Privacy Policy

The controller responsible for the processing of your personal data on this website is:

[To be completed: Full legal name of the business and legal form]
trading as My Store
[To be completed: Registered / trading address of the business]
Email: support@my-ticketarenas.store

Representative under Article 27 GDPR: [To be completed: Name and address of your EU or UK representative under Art. 27 GDPR, or "Not required"]

We have not appointed a data protection officer because we are not legally required to do so. For any question about your data, please contact us at support@my-ticketarenas.store.

• Identity and contact data: name, email address, phone number (if provided), billing and delivery address.
• Order and transaction data: products ordered, sizes, prices, discount codes, order number, payment status, delivery and return information. Card and wallet details are entered directly with our payment service providers; we do not see or store your full card number.
• Account data: if you create an account, your login email, a securely hashed password, saved addresses and your order history.
• Communication data: the content of messages you send us through the contact form or by email, and our replies.
• Technical and usage data: IP address, browser and device type, operating system, language, approximate location (country, derived from your IP address), pages visited, referring website, and the date and time of your visit.
• Cookie and similar identifiers: see section 6 and our Cookie Policy.
• Data from our other website: if you are passed to our checkout from another website we operate, we receive the identifier of the shopping basket you created there and any discount code that applies to it.

We do not intentionally collect special categories of personal data (such as health data) and we ask you not to send us such data.

• Processing and delivering your order, handling payments, cancellations, returns, refunds and warranty claims, and sending order and delivery emails. Legal basis: performance of a contract (Art. 6(1)(b) UK/EU GDPR).
• Providing your customer account. Legal basis: performance of a contract (Art. 6(1)(b)).
• Answering your enquiries sent by email or through the contact form. Legal basis: performance of a contract or steps prior to a contract (Art. 6(1)(b)) and our legitimate interest in responding to customers (Art. 6(1)(f)).
• Preventing fraud and payment misuse and keeping our shop secure. Legal basis: our legitimate interests in secure operation (Art. 6(1)(f)).
• Operating and hosting the website, including server logs needed to deliver pages, remembering your basket, language and sign-in. Legal basis: our legitimate interest in a functioning online shop (Art. 6(1)(f)); for storage on your device, the exemption for strictly necessary cookies.
• Meeting legal obligations, such as tax, accounting and consumer law record-keeping. Legal basis: legal obligation (Art. 6(1)(c)).
• Website analytics to understand how our shop is used and to improve it. Legal basis: your consent (Art. 6(1)(a)).
• Advertising and conversion measurement with Meta (Facebook and Instagram). Legal basis: your consent (Art. 6(1)(a)).
• Marketing emails, only where you have agreed to receive them. Legal basis: your consent (Art. 6(1)(a)). You can unsubscribe at any time using the link in each email.

Providing your contact, delivery and payment details is necessary to conclude and perform a purchase contract. Without them we cannot accept your order. Everything else is voluntary.

We do not use your data for automated decision-making, including profiling, that produces legal or similarly significant effects for you.

Subject to your consent, we use the Meta Pixel and the Meta Conversions API provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). They let us measure the effectiveness of our Facebook and Instagram adverts, show our adverts to people who have visited our shop, and find audiences similar to our customers.

When you browse the shop, the Pixel sends Meta information about events such as page views, products viewed, items added to the basket, checkout started, payment details added and purchases (including order value, currency and product identifiers), together with your IP address, browser details and the Meta cookie identifiers (_fbp, _fbc). The Conversions API sends the same events from our server so that they are measured reliably. Where you have provided them (for example when signed in), your email address, phone number, name, city, postcode and country may also be sent; these are converted into a one-way hashed form before they are transmitted to Meta.

For the collection and transmission of this data to Meta, we and Meta are joint controllers under Article 26 GDPR. The essential content of this arrangement is set out in Meta’s Controller Addendum. Meta is responsible for the further processing of the data, which is described in the Meta Privacy Policy. Meta may transfer data to Meta Platforms, Inc. in the United States (see section 8). You can exercise your rights directly with Meta as well as with us.

You can withdraw your consent at any time with effect for the future in the cookie settings. You can also manage the adverts you see in your Facebook or Instagram ad preferences.

Subject to your consent, we use the analytics service built into our e-commerce platform to understand how visitors use our shop: pages viewed, time on page, scroll depth, clicks, page loading performance, the basket and checkout steps reached, the version of the shop shown to you when we test design variants, and your device, browser and approximate location. The data is stored with a pseudonymous session identifier in your browser’s local and session storage and is used only to produce statistics and improve the shop. It is not used to identify you personally.

You can withdraw your consent at any time in the cookie settings.

We use cookies and similar technologies (such as local storage). Strictly necessary ones, which keep the shop working (basket, checkout, sign-in, security and your cookie choice), are used without consent. Analytics and marketing technologies are used only on the basis of your consent.

This shop does not show its own cookie banner. Customers usually reach our checkout from another website we operate, where they have already made a cookie choice. Analytics and marketing cookies are therefore switched on when you arrive, and you can switch them off at any time, without giving a reason, in the cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. Full details of each cookie are in our Cookie Policy.

We only share personal data where it is necessary for the purposes above:

• E-commerce platform and hosting providers that run our online shop, store data and deliver the website, acting as our processors.
• Payment service providers (for example Stripe or PayPal, depending on the payment method you choose), which process your payment and carry out fraud checks. Some act as independent controllers under their own privacy policies.
• Delivery and logistics providers, which receive your name, delivery address and, where needed for delivery notifications, your email address or phone number.
• Email service providers that send our order and service emails.
• Meta, if you have consented, as described in section 4.
• Professional advisers and authorities (such as accountants, tax authorities, courts or the police) where we are legally required or need to establish, exercise or defend legal claims.

Our processors may only use your data on our instructions and under a data processing agreement. We do not sell your personal data.

Some of our service providers, including Meta, may process data outside the UK and the European Economic Area, in particular in the United States. Where this happens we ensure an adequate level of protection: transfers to US companies certified under the EU-US Data Privacy Framework (and its UK Extension) rely on the relevant adequacy decision; other transfers rely on the European Commission’s Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, together with additional safeguards where needed. You can request a copy of the relevant safeguards by contacting us.

• Order, invoice and payment records: for as long as tax and commercial law require (generally 6 years in the UK and up to 10 years in some EU member states).
• Customer account: until you delete your account or ask us to delete it. Order records then stay only for as long as the legal retention periods above require.
• Enquiries: for as long as needed to deal with your enquiry and any follow-up, unless a longer retention period applies (for example because the enquiry relates to an order).
• Analytics and marketing data: until you withdraw consent or the storage period of the cookie or identifier ends (see the Cookie Policy). Data held by Meta is kept in line with Meta’s own retention rules.

Where data may be needed to establish, exercise or defend legal claims, we may keep it until the relevant limitation period has expired.

Under the UK GDPR and the EU GDPR you have the right to:

• access the personal data we hold about you and receive a copy (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict our processing (Art. 18);
• receive your data in a structured, machine-readable format and have it transferred to another controller (Art. 20);
• withdraw any consent you have given at any time, with effect for the future (Art. 7(3)).

Right to object (Art. 21): where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. You may object at any time, without giving reasons, to the use of your data for direct marketing.

To exercise any of these rights, email us at support@my-ticketarenas.store. We will reply within one month. We may need to confirm your identity before acting on your request. Exercising your rights is free of charge.

Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. In the UK this is the Information Commissioner’s Office (ICO), ico.org.uk. In the EU you can contact the supervisory authority in the member state where you live or work or where the alleged infringement took place. A list is available from the European Data Protection Board. We would appreciate the chance to resolve your concern first, so please feel free to contact us.

The website is served exclusively over an encrypted connection (HTTPS/TLS). We and our service providers use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

Our shop is not directed at children. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian.

We may update this Privacy Policy when our services or the law change. The current version is always available on this page, and the date at the top shows when it was last updated.

For any questions about this Privacy Policy or your personal data, email us at support@my-ticketarenas.store.