Privacy policy

#Our commitment

We collect only what we need to sell you a ticket, get you in the door and pay organizers, and we handle it in line with Kenya’s Data Protection Act, 2019.

#What we collect

• Contact details: your name, phone number and email, used to send tickets and receipts.
• Order details: what you bought, when, and payment references (we never see or store your M-Pesa PIN or full card number).
• Organizer details: business information and KYC documents needed to pay you out.
• Usage data: basic, privacy-friendly analytics and security logs.

#How we use it

To process orders and refunds, deliver tickets, prevent fraud, support you, and meet legal and tax obligations. We’ll only send marketing if you’ve agreed, and you can opt out at any time.

#Who we share it with

• The organizer of an event you buy for receives your name and contact details to manage entry.
• Payment and messaging providers that process payments and deliver SMS, WhatsApp and email on our behalf.
• Authorities, only where the law requires it.

We never sell your personal data.

#Keeping it safe

Tickets are cryptographically signed, data is encrypted in transit, and access inside EventYangu is limited by role and logged.

#Your rights

You can ask to access, correct or delete your data, or object to how we use it. Email info@eventyangu.com and we’ll respond within the time the law requires. You may also complain to the Office of the Data Protection Commissioner.

#Retention

We keep order records for as long as needed for tax and accounting law, then delete or anonymise them.