Privacy policy

1. What we collect

• What you type at checkout: the name that goes on the ticket, your email address, and your phone number if you choose to give one.
• Your order: the event, the tier, the quantity, the amount, the payment method and the status of the transaction.
• Your ticket: its reference, its QR code, and — if you are scanned in — the time you were checked in.
• Technical data our servers log in the ordinary course, such as IP address, browser and the pages requested, used to keep the service up and to investigate abuse.

We do not collect card numbers, bank credentials or crypto private keys. Card and transfer details are entered on the payment provider's own page and never reach us.

2. Why we use it, and on what basis

• To perform our contract with you — issuing your ticket, delivering it to your email, letting you look it up later, and admitting you at the door.
• To handle payments, verify them and process refunds, which is both contractual and a legal obligation on us and our processors.
• Our legitimate interests: keeping the platform secure, preventing fraud and duplicate tickets, and fixing faults.
• Legal obligations: financial records we are required to keep, and requests we are legally required to answer.

We do not sell your data, and we do not send marketing email unless you ask us to.

3. Who we share it with

• The organizer of the event you bought a ticket to — they receive the attendee details they need to run the door and their own guest list.
• Our payment processors, who handle the transaction and its verification.
• The infrastructure providers who host the site, the database and the email that delivers your ticket.
• Anyone we are legally required to disclose to, such as a court order or a regulator.

4. Blockchain records

Tickets are issued as tokens on a public blockchain. Data written to a public chain is visible to anyone and is permanent — it cannot be altered or erased on request, by us or by anyone else. This is a limit on the erasure right below that we cannot engineer around, so it is worth knowing before you buy.

5. Cookies and analytics

The buyer-facing site sets no advertising cookies and runs no third-party analytics or tracking scripts. Your browser does keep one thing locally: the reference of a purchase you have started, so we can take you back to it if you return before it settles. It stays on your device and is never sent anywhere.

6. How long we keep it

Order and ticket records are kept while the event is live and afterwards for as long as we need them for financial records, dispute resolution and our legal obligations. Technical logs are kept for a short period. Records on a public blockchain remain there permanently, as described above.

7. Your rights

Under the Nigeria Data Protection Act 2023 you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to or restrict how we use it, ask for it in a portable form, and withdraw any consent you gave. Email support@crowdpazz.com and we will respond within the timeframe the Act requires. If you think we have handled your data badly, you can complain to the Nigeria Data Protection Commission.

8. Security

Data is transmitted over encrypted connections, payment details are handled entirely by licensed processors, and access to attendee data is restricted to the accounts that need it. No system is perfectly secure, but if a breach affects your data we will notify you and the Commission as the Act requires.

9. Children

CrowdPass is not intended for children under 18. Where an event admits under-18s, the ticket should be bought by a parent or guardian.

10. Contact

CrowdPass Event Ventures — No. 12, Ibrahim Yerima Street, Ungwan Pama, Sabo Tasha, Kaduna, Kaduna State, Nigeria. Email support@crowdpazz.com or call +234 907 939 0551. Our terms of service cover the rest of the relationship.