Privacy Policy

This policy explains how TicketCRM processes the personal data of visitors to ticketcrm.org and of people who contact us through the site. We process data in accordance with the Law of Ukraine “On Personal Data Protection” and, for visitors from the EU and the UK, the GDPR and the UK GDPR.

The policy does not cover the data of ticket buyers that event organizers process in the TicketCRM platform. For that data the organizer is responsible, and TicketCRM acts as its processor (see Security & Privacy).

1. Who we are

The controller of your personal data is TicketCRM LLC (ТОВ «ТІКЕТСРМ»), identification code 33552086, registered address: office 723, building 14, 3 Dorohozhytska Street, Kyiv, 04112, Ukraine (“TicketCRM”, “we”).

For any question or request about your personal data, write to support@ticketsbox.com with the subject “Privacy request”.

2. What data we process and why

Data	When	Purpose	Legal basis
Name, email, phone, business type, approximate number of tickets per month	You send the demo or consultation form	To answer your request, run a demo and prepare an offer	Your consent in the form and steps taken at your request before a contract (GDPR Art. 6(1)(a), (b))
Correspondence and calls	You write or call us	To answer and keep a record of the conversation	Steps at your request; our legitimate interest in answering enquiries (Art. 6(1)(b), (f))
IP address, browser and device data, requested pages	Every visit	To deliver the site and protect it from attacks and spam (Cloudflare; Cloudflare Turnstile on the form)	Our legitimate interest in a secure, working site (Art. 6(1)(f))
Cookie identifiers, pages viewed, device type, approximate location, the fact that the form was sent	Only if you allow analytics cookies	Visit statistics to improve the site (Google Analytics 4)	Consent (Art. 6(1)(a))
Cookie identifiers, pages viewed, the fact that the form was sent	Only if you allow marketing cookies	Measuring and improving our ads on Facebook and Instagram (Meta Pixel)	Consent (Art. 6(1)(a))

We do not pass your name, email or phone number to Google or Meta. We do not sell personal data and do not make automated decisions about you that have legal or similarly significant effects.

3. Who receives the data

• Cloudflare, Inc. — hosting and delivery of the site, protection from attacks, spam protection of the form (Turnstile).
• Telegram — requests from the form reach our sales team’s work chat in Telegram.
• Google Ireland Limited / Google LLC — Google Analytics, only with your consent.
• Meta Platforms Ireland Limited — Meta Pixel, only with your consent.
• TicketCRM employees who handle requests and are bound by confidentiality.
• Public authorities — only where the law requires it.

4. Transfers outside Ukraine and the EEA

Some of these companies process data in other countries, including the USA. Where the law requires it, such transfers are protected by appropriate safeguards, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework for certified companies.

5. How long we keep data

• Requests from the form and related correspondence — as long as needed to handle your request and possible cooperation, but no longer than 3 years after our last contact, unless you become our client. Client data is kept for the term of the contract and the periods required by law.
• Analytics data — according to the Google Analytics retention settings, no longer than 14 months.
• Cookies — see the Cookie Policy. Your cookie choice is kept for 6 months.

6. Your rights

You have the right to:

• find out what data we process and get a copy of it;
• have it corrected;
• have it deleted;
• restrict its processing or object to it, including processing based on our legitimate interests;
• receive it in a format suitable for transfer to another company;
• withdraw your consent at any time: for cookies — in “Cookie settings” at the bottom of any page; for the form — by writing to us. Withdrawal does not affect processing that took place before it.

To use your rights, write to support@ticketsbox.com. We answer within one month.

You may also complain to a supervisory authority: in Ukraine — the Ukrainian Parliament Commissioner for Human Rights; in the EU — the data protection authority of your country; in the UK — the Information Commissioner’s Office (ICO).

7. Security

We protect data with technical and organisational measures. See the Security & Privacy page.

8. Children

The site is intended for businesses. We do not knowingly collect data of persons under 16.

9. Changes

We may update this policy. The date at the top shows the current version. We will announce significant changes on the site.

10. Language

This policy is available in several languages. If the versions differ, the English version prevails.