1. Introduction

Ceytrex Tickets ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our event ticketing platform at tickets.ceytrexlabs.com.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name (for organizers)
• Payment Information: Payment details processed through our secure payment gateway (PayHere). We do not store full credit card numbers.
• Event Information: Event details, ticket types, merchandise information (for organizers)
• Purchase Information: Buyer name, email, phone number, identity type and number, ticket purchases
• Communication: Emails, support requests, and other communications with us

2.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, pages visited, time spent on pages
• Cookies and Tracking: We use cookies to enhance your experience and analyze site usage
• Location Data: General location information based on IP address

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To create and manage your account, process ticket purchases, and deliver tickets
• Payment Processing: To process payments, calculate platform fees, and manage financial transactions
• Communication: To send order confirmations, ticket receipts, event updates, and customer support responses
• Event Management: To enable organizers to create and manage events, track sales, and handle check-ins
• Verification: To verify email addresses, send OTP codes for ticket lookup, and prevent fraud
• Analytics: To analyze usage patterns, improve our services, and generate reports for organizers
• Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights
• Marketing: To send promotional emails (with your consent) about new features, events, or special offers

4. Data Storage and Security

We use Supabase (PostgreSQL database) to store your data securely. All data is encrypted in transit and at rest. We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Secure authentication and authorization systems
• Regular security audits and updates
• Access controls and role-based permissions
• Secure payment processing through PayHere gateway

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Event Organizers: Organizers receive buyer information (name, email, phone) for their events to manage check-ins and communicate with attendees
• Payment Processors: We share payment information with PayHere to process transactions securely
• Email Service: We use email services (Gmail SMTP) to send transactional and marketing emails
• Legal Requirements: We may disclose information if required by law, court order, or government regulation
• Business Transfers: In case of merger, acquisition, or sale of assets, your data may be transferred
• With Your Consent: We may share information with your explicit consent

We do not sell your personal information to third parties for marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences
• Analyze website traffic and usage patterns
• Improve user experience

You can control cookies through your browser settings. However, disabling cookies may limit some functionality of our platform.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal and contractual obligations)
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from marketing emails (transactional emails cannot be opted out)
• Objection: Object to certain processing of your data

To exercise these rights, please contact us at hello@ceytrexlabs.com

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records, financial records)
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

Order and transaction data may be retained for up to 7 years for accounting and legal purposes. Account data is retained until you request deletion or the account is inactive for an extended period.

9. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Sri Lanka, including where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: