Privacy Policy

This explains what personal data MNPR Tickets collects, why, and what your rights are. It has not yet been reviewed by a solicitor and should be treated as a strong first draft, not a final legal document.

What we collect

• Name and email address, for both buyers and sellers, to deliver tickets and manage accounts
• Address details, where physical delivery or KYC verification requires it
• Payment details are handled entirely by Stripe, our payment processor — we never see or store your full card details ourselves

Why we collect it

• To deliver the tickets you've bought and let you manage your orders
• To pay sellers for tickets sold, and to meet our own legal and financial record-keeping obligations
• To contact you about an order — for example if an event is cancelled or postponed

Who we share it with

• Stripe, to process payments and seller payouts
• Supabase, our database and hosting provider, based in the European Union
• Resend, to send order confirmations and other account emails
• We do not sell your data, and we do not share it with advertisers

Resend is based in the United States and is certified under the UK Extension to the EU-US Data Privacy Framework, a mechanism recognised under UK data protection law for transferring personal data to the US.

Cookies and analytics

We use a privacy-first analytics tool that doesn't use cookies and doesn't collect anything that identifies you personally. See our Cookie Policy for the full detail. The only cookie we set is the one that keeps you logged in, which is required to provide the service you've asked for.

How long we keep it

We keep account and order data for as long as your account is active, and for a further period afterwards as required for financial and legal record-keeping.

Your rights

Under UK data protection law, you have the right to access, correct, or request deletion of your personal data. Contact us via our Contact page to make a request. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, if you believe we haven't handled your data properly.