Privacy Policy

1. Who we are

This Privacy Policy explains how The Night Market (an event organiser using the Ticky ticketing platform) collects, uses, discloses, and protects personal information in connection with browsing this site, buying tickets, and attending events. It is written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA), the South African law that governs how organisations handle personal information.

[Registered business name and address — to be completed] — this is the “responsible party” under POPIA for the personal information described in this policy. Ticky, Inc. provides the underlying ticketing software; each event organiser using it is separately responsible for the personal information of its own ticket buyers.

If you have any questions about this policy or want to exercise any of the rights described below, contact us at tickets@thenightmarket.co.za.

2. Information we collect

We collect the following categories of personal information:

• Contact and account details — your name, email address, phone number, and password (stored as a salted hash, never in plain text) when you create an account or place an order.
• Order and ticket information — the events and tickets you buy, order value, ticket types and quantities, order status, and any ticket transfers you initiate or receive.
• Entry and scanning data— a record of when and where each ticket's QR code is scanned at the gate, used to prevent duplicate entry.
• Payment information — we never collect or store your full card number, card verification code, or other card credentials. Card payments are processed directly by Yoco, our payment service provider; we only receive confirmation that payment succeeded, a masked reference to the card used, and the transaction amount.
• Support communications — anything you send us when you contact support, including the content of your message and any attachments.
• Technical and usage information — IP address, device and browser type, pages visited, and advertising identifiers collected via the Meta Pixel (see Section 6).

3. Why we use your information

We use personal information only for the following purposes:

• To process your order, take payment via Yoco, and issue your tickets.
• To send your tickets and order confirmations, and any operational updates about an event you have a ticket for (postponements, venue changes, cancellations), by email via Resend.
• To validate tickets at the gate and prevent duplicate or fraudulent entry.
• To action ticket transfers you request, including re-issuing a QR code to the recipient and invalidating the original.
• To provide customer support and respond to your enquiries.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations, including tax and financial record-keeping.
• To measure the effectiveness of advertising via the Meta Pixel (see Section 6 for how to opt out).

4. Our legal basis for processing

Under POPIA, we only process personal information where we have a lawful basis to do so, namely:

• Performance of a contract — collecting and using your details to sell you a ticket and let you into the event is necessary to fulfil the sale.
• Legitimate interests — for fraud prevention, ticket validation, and basic service communications, balanced against your right to privacy.
• Legitimate interests — for advertising analytics via the Meta Pixel, balanced against your right to object and opt out (see Section 6), and for any optional marketing communications you consent to separately.
• Legal obligation — where processing is required to comply with tax, financial, or other applicable law.

5. Who we share your information with

We do not sell your personal information. We share it only with the service providers who help us run this platform, each of whom processes it on our behalf under a contract that restricts what they may do with it:

• Yoco — processes your card payment. Yoco is a South African payment service provider whose systems are built to the PCI-DSS card industry security standard; we never see or store your card number.
• Resend — delivers transactional email, including your ticket and order confirmations, on our behalf.
• Vercel — hosts this website and application.
• Neon — hosts the database that stores order, ticket, and account records.
• Meta (Facebook/Instagram) — receives limited technical and behavioural data via the Meta Pixel so we can measure advertising performance. See Section 6 for how to opt out.

We may also disclose personal information where required by law, to protect our legal rights, or in connection with a merger, acquisition, or sale of business assets, in each case subject to appropriate safeguards.

6. Cookies and the Meta Pixel

We use strictly necessary cookies to keep you signed in, remember items in your order while you check out, and keep the site secure. These cannot be switched off, as the site will not function correctly without them.

We also use the Meta Pixel, an advertising and analytics tool from Meta, to help us understand which ads led to a ticket sale and to measure the performance of our advertising campaigns. The Meta Pixel is non-essential — it is not required for you to browse events, buy tickets, or receive your tickets by email.

You can opt out of the Meta Pixel and similar advertising cookies at any time by:

• Adjusting your ad preferences directly with Meta at facebook.com/adpreferences.
• Using your browser's cookie controls, or a browser extension that blocks tracking pixels.
• Contacting us at tickets@thenightmarket.co.za to ask us to exclude your activity.

Opting out through any of the above does not affect your ability to browse events, buy tickets, or receive your tickets by email — it only affects advertising measurement.

7. Data retention

We keep order, ticket, and payment-reference records for as long as needed to fulfil the order, resolve disputes, and meet our legal and tax record-keeping obligations, and thereafter for a reasonable period consistent with applicable law. Account information is kept for as long as your account is active. You may ask us to delete your account and associated personal information at any time, subject to the retention we are legally required to keep (for example, financial records).

8. Security

We apply reasonable technical and organisational measures to protect personal information against loss, unauthorised access, and misuse, including encrypted connections (HTTPS) throughout the site, encrypted storage of sensitive configuration secrets, hashed passwords, and access controls restricting who at The Night Market can view order and ticket data. Card payment data is handled directly by Yoco, a payment provider built to the PCI-DSS card industry security standard — we do not claim any certification of our own for card data we never receive. No system is completely secure, and we cannot guarantee absolute security of information transmitted online.

9. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Ask us to confirm what personal information we hold about you, and to access it.
• Ask us to correct or update personal information that is inaccurate, incomplete, or outdated.
• Ask us to delete or destroy personal information we no longer have a lawful basis to keep.
• Object to our processing of your personal information for direct marketing purposes at any time, free of charge.
• Object, on reasonable grounds, to processing based on our legitimate interests.
• Withdraw any consent you have given (for example, to marketing communications), at any time, without affecting processing already carried out.
• Complain to the Information Regulator (South Africa) if you believe your personal information has been processed unlawfully.

To exercise any of these rights, contact us at tickets@thenightmarket.co.za. We will respond within the timeframes required by POPIA. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator at inforegulator.org.za.

10. Children's information

This site is not directed at children, and we do not knowingly collect personal information from children without the consent of a parent or guardian, as required by POPIA. Where an event has an age restriction, that is set and enforced by the event organiser — see the event listing and our Terms & Conditions.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. The “Last updated” date at the top of this page tells you when it was last revised. Material changes will be highlighted where practical.

12. Contact us

For any question about this policy or to exercise your rights, email tickets@thenightmarket.co.za, The Night Market's support address.