunds;
• reconcile transactions; and
• investigate payment disputes.

Prevent Fraud and Protect Ticketing Integrity

Including to:

• detect suspicious transactions;
• prevent Ticket duplication;
• identify account takeover;
• enforce Ticket limits;
• prevent automated purchasing;
• investigate unauthorized resale;
• protect Events and Customers; and
• maintain Platform security.

Communicate With You

Including communications regarding:

• Order confirmations;
• Ticket delivery;
• Event changes;
• cancellations;
• postponements;
• refunds;
• security alerts;
• account information; and
• customer-support matters.

Improve TicketBerry

Including to:

• understand Platform usage;
• troubleshoot technical problems;
• measure Platform performance;
• improve products and features;
• develop new services; and
• conduct aggregated business analysis.

Marketing and Personalization

Where permitted by applicable law and consistent with your preferences, we may use information to:

• recommend Events;
• send Event announcements;
• provide early-access or presale information;
• send promotional offers;
• personalize Platform content; and
• measure the effectiveness of marketing.

You may opt out of direct promotional communications at any time.

Comply With Law

We may process information where reasonably necessary to:

• comply with legal obligations;
• respond to lawful government or regulatory requests;
• maintain financial and transaction records;
• establish, exercise or defend legal claims;
• prevent unlawful activity; and
• enforce our contractual rights.

Where applicable law requires a legal basis for processing, TicketBerry processes personal data on one or more lawful grounds, including:

• your consent;
• processing necessary to perform a contract with you or take steps requested by you before entering into a contract;
• compliance with legal obligations;
• protection of legitimate rights and interests where permitted by applicable law;
• prevention of fraud and protection of Platform security; and
• other grounds expressly permitted by applicable law.

Where processing depends on consent, you may withdraw that consent subject to applicable law.

Withdrawal of consent does not invalidate lawful processing carried out before withdrawal.

TicketBerry provides ticketing services for third-party Event Organizers.

Where necessary to administer an Event, we may provide relevant Customer or attendee information to the Organizer, venue or authorized Event service providers.

Information shared may include information reasonably necessary for:

• admission;
• Ticket verification;
• customer service;
• seating;
• accessibility arrangements;
• security;
• Event communications;
• refunds; and
• legal compliance.

An Organizer may process information it receives for its own purposes and may therefore act as a separate data controller under applicable law.

Where an Organizer wishes to use your information for its own direct marketing, any consent required by applicable law should be obtained separately.

TicketBerry is not responsible for an Organizer’s independent processing activities outside TicketBerry’s control, but we require parties receiving personal data from us to handle it in accordance with applicable legal requirements.

We may disclose personal data to the following categories of recipients where reasonably necessary.

Event Organizers and Venues

For Event administration, admission, customer service, safety and Event-related communications.

Payment Providers and Financial Institutions

For payment authorization, settlement, refunds, fraud prevention and payment disputes.

Technology and Infrastructure Providers

Including providers supporting:

• hosting;
• cloud infrastructure;
• databases;
• cybersecurity;
• email;
• SMS;
• authentication;
• Ticket delivery;
• analytics; and
• customer support.

Professional Advisers

Including lawyers, auditors, accountants, insurers and other professional advisers where reasonably necessary.

Government, Regulatory and Law-Enforcement Authorities

Where disclosure is required or permitted by applicable law or is reasonably necessary in connection with lawful investigations or legal proceedings.

Corporate Transactions

If TicketBerry or the business operating TicketBerry undergoes a merger, acquisition, restructuring, financing or sale of all or part of its business or assets, relevant information may be disclosed or transferred as part of that transaction subject to applicable law.

TicketBerry does not sell personal data to third parties for monetary consideration.

We will not provide Customer contact information to unrelated third parties for their independent direct marketing except where the Customer has provided the consent required by applicable law.

Where permitted, TicketBerry may send marketing communications by:

• email;
• SMS;
• WhatsApp;
• push notification; or
• other communication channels selected by you.

Where consent is required, marketing communications will be sent only after the appropriate consent has been obtained.

You may opt out at any time by:

• using an unsubscribe link;
• changing applicable account preferences;
• using the opt-out mechanism provided in the communication; or
• contacting [email protected].

Opting out of marketing does not prevent TicketBerry from sending necessary transactional, security, Ticket or Event-related communications.

TicketBerry uses cookies and similar technologies for purposes that may include:

Strictly Necessary Technologies

Required for functions such as:

• account login;
• security;
• checkout;
• fraud prevention;
• Ticketing functions; and
• maintaining sessions.

Functional Technologies

Used to remember preferences and improve Platform functionality.

Analytics Technologies

Used to understand how Customers interact with TicketBerry and improve performance.

Advertising and Marketing Technologies

Where used and permitted by law, these may help measure campaigns or provide more relevant advertising.

Where applicable law requires consent for non-essential cookies or similar technologies, TicketBerry will request that consent.

Users may also control certain technologies through browser, device and Platform settings.

TicketBerry uses reputable payment service providers and appropriate technical and organizational measures to protect transaction information.

Payment-card information may be transmitted directly to payment providers through secured payment interfaces.

TicketBerry seeks to minimize its handling and storage of full card information.

Customers should never send complete card numbers, PINs, passwords or card security codes to TicketBerry by email, WhatsApp or ordinary customer-support communications.

TicketBerry implements reasonable and appropriate technical and organizational safeguards designed to protect personal data against:

• unauthorized access;
• unauthorized disclosure;
• accidental loss;
• destruction;
• alteration;
• misuse; and
• unlawful processing.

Measures may include, as appropriate:

• encryption in transit;
• access controls;
• authentication;
• logging and monitoring;
• restricted administrative access;
• security testing;
• backup procedures; and
• vendor-security controls.

No internet, electronic storage or communication system can be guaranteed to be completely secure.

TicketBerry retains personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, regulatory, fraud-prevention and dispute-resolution requirements.

Retention periods vary according to the type of information.

For example:

• account information may be retained while an account remains active and for an appropriate period afterward;
• transaction and financial records may be retained for periods required by applicable law;
• Ticket-validation information may be retained as reasonably necessary for Event reconciliation, fraud prevention and disputes;
• customer-support records may be retained for an appropriate period following resolution; and
• marketing information may be retained until consent is withdrawn or the information is no longer required, subject to maintaining an appropriate suppression record to respect opt-out requests.

When information is no longer required, TicketBerry will delete, anonymize or securely dispose of it in accordance with applicable requirements.

TicketBerry’s service providers or technology infrastructure may process information outside Jordan.

Where personal data is transferred internationally, TicketBerry will take measures required by applicable law to ensure an appropriate level of protection, including any approvals, contractual protections or other safeguards required for the relevant transfer.

Subject to applicable law, you may have rights regarding your personal data, including the right to:

• be informed about processing;
• access personal data held about you;
• obtain information regarding its processing;
• correct or update inaccurate information;
• withdraw consent where processing is based on consent;
• request deletion where legally available;
• request restriction or cessation of certain processing;
• object to certain processing where applicable;
• obtain or transfer a copy of your data where provided by law;
• object to certain automated processing or profiling where applicable;
• be informed of qualifying personal-data breaches where required by law; and
• submit a complaint to the competent authority.

These rights may be subject to legal exceptions, including obligations requiring TicketBerry to retain transaction or other information.

To submit a privacy request, contact:

[email protected]

Please state that your request relates to Privacy / Personal Data and describe the right you wish to exercise.

TicketBerry may request reasonable information to verify your identity before fulfilling a request.

We will respond within the period required by applicable law.

We will not discriminate against a Customer merely because they exercise a privacy right available to them by law.

Where account deletion is available through the Platform, you may request deletion using that function or by contacting Customer Support.

Deleting an account does not necessarily result in immediate deletion of all information.

TicketBerry may retain information where necessary to:

• comply with legal obligations;
• maintain financial records;
• prevent fraud;
• resolve disputes;
• process refunds;
• enforce legal rights; or
• maintain records of privacy or marketing preferences.

Information no longer requiring identification may be anonymized.

TicketBerry accounts and online purchasing services are intended for persons who have legal capacity to enter into the relevant transaction.

Persons under 18 should use TicketBerry only with the involvement and authorization of a parent or legal guardian where required.

Certain Events may be open to minors subject to Event-specific age and supervision requirements.

Where TicketBerry knowingly processes a minor’s personal data and parental or guardian consent is required by applicable law, we will take reasonable steps to obtain the necessary authorization.

TicketBerry may use automated systems to identify potentially fraudulent, abusive or high-risk activity.

These systems may evaluate factors such as:

• transaction patterns;
• device information;
• account activity;
• Ticket purchasing behavior;
• payment verification results; and
• security signals.

Where an automated system identifies a transaction as high risk, TicketBerry may request further verification or refer the transaction for review.

TicketBerry will comply with any applicable legal rights relating to automated decision-making.

Event Organizers and venues may photograph, film or record Events.

Where TicketBerry is not responsible for determining the purposes and means of such recording, the Organizer or venue is responsible for its own processing of that material.

TicketBerry may receive or use Event photographs or recordings for legitimate promotional or business purposes where permitted by applicable law and subject to any consent requirements that apply.

The Platform may contain links to or integrations with websites and services operated by third parties.

Their privacy practices are governed by their own policies.

TicketBerry is not responsible for the privacy practices of third-party services it does not control.

TicketBerry may create aggregated or anonymized information that no longer reasonably identifies an individual.

Such information may be used for:

• analytics;
• reporting;
• business planning;
• Event insights;
• Platform improvement; and
• other lawful purposes.

Where information has been properly anonymized so that it is no longer personal data, this Privacy Policy does not restrict its use.

TicketBerry maintains procedures intended to identify and respond to personal-data security incidents.

Where a personal-data breach triggers notification obligations under applicable law, TicketBerry will notify the appropriate authority and/or affected individuals as required.

TicketBerry may update this Privacy Policy to reflect changes in:

• law;
• regulatory requirements;
• technology;
• Platform functionality;
• service providers; or
• business practices.

The current version will be published on the Platform with its last-updated date.

Where required by law, TicketBerry will provide additional notice or obtain consent for material changes.

TicketBerry is based in Jordan.

If TicketBerry offers Services to Customers in other jurisdictions, additional mandatory privacy rights may apply.

Nothing in this Privacy Policy is intended to restrict privacy rights that cannot lawfully be waived or excluded.

TicketBerry may publish jurisdiction-specific privacy notices or supplements as its international operations expand.

For questions, concerns or requests relating to this Privacy Policy or TicketBerry’s handling of personal data:

TicketBerry

Website: www.ticketberry.com

Email: [email protected]

Telephone: +962 79 103 0007

Amman, The Hashemite Kingdom of Jordan

Where applicable, you may also have the right to contact or lodge a complaint with the competent Jordanian personal-data-protection authority.