Privacy Policy

1. Legal Framework

EventPass is committed to protecting the personal data of users, event organizers, attendees, customers, and other persons who use or interact with the EventPass platform. We collect, use, store, disclose, and otherwise process personal data in accordance with the Data Protection Act, 2020 of Jamaica, its applicable regulations, and any other applicable data protection or privacy laws.

EventPass will only collect personal data that is reasonably necessary for the purposes for which it is processed. This Privacy Policy forms part of the EventPass Terms and Conditions.

2. Information We Collect

We collect information you provide directly to us, including your name, email address, payment information, and event preferences when you purchase tickets or create events.

Depending on how you use the platform, we may also collect your telephone number, billing information, transaction details, ticket details, event attendance information, device information, account information, and any other information you submit through the platform.

Location Data: With your permission, we may collect your approximate location (via GPS or IP-based geolocation) to show nearby events, sort event listings by distance, send nearby event alerts, and record the city of ticket buyers for promoter analytics. Precise GPS coordinates are not stored; we retain only the resolved city name for analytics and nearby alerts.

Push Notification & Device Data: If you enable push notifications, we register a device token (FCM token) to deliver event reminders, nearby alerts, and promotional notifications. We may also collect limited device information such as platform type (iOS/Android) and browser user-agent for security logging and compatibility. You can disable push notifications at any time in your device settings or within the app.

Biometric Authentication (Android app): If you enable Biometric Login, your fingerprint, face, or device PIN/pattern is verified entirely by your device's own operating system. EventPass never receives, transmits, or stores any biometric data — the app only receives a yes/no confirmation from your device that you were successfully authenticated.

Community Content: When you use the Community feature, we collect and store the content you post, including your display name, text, photos, videos, GIFs, poll questions and options, reviews, replies, quoted posts, likes, and emoji reactions. This content is publicly visible to other users within the Community feed and on event pages. If you vote on a poll, we record which option you chose against your user ID; aggregate vote counts are shown to everyone who can see the poll, but your individual selection is not shown to other users next to your name. We also store your user ID alongside posts and interactions for attribution and moderation purposes. GIFs are retrieved from a third-party GIF search provider based on the search terms you enter; see "Third-Party Services" below.

Saved Posts: If you bookmark a Community post or review to find it again later, we store which posts you've saved against your account. This list is private to you and is not visible to other users.

Gate Sales (Cash/Card at the Door): When a promoter sells a ticket at an event gate for cash or by card, EventPass may collect a buyer name and, where provided, an email address to issue the digital ticket, send a confirmation email with the ticket and QR code as a PDF, and link the ticket to the buyer's account if they have one. No cash or card details are processed by EventPass for a gate sale — the payment is collected by the promoter in person (cash or card at the door). Gate sale records are retained for audit, tax, and refund-reconciliation purposes.

Live Streaming: When a promoter starts a live stream for an event, the video is shown on the event page through YouTube's or Facebook's own embedded player — EventPass does not collect any additional personal data from you in order to display or watch a stream. If you hold a confirmed ticket to that event, we send you a push notification letting you know the promoter has gone live. Watching an embedded stream may be subject to YouTube's or Facebook's own privacy practices and terms, which EventPass does not control.

3. How We Use Your Information

We use the information we collect to process ticket purchases, send event updates, provide customer support, and improve our services. We may also send you promotional emails with your consent.

By creating an account, purchasing a ticket, listing an event, registering for an event, or otherwise using EventPass, you acknowledge that we may also process your personal data to:

• Create and manage user accounts
• Process payments and refunds
• Issue tickets, confirmations, receipts, and event-related communications
• Verify user, organizer, attendee, or transaction information where necessary
• Prevent fraud, misuse, unauthorised access, chargebacks, and security incidents
• Enable event organizers to manage attendance, check-in, and ticket validation
• Deliver push notifications for event reminders, nearby event alerts, waitlist updates, and promoter announcements
• Personalise event recommendations based on preferred categories and saved location
• Track login activity (IP address, location, device, and timestamp) for security and fraud prevention
• Notify confirmed ticket holders and post a community update when a promoter starts a live stream for their event
• Display community posts, reviews, replies, polls, and reactions, and deliver notifications when someone replies to, quotes, or reacts to your content (immediately, or bundled into a daily digest if you've enabled that preference in Settings)
• Moderate user-generated community content, investigate reports, and enforce platform guidelines
• Comply with legal, regulatory, tax, accounting, law enforcement, and reporting obligations

4. Payment Processing

Where payment information is required, payments may be processed by third-party payment processors. EventPass does not intend to store full payment card details unless expressly stated and lawfully permitted. Payment processors and other service providers may process personal data on EventPass's behalf and are expected to apply appropriate technical and organizational safeguards.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with event promoters for ticket validation purposes and with service providers who assist in our operations.

Event organizers using EventPass may receive limited personal data relating to ticket purchasers and attendees for legitimate event-management purposes, including ticket validation, event admission, attendee support, and communication about the relevant event. Event organizers must use such personal data only for lawful event-related purposes and must not sell, misuse, disclose, or use attendee data for unrelated marketing or other purposes without the required lawful basis or consent.

Community Content: Posts, reviews, replies, and media shared in the Community feature are publicly visible to other users. Your display name is shown alongside your content. If you post on an event, the event's promoter may see and reply to your content. You can delete your own posts and replies at any time, though deleted replies may leave a placeholder to preserve conversation context.

EventPass may be required to disclose personal data where necessary to comply with applicable law, legal process, court order, regulatory request, law enforcement request, tax obligation, fraud-prevention requirement, or to protect the rights, property, security, or safety of EventPass, users, organizers, attendees, or the public.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, or destruction.

These measures may include access controls, encryption or pseudonymisation where appropriate, employee or contractor access restrictions, security monitoring, data backup procedures, and the use of reputable technology and hosting providers.

7. Data Retention

EventPass retains personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide the platform, complete transactions, resolve disputes, enforce agreements, comply with legal obligations, maintain business records, prevent fraud, and protect the rights and safety of EventPass, users, organizers, attendees, and third parties. Personal data that is no longer required will be securely deleted, anonymised, or otherwise disposed of in accordance with applicable law.

8. Cross-Border Data Transfers

Where personal data is transferred outside Jamaica, EventPass will take steps required by applicable law to ensure that the personal data receives an adequate level of protection or that another lawful basis for the transfer applies.

9. Your Rights

You have the right to access, update, or delete your personal information. You can manage your account settings or contact us at support@eventpassja.com to exercise these rights.

You may also have the right to request correction of inaccurate data, object to certain processing, withdraw consent where processing is based on consent, and make a complaint to the relevant supervisory authority.

10. Data Breach Response

In the event of a personal data breach or security incident affecting personal data, EventPass will take appropriate steps to investigate, contain, mitigate, and report the incident where required by applicable law.

11. Third-Party Processors

EventPass engages the following third-party service providers to deliver platform functionality. These providers may process personal data on EventPass's behalf and are expected to apply appropriate technical and organizational safeguards in accordance with their own privacy policies:

• Fygaro — processes payment card data for ticket purchases and promoter fees. Card details are collected on Fygaro's hosted checkout and are not stored by EventPass.
• Google — provides Maps (venue display and address autocomplete), Analytics, Firebase Cloud Messaging (push notification delivery), and, on the Android app's ticket scanner, Play Integrity device attestation to help confirm a scanning device is a legitimate, unmodified copy of the app. Play Integrity checks do not involve any personal data — only a signal about the device and app integrity itself. YouTube's embedded player is also used to display a promoter's live stream on the event page, when the promoter has provided a YouTube link.
• Facebook & Instagram — receive event content for optional social media campaign posting when authorized by an admin. Facebook's embedded player is also used to display a promoter's live stream on the event page, when the promoter has provided a Facebook link.
• Giphy — powers GIF search in the Community composer. When you search for a GIF, your search terms are sent to Giphy to return matching results; the GIF you choose is then attached to your post. EventPass does not send your name, email, or other account details to Giphy as part of this search.

12. Cookies and Local Storage

EventPass uses browser local storage and device caching to maintain your login session, remember preferences (such as selected currency and theme), and cache purchased tickets so they remain accessible offline at the venue. We do not use third-party advertising cookies.

Staff and Promoter Scanner Devices: To keep ticket check-in working without a connection, a device used to scan tickets for an event (by a promoter or invited staff) temporarily caches a snapshot of that event's ticket data locally — including attendee names, ticket codes, and check-in status. This cache is scoped to the events that device is authorized to scan, expires automatically, and is used solely to validate tickets at the door.

You can clear local storage at any time through your browser or device settings, though doing so will sign you out and remove cached tickets from your device. You can re-download tickets by signing back in and visiting My Tickets.

13. Children's Privacy

EventPass is not intended for use by individuals under the age of sixteen (16). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@eventpassja.com and we will take steps to delete such information. Parents or guardians who discover their child has created an account may request its deletion at any time.

14. Marketing Communications

With your consent, EventPass may send you promotional emails about upcoming events, special offers, and platform updates. If you receive a promotional email, you can unsubscribe at any time by clicking the unsubscribe link in the email or by contacting us at support@eventpassja.com.

Push notifications for nearby events, new event announcements from promoters you follow, and waitlist updates are sent based on your notification preferences. You can manage or disable push notifications at any time in your device settings or within the app under Settings. Transactional emails (such as ticket confirmations and refund updates) are not marketing communications and will continue to be sent as necessary to provide the service.

15. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Continued use of the platform constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy, please contact us at support@eventpassja.com.