Privacy Policy

1. Who We Are

PTA Tickets Ltd is a company registered in England and Wales. Our registered office is at 143 Station Road, Hampton, Middlesex, England, TW12 2AL. Company number 17049045.

We are registered with the Information Commissioner's Office (ICO) as a data controller.

If you have any questions about this policy or how we handle your data, please contact us at help@ptatickets.co.uk.

2. What Data We Collect

When you use PTA Tickets, we may collect the following personal data:

• Your name and email address when you register or contact us
• Your child's school, for the purpose of matching you to relevant events
• Ticket purchase history and event attendance information
• Communications you send to us

We do not store payment card details. All payments are processed securely by Worldpay, who handle your card data in accordance with their own privacy policy and PCI DSS compliance standards.

3. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Process ticket purchases and send booking confirmations
• Communicate with you about events relevant to your school
• Respond to enquiries and provide customer support
• Meet our legal and regulatory obligations

4. Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract — processing your data is necessary to fulfil your ticket purchases and manage your account
• Legitimate interests — to communicate with you about events at your school community
• Legal obligation — where we are required to process data to comply with the law

5. Who We Share Your Data With

We do not sell your personal data. We may share it with the following trusted third parties who help us operate our service:

• Supabase — our database and authentication provider, who store your account data securely
• Worldpay — our payment processor, who handle all card transactions

All third parties are required to handle your data securely and in accordance with UK GDPR.

6. How Long We Keep Your Data

We retain your personal data for as long as your account is active, or as long as is necessary to provide our services and meet our legal obligations. If you close your account, we will delete or anonymise your personal data within 90 days, unless we are required by law to retain it longer.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict how we process your data
• Data portability — receive your data in a commonly used format
• Withdraw consent at any time, where consent is our legal basis

To exercise any of these rights, please contact us at help@ptatickets.co.uk. We will respond within 30 days.

8. Cookies

We use only essential cookies required for the site to function, such as keeping you logged in. We do not use advertising or analytics cookies. For more information, please see our Cookie Policy.

9. Changes to This Policy

We may update this privacy policy from time to time. Where changes are significant, we will notify you by email or by a prominent notice on our website. The date at the top of this page will always reflect when the policy was last updated.

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would, however, always appreciate the chance to address your concerns directly first.