PRIVACY POLICY

QuickTix is an event ticketing and event services platform operating in Botswana, run by [REGISTERED COMPANY NAME] (company registration [COMPANY REGISTRATION NUMBER]), of [REGISTERED ADDRESS, GABORONE, BOTSWANA].

We are the data controller for the personal information described in this policy. This policy covers our website at https://www.quicktix.co.bw, our WhatsApp ticket assistant, and the admin and point-of-sale tools used by our staff, clients and gate teams.

Questions or requests about your data: [PRIVACY EMAIL].

When you buy a ticket

• Your name, email address and phone number.
• The event, ticket type and quantity you bought, the amount paid, and the status of your order.
• The tickets issued to you, including the ticket number and the QR code used to admit you.

When you message our WhatsApp assistant

• Your WhatsApp phone number and the profile name WhatsApp shows us.
• The content of the messages you send and we send back, stored as a conversation record so the assistant can continue where you left off and so our team can help if you ask for a person.
• The name and email address you give the assistant during a purchase.

When you enquire about our services

• Your name, email, phone number and company, plus the details of your enquiry — event name, budget, requirements and any message you write.
• Any files you upload, such as event posters or ticket designs.

At the gate

• When your ticket or wristband is scanned we record the time, the result, the gate or zone, and which device and staff member scanned it.

Staff, client and store accounts

• Name, email address, role, and where relevant phone number and company.

What we do not collect

• We never see or store your card details. Card and mobile-money payments are entered directly with our payment provider, and we only receive a payment reference, the amount, and whether it succeeded.
• We do not use advertising cookies, analytics trackers or third-party pixels on this site.

• To take and fulfil your order, issue your tickets and admit you to the event.
• To send your tickets and receipt by email and, if you bought on WhatsApp, on WhatsApp.
• To answer your questions and provide support, including handing you to a human agent.
• To run events on behalf of organisers — including capacity, attendance and sales reporting.
• To detect and prevent fraud, duplicate entry and abuse of the platform.
• To meet our legal, tax and accounting obligations.

We rely on performance of our contract with you (to sell and deliver tickets), our legitimate interests (security, fraud prevention, improving the service), your consent where you have given it, and compliance with legal obligations.

We do not sell your personal information.

Our WhatsApp assistant is mostly a menu-driven system. When you type something it cannot match to a menu option, the text of that message is sent to Google (Gemini) to work out what you meant — for example, whether you are naming an event or asking for help.

The model only classifies your intent. It does not decide prices, availability or totals, and it never writes the replies you receive: those come from our own system and our database.

No decision with a legal or similarly significant effect on you is made by automated means alone. You can reach a person at any time by sending agent to the assistant.

We share personal information only with the service providers we need to run the platform:

• Meta Platforms — operates WhatsApp. Messages to and from our assistant pass through and are handled under WhatsApp's own privacy terms.
• MobiPaid — our payment gateway. Processes your payment and holds your card or mobile-money details; we do not.
• Supabase — hosts our database and file storage. Our database is located in the EU region.
• Resend — delivers ticket and receipt emails.
• Google — processes free-text WhatsApp messages for intent classification, as described above.
• Event organisers — receive attendance and sales information for their own event, and the name on a ticket where needed to admit you or resolve a dispute.

We may also disclose information where required by law, or to establish, exercise or defend legal claims.

Some of these providers process data outside Botswana. Where that happens we rely on the provider's contractual data-protection commitments.

• Orders, tickets and payment records — kept for as long as needed to run the event and then for the period required by Botswana tax and accounting law.
• WhatsApp conversations — kept so you can resume a purchase and so we can resolve disputes. [RETENTION PERIOD TO BE CONFIRMED]
• Enquiries and leads — kept while we are in discussion with you and for a reasonable period afterwards. [RETENTION PERIOD TO BE CONFIRMED]
• Scan logs — kept for the event and for reporting to the organiser. [RETENTION PERIOD TO BE CONFIRMED]

Unpaid orders that are never completed are cancelled automatically and the seats released.

Under the Botswana Data Protection Act, 2018 you have the right to ask us to:

• confirm whether we hold personal information about you, and give you a copy;
• correct information that is inaccurate or incomplete;
• delete information we no longer have a lawful reason to keep;
• stop or restrict certain uses of your information;
• withdraw consent, where we relied on your consent.

Email [PRIVACY EMAIL] and we will respond within the time the Act allows. We may need to verify who you are first. You also have the right to complain to the Information and Data Protection Commission of Botswana.

To stop receiving messages from our WhatsApp assistant, reply STOP or block the number in WhatsApp.

Access to admin tools is restricted to authorised staff. Credentials for our integrations are encrypted before they are stored. Ticket download links are individually signed and expire, so a link cannot be reused indefinitely if it is forwarded.

No system is perfectly secure. If a breach affects your personal information we will notify you and the Commission as required by the Act.

This site does not use advertising or analytics cookies. Our admin portal stores a small amount of data in your browser (localStorage and sessionStorage) to keep staff signed in during a session. That data stays in your browser.

Our services are intended for adults. We do not knowingly collect personal information from children. Where an event admits children, tickets are bought by an adult and the details we hold are the adult buyer's. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy. The effective date at the top shows when it last changed. Material changes will be announced on this page.

[REGISTERED COMPANY NAME]
[REGISTERED ADDRESS, GABORONE, BOTSWANA]
Privacy: [PRIVACY EMAIL]
Support: [SUPPORT EMAIL] · [SUPPORT PHONE]