Privacy & Data Security Policy

TixStage (operated by The Festival Crowd) sells event tickets on behalf of event organisers. This policy explains what personal data we collect and how we protect it.

What we collect

When you buy a ticket we collect your name, email address and, where an event requires it, attendee details. Payment card details are never stored on our servers: card data is handled entirely by our PCI-DSS-compliant payment providers (Stripe, Square, viva.com, Checkout.com, Authorize.net).

How we use it

Your data is used to deliver your tickets, provide entry to the event, send service messages about your order, and meet legal obligations. We do not sell personal data. Marketing emails are sent only with your consent and every one contains an unsubscribe link.

Security

All traffic is encrypted with TLS. Access to order data is restricted and logged. Attendee data is retained only as long as needed for the event and statutory record-keeping, then removed.

Your rights

You may request a copy, correction or deletion of your personal data at any time by emailing [email protected].