Privacy Policy

Bath Ticket Marketplace operates the online ticket resale marketplace. For personal data used to operate the marketplace, Bath Ticket Marketplace acts as the data controller. Where third-party providers such as Stripe process data under their own terms, those providers act as independent controllers or processors as appropriate.

We may collect and process the following types of information:

• Email address and account identifiers;
• Profile and authentication information;
• Ticket listing details (event name, venue, date, price);
• Uploaded ticket files;
• Buyer, seller, order and transaction records;
• Stripe connected-account references and payment status information;
• Communications with our support team;
• Device, browser, IP address, security and technical logs;
• Information provided during fraud or dispute investigations.

Card payment details are handled directly by Stripe. We do not store full card numbers.

Your information is used to:

• Create and manage your account;
• Publish and manage ticket listings;
• Process purchases and seller payouts;
• Securely deliver purchased tickets;
• Maintain ticket ownership history and prevent duplicate listings;
• Prevent fraud and misuse of the platform;
• Communicate with you about transactions, support and account matters;
• Handle support requests, refunds and disputes;
• Meet legal, accounting, tax and regulatory obligations;
• Improve the security and reliability of the service.

We process personal data on the following lawful bases (described in plain language):

• Contract — processing is necessary to provide the service you have requested, including creating accounts, processing transactions and delivering tickets.
• Legitimate interests — including security, fraud prevention, dispute resolution, support and improving the platform, where those interests are not overridden by your rights.
• Legal obligation — where we are required to retain or disclose information by law.
• Consent — where we specifically request your consent for a particular use.

We may share information with:

• Stripe — for payment processing and seller payouts;
• Supabase — for database, authentication and file storage;
• Vercel — for hosting and application delivery;
• Resend — for transactional email delivery of purchased tickets;
• Professional advisers, fraud-prevention and security providers;
• Regulators, courts, law enforcement or other authorities where legally required;
• Buyers and sellers, only to the extent necessary to complete or investigate a transaction.

We do not sell personal data to third parties for marketing purposes.

Some service providers may process data outside the United Kingdom. Where required by law, appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — are used to protect your information.

Ticket files uploaded by sellers are stored privately. They are made available only as necessary to complete a sale and deliver the ticket to the buyer. Files may be retained temporarily or for longer periods where needed for disputes, fraud prevention, accounting or legal obligations.

We retain personal data only for as long as reasonably needed to fulfil the purposes described in this policy, including completing transactions, handling disputes, maintaining security, meeting legal obligations and keeping legitimate business records. Retention periods depend on the type of information and the reason it is held.

We use reasonable technical and organisational measures to protect your information. However, no online system can be guaranteed to be completely secure. Please keep your account credentials safe and contact us promptly if you suspect unauthorised access.

Under UK data protection law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate information;
• Request deletion of your data in certain circumstances;
• Request restriction of processing in certain circumstances;
• Object to processing based on legitimate interests;
• Data portability where applicable;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Some rights may be limited where we are required to retain information for legal, fraud prevention or transaction record purposes.

We may use essential cookies or similar technologies for authentication, security and the operation of the website. We do not currently use non-essential analytics or advertising cookies. If non-essential cookies are introduced in future, we will provide appropriate notice and obtain consent as required by law.

Bath Ticket Marketplace is intended for people aged 18 and over. The service is not knowingly designed to collect personal information from children.

This policy may be updated from time to time. Changes will be published on this page. For any privacy queries or to exercise your rights, contact us at support@bathticketmarketplace.com.

You can also use our Contact page.