Privacy policy

What we know about you, why, who else sees it, and how to change or delete it.

Last updated 13 October 2026

Who we are

El Tiquetero (eltiquetero.com) is run by Kirkpatrick Consult Limited, a company registered in England and Wales (company no. 06285045) at 28 New Barns Road, Ely, Cambridgeshire, CB7 4PN (“we”, “us”, “our”), which is responsible for your personal data under the UK and EU General Data Protection Regulation (GDPR) and Spain’s data protection law (LOPDGDD). For anything about your data, email info@eltiquetero.com or call +34 711 088 128.

What we collect and why

When you buy or book tickets

• What: your name, email address and country; the tickets you book and what you paid; any attendee details the organiser asks for; and, if you check in, when your ticket was scanned.
• Why: to take your booking, email your tickets, handle refunds, and let the organiser check you in. We need this to carry out our contract with you, and to keep records the law requires.

When you create an account

• What: your username, email address, name and password (stored encrypted, so we can’t read it).
• Why: to let you log in and see your tickets, events or affiliate area. This is part of our contract with you.

If you’re an organiser

• What: your account details, the events and photos you publish (which are public), the PayPal email address we pay you at, and your sales.
• Why: to publish your events, sell your tickets, pay you and show you your sales. This is part of our contract with you.

If you’re an affiliate

• What: your account details, the PayPal email address we pay you at, your website or social media page, how you’ll promote us, the visits that came through your link, and your commission.
• Why: to run the affiliate programme and pay you. This is part of our contract with you.

When you contact us

• What: your name, email address, phone number if you give it, and your message.
• Why: to answer you. This is in our legitimate interest, and yours.

When you visit the website

• What: your IP address and browser details, which our hosting company logs, and the cookies described below.
• Why: to keep the website running and secure, remember your basket and credit affiliates, which is in our legitimate interest; and, only if you accept optional cookies, to know which links bring people to us.

Who we share it with

We don’t sell your data. We share it only with the people and services below, and only what each one needs.

• Event organisers: when you book, the organiser sees your name, email address, ticket and any attendee details, so they can run the event, check you in and contact you about it (for example, if it changes). Each organiser is responsible for how they use your details for their own purposes.
• PayPal: takes your payment by card or PayPal, and sends organisers and affiliates their money. PayPal has its own privacy statement.
• Fasthosts (part of IONOS): hosts the website and its database.
• Microsoft 365: sends our emails, including your tickets, and holds our inbox.
• Google: shows the maps on event pages, helps stop fraud at checkout (reCAPTCHA), translates pages if you choose another language, and provides the fonts in our emails. Your browser or email app connects to Google for these, which shares your IP address with it.
• Cloudflare: checks that people logging in or signing up aren’t bots (Turnstile).
• The Events Calendar (StellarWP): creates Apple Wallet passes. If you add a ticket to Apple Wallet, your ticket and event details are sent to its server to make the pass.
• Others when required: our accountants and legal advisers, and the police, tax authorities or courts if the law requires it.

Some of these companies store data outside the UK and the European Economic Area, for example in the United States. Where they do, they protect it with safeguards the law accepts, such as the EU’s standard contractual clauses or the EU–US Data Privacy Framework.

Cookies

Cookies are small files your browser keeps for a website. We don’t use advertising cookies, and we don’t use Google Analytics.

Essential cookies

The website needs these to work, so they don’t need your consent:

• Logging in (wordpress_logged_in_…, wordpress_sec_…, wordpress_test_cookie, wp-settings-…): keep you logged in and remember your screen settings. They last until you log out, or up to two weeks if you tick “Remember me”.
• Your basket (wp_woocommerce_session_…, woocommerce_cart_hash, woocommerce_items_in_cart): remember the tickets in your basket, for up to two days.
• Affiliate links (slicewp_aff, slicewp_visit): if you arrive through an affiliate’s link, remember which affiliate sent you, so they’re credited if you book. They last 30 days.
• Payments and security: PayPal, Google (reCAPTCHA) and Cloudflare (Turnstile) set their own cookies at checkout and when you log in, to process payments and stop fraud.
• Your cookie choice (et_cookie_consent): remembers whether you accepted or rejected optional cookies, for 180 days.

Optional cookies

We only set these if you choose “Accept” in the cookie banner:

• How you found us (sbjs_…): record where your visit came from, such as a search engine or a link, so we can see which promotion works when you book. They last for your visit, or up to six months for the first one.

You can change your mind at any time with Cookie settings, also at the bottom of every page. If you reject them, any we’ve already set are deleted. You can also delete or block cookies in your browser’s settings, but without the essential ones you won’t be able to log in or keep tickets in your basket.

How long we keep it

• Orders and payments: for as long as tax and accounting law requires, usually six years.
• Your account: until you ask us to delete it. We keep the order records above even after that.
• Messages to us: for up to two years after we last hear from you.
• Affiliate visit records: for as long as the affiliate’s account is open, so commission can be checked.

Your rights

You can ask us to:

• give you a copy of the data we hold about you;
• correct it, or delete it where we don’t have to keep it;
• stop or limit how we use it, or object to a use based on our legitimate interests;
• send it to you or another company in a common format;
• withdraw any consent you’ve given, at any time.

Email info@eltiquetero.com. We’ll reply within one month, and it’s free. You can also change most of your details yourself in My Account.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Spanish data protection authority, the AEPD, or in the UK to the Information Commissioner’s Office.

Children

You must be at least 14 to create an account or buy tickets yourself. If you’re younger, ask a parent or guardian to book for you.

Keeping your data safe

The website uses an encrypted connection (https), passwords are stored encrypted, and only the people who run El Tiquetero can see customer data. Organisers see only the bookings for their own events.

Changes to this policy

If we change how we use your data, we’ll update this page and the date at the top. If the change is significant, we’ll also tell account holders by email.