Privacy Policy | Afton Tickets

Afton Tickets, Inc. ("us", "we", or "our") operates the www.aftontickets.com website and associated mobile applications for iOS and Android (the "Service"). This Privacy Policy describes how we and our affiliates handle the personal information and data we collect from or about our users and customers.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from www.aftontickets.com.

This Privacy Policy describes how we collect information about you, how we use it, who we share it with, and how you can exercise your rights and choices regarding the use and sharing of your information.

If we update this Privacy Policy, we'll revise the "Effective Date" at the top of the page. Changes become effective when posted. Your continued use of the Service indicates your acceptance of the revised Privacy Policy.

If you have questions, you can reach us at legal@aftontickets.com.

INFORMATION WE COLLECT

We collect several different types of information for various purposes to provide and improve our Service to you, including:

Contact Information (such as your name and email address)
Identifiers that relate to you and your device (such as your email address, IP address, or Device ID)
Information about the transactions you conduct through our Services, including payment information
Information about how you interact with our Services and the advertising on our Service, including cookie data
Geolocation data (including precise location information)
Professional information (such as your job title, where provided)
Third party information from select data providers
Inferences about you based on the above information

Personally identifiable information we may collect includes but is not limited to email address; first name and last name; phone number; address, State, Province, ZIP/Postal code, City; and Cookies and Usage Data.

We also collect your responses to any custom checkout questions created by the event organizer for their event (see "Custom Checkout Questions" below), and any other information you voluntarily provide to us by email, phone, chat, or other means. We also collect certain device and transaction information used for fraud prevention, as described in the "Fraud Prevention and Security" section below.

When you use our mobile applications, we may also collect device type and operating system version, unique device identifiers, mobile network information, and push notification tokens (if you opt in to push notifications). If you add tickets to Apple Wallet or Google Wallet, we also store device identifiers and push tokens for those passes so that we can deliver and update your tickets.

We may also collect other categories of information not covered by the above if you voluntarily provide it to us, which may include information considered "sensitive" under certain U.S. state privacy laws if you choose to share it.

HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

When you buy tickets or create an account: Whether you check out as a guest or as an account holder, we collect information directly from you including contact and billing information such as your name, street address, zip or post code, email, phone number and payment card information, along with your responses to any questions the event organizer includes at checkout. If you purchase as a guest, we create an account associated with your email address so your tickets remain accessible to you; you can access it at any time using the password reset option.
When you begin checkout: If you provide your email address but do not complete your purchase, we retain it and may send you a reminder about your incomplete order. You can opt out of these reminders at any time using the link in the email.
When using our websites and apps: We may use tracking tools like browser cookies and web beacons and technology like GPS and Wi-Fi to passively collect data about you, such as your browser, IP address, location, and usage patterns.
When you use social media: The social media site may provide us with some information about you when you interact with our social features. If you sign in using a third-party authentication service (such as Facebook), or an event organizer’s own login service for that organizer’s events, we receive certain profile information from that service, such as your name and email address, in accordance with your settings on that service.
Geodemographic data: We might use suppliers who collate geodemographic data including age range, gender, or information about events you like or products you buy to better personalize our services.

USE OF DATA

Afton Tickets, Inc. uses the collected data for various purposes:

To fulfill both our and the event partner's obligations to you in delivering that service, and, where permitted, keep you up to date about other events that may be of interest to you
To provide and maintain our Service
To notify you about changes to our Service
To allow you to participate in interactive features of our Service when you choose to do so
To provide customer support
To gather analysis or valuable information so that we can improve our Service
To monitor the usage of our Service
To detect, prevent and address technical issues
To provide you with news, special offers and general information about goods, services, events, and promotions offered by us or by selected partners, unless you have opted not to receive such information. Where we promote a partner’s products or services, we send those communications ourselves and do not provide your contact information to the partner unless separately disclosed to you
To share your name, email address, phone number, and ticket purchase information with the event organizer for the specific event for which you purchased tickets, for purposes of event management, access control, and organizer communications

HOW DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your information with third parties in the following ways:

Service providers who use it to help us run our business, like vendors who help us send newsletters, manage event registrations, or keep our website secure
Analytics technology providers who use it to help us understand how people are using the Service
Third-party platforms like Facebook, LinkedIn and X, who use it to help us market our Services to you and others like you
Advertising service providers who help us deliver relevant third-party ads that support our Services financially
Event organizers, who use it to manage your ticket, control event access, and stay in touch with you about their events and related products and services, including by providing your information to the marketing, communications, event-management, and on-site event technology platforms the organizer uses (such as their email or SMS marketing service or cashless payment system)
Resale and optional add-on partners, when you choose to use those features, such as our ticket resale partner CashorTrade or an optional ticket protection provider you purchase at checkout, as described in their own sections below
With a payment processor to complete a transaction you initiate, such as when you purchase tickets
As part of a corporate transaction, like a merger or acquisition, or during a bankruptcy
When required by law, such as in response to a court order, regulatory request, or subpoena
When we deem it necessary to protect our employees, our Services, or our rights under the law or the Terms of Use agreement

TRACKING & COOKIES DATA

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyze our Service. We also use advertising cookies and pixels provided by third-party advertising partners (such as the Meta Pixel and Google Ads tags) to measure the effectiveness of our advertising and to reach people who may be interested in our Service. These advertising technologies may collect information about your visit for the partner’s own advertising purposes; you can opt out as described in the "Your Privacy Rights" sections below. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Event Organizer Tracking Technologies: Event organizers may also place their own tracking and advertising technologies (such as advertising pixels or tag management containers) on the event pages for their events. These technologies may collect information about your visit for the event organizer’s and its advertising partners’ own purposes, including advertising measurement and cross-context behavioral advertising. You can opt out of the sharing of your information for cross-context behavioral advertising as described in the "Your Privacy Rights" sections below.

We use both session and persistent cookies on the Service:

Essential cookies: to remember information that changes the way the Service behaves or looks.
Accounts-related cookies: to authenticate users and prevent fraudulent use of user accounts.
Analytics cookies: to track how the Service is used so that we can make improvements.
Third-party cookies: to report usage statistics and deliver advertisements on and through the Service.

For the Chrome web browser, visit: https://support.google.com/accounts/answer/32050. For Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored. For Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac. For other browsers, please visit your browser's official help pages.

LEGAL BASIS FOR PROCESSING (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it. We may process your Personal Data because: we need to perform a contract with you; you have given us permission to do so; the processing is in our legitimate interests, and it is not overridden by your rights; for payment processing purposes; or to comply with the law.

RETENTION OF DATA

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Because retention needs differ by category of information and by purpose, we do not apply a single fixed retention schedule. Instead, we determine how long to retain information using criteria that include: the nature of the information and the purpose for which it was collected; whether the information is needed to maintain your account and preserve your access to tickets you have purchased; our legal, tax, accounting, and regulatory obligations; the need to establish, exercise, or defend legal claims and resolve disputes; and the need to detect and prevent fraud, security incidents, and other malicious, deceptive, or illegal activity and to protect our customers, event organizers, and Services. Information retained for fraud prevention and security purposes may be kept for as long as it remains necessary for those purposes. You may request deletion of your personal information as described in the Deletion of Data section below, subject to the exceptions described there.

TRANSFER OF DATA

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take the steps we determine are reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

DATA BREACH NOTIFICATION

In the event of a data breach that affects your Personal Data, we will notify you and any applicable regulatory authorities as required by applicable law and without unreasonable delay. Oregon law (ORS 646A.604) requires notification to affected individuals in the most expedient time possible. We will notify you by email to the address associated with your account and, where required, by posting a notice on our website.

Canadian Users: Federal (PIPEDA): Where a breach of security safeguards involving personal information of Canadian users creates a real risk of significant harm to any affected individual, we will notify the Office of the Privacy Commissioner of Canada as soon as feasible and directly notify all affected individuals. We will maintain a record of all such breaches for a minimum of 24 months. Quebec (Law 25): Where a confidentiality incident affecting personal information of Quebec residents presents a risk of serious injury, we will notify the Commission d'acces a l'information du Quebec (CAI) and any affected individuals as soon as reasonably possible.

DISCLOSURE OF DATA

Under certain circumstances, Afton Tickets, Inc. may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities. We may also disclose your Personal Data in the good faith belief that such action is necessary to: comply with a legal obligation; protect and defend our rights or property; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users of the Service or the public; or protect against legal liability.

Business Transfers: If Afton Tickets, Inc. is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of its assets, your Personal Data may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy that provides substantially similar protections. We will notify you of any such transfer that materially changes how your Personal Data is handled.

SECURITY OF DATA

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

YOUR PRIVACY RIGHTS — UNITED STATES

Depending on where you live in the United States, you may have specific rights around your personal information. These rights may include:

Disclosure: You have the right to request a report showing the personal information collected, shared, and sold about you.
Deletion: You have the right to request that we delete any personal information collected from or about you.
Correction: You have the right to request that we correct inaccurate personal information collected from or about you.
Opt-Out of Sale/Profiling: You have the right to opt out of the sale of your personal information and targeted advertising or profiling. Depending on how applicable law defines these terms, our use of advertising cookies and pixels, and certain sharing of information with advertising partners, may be considered a sale or sharing of personal information. How to opt out is described in the California section below, and the opt-out applies to all U.S. users.
Non-Discrimination: We shall not discriminate against you based on your exercise of any of the above rights.

You may exercise any of the above rights by contacting us at legal@aftontickets.com, writing us at 581 Lancaster Dr SE #169, Salem, OR 97317, or calling us at 888-308-9574. Please include your full name, email address, and which type of request you are making. We will respond within 45 days of receiving a verifiable request.

Appeals: If we decline to take action on a privacy rights request, you may appeal our decision by emailing legal@aftontickets.com with the subject line "Privacy Appeal." Where required by applicable state law (including Oregon), we will inform you of the outcome of your appeal and provide information about how to contact your state Attorney General if you have concerns about the result.

YOUR PRIVACY RIGHTS — OREGON (OCPA)

If you are a resident of Oregon, the Oregon Consumer Privacy Act (ORS Chapter 646A) grants you the following rights with respect to your Personal Data: Right to Know; Right to Correct; Right to Delete; Right to Data Portability; and Right to Opt Out of targeted advertising. To exercise any of these rights, please contact us at legal@aftontickets.com with the subject line "Oregon Privacy Request." We will not discriminate against you for exercising any of these rights.

YOUR PRIVACY RIGHTS — CALIFORNIA (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know: You have the right to request that we disclose the categories and specific pieces of Personal Data we have collected about you, the categories of sources from which we collected it, the purposes for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request deletion of Personal Data we have collected about you, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate Personal Data we hold about you.
Right to Opt Out of Sale or Sharing: Like most websites, we use advertising cookies and pixels from partners such as Meta and Google to measure and improve our advertising, which may be considered "sharing" (or a "sale") of Personal Data under the CCPA/CPRA. You can opt out of this sharing at any time by emailing legal@aftontickets.com with the subject line "Opt Out of Sharing" or by calling us at 888-308-9574.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Right to Limit Use of Sensitive Personal Information: We use precise geolocation information (which is sensitive personal information under the CPRA) only for security and fraud prevention and other purposes permitted without a right to limit. You may nonetheless direct us to limit the use of your sensitive personal information by emailing legal@aftontickets.com or by calling us at 888-308-9574.

"Shine the Light" Law: If you are a California resident and have an established business relationship with us, you can email us to request a list of the personal information we have shared with third parties for their marketing purposes. You can make a request one time each year by emailing us and mentioning you are making a "California Shine the Light" inquiry. We will respond within 30 days.

To exercise your California privacy rights, please contact us at legal@aftontickets.com with the subject line "California Privacy Request" or by mail at 581 Lancaster Dr SE #169, Salem, OR 97317.

YOUR PRIVACY RIGHTS — CANADA (PIPEDA)

If you are a resident of Canada, the following additional privacy rights and disclosures apply to you under the Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5, and applicable provincial privacy legislation. We collect your personal information only for the purposes described in this Privacy Policy and will not use or disclose your personal information for purposes other than those for which it was collected, except with your consent or as required by law.

As a Canadian resident, you have the following rights:

Right to Access: You have the right to request access to the personal information we hold about you and to receive information about how it has been or is being used.
Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Withdraw Consent: You have the right to withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Note that withdrawal of consent may affect our ability to provide you with certain Services.
Right to Complain: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe we have not complied with PIPEDA. Contact the OPC at www.priv.gc.ca or 1-800-282-1376.

To exercise any of the above rights, please contact us at legal@aftontickets.com with the subject line "Canadian Privacy Request." We will respond within 30 days of receiving a verifiable request.

Quebec residents may also have additional rights under Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), including rights to data portability and de-indexing. Our Privacy Officer can be reached at legal@aftontickets.com. To exercise any Quebec privacy rights or to make a complaint, you may also contact the Commission d'acces a l'information du Quebec (CAI) at www.cai.gouv.qc.ca.

YOUR DATA PROTECTION RIGHTS (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights including: the right to access, update or delete the information we have on you; the right of rectification; the right to object; the right of restriction; the right to data portability; and the right to withdraw consent. Please contact us at legal@aftontickets.com to exercise any of these rights. You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data.

DO NOT TRACK

Our websites and apps are not designed to respond to legacy "Do Not Track" requests from browsers.

SERVICE PROVIDERS

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), provide the Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We also share certain Personal Data with event organizers whose events are ticketed through the Service. When you purchase a ticket, we provide the event organizer with your name, email address, phone number, and ticket purchase details for purposes of event access, management, and organizer communications. Event organizers are independent parties, and their use of your data is subject to their own privacy policies.

Custom Checkout Questions: Event organizers may include their own custom questions on the checkout page for their events, and these may be optional or required. We collect your responses on the event organizer’s behalf, store them with your order record, and share them with that event organizer. Afton does not control the content of these questions. Please do not enter Social Security numbers, driver’s license numbers, financial account numbers, health information, or other sensitive information in response to a custom checkout question. If you believe a question improperly requests sensitive information, contact us at legal@aftontickets.com. We require event organizers to limit custom questions to information appropriate for administering their event, and we remain responsible for information collected through our checkout page.

Event Discovery Partners: Afton also partners with third-party event discovery and promotion services, including but not limited to JamBase and Bandsintown (collectively, “Discovery Partners”). These partners receive event-level information — such as event names, dates, venues, artist lineups, ticket links, and event imagery — to help promote events listed on the Afton platform and drive ticket sales. Discovery Partners do not receive Your personal information (such as Your name, email address, payment information, or purchase history) as part of these integrations. Discovery Partners may further syndicate event-level information to their own downstream partners (such as Google and Spotify) for event discovery purposes. The sharing of Your personal information is governed solely by the remainder of this Privacy Policy.

Resale Partner — CashorTrade: Afton offers attendees the option to resell tickets at face value through CashorTrade (Cash or Trade, Inc.), a third-party fan-to-fan ticket resale marketplace, or any successor or additional resale marketplace we designate. If you choose to resell a ticket, or you purchase or receive a resold ticket, through CashorTrade, we share with CashorTrade the ticket and order information linked to the purchase that is necessary to verify ticket validity and ownership, enforce face-value pricing limits, and complete the resale or transfer — such as ticket and order identifiers, event and ticket details, the ticket’s original price and fees paid, and the name and email address associated with the ticket. CashorTrade may use this information only to provide the resale service, and its handling of information you provide to it directly is governed by CashorTrade’s own terms of service and privacy policy. CashorTrade provides resale transaction information back to Afton (such as listing status and completed transfers), which we retain as part of our order records, including to issue the ticket to the new holder. If we add or change resale partners, this section applies equally to those partners.

Fraud Prevention — Kount: We use Kount, an Equifax company, to help detect and prevent fraudulent transactions. When you make an online purchase, Kount receives information about you and your transaction, such as your name, email address, IP address, device and browser characteristics, and order details, to assess fraud risk before your order is completed. Kount’s risk assessment may also draw on fraud signals observed across Kount’s merchant network. Kount uses this information for fraud prevention and security purposes, including to operate and improve its fraud detection services.

Fraud Prevention and Security: In addition, we and the third-party security providers we use collect and analyze device and browser characteristics, network and IP information, and location data (including precise location) when you visit or use our websites and apps. We use this information to detect and prevent fraud, bots, account misuse, and other malicious, deceptive, or illegal activity, and to protect our customers, event organizers, and Services. We retain this information for as long as it remains necessary for these security and fraud prevention purposes, and we may use additional or successor providers for these purposes at any time. Signals such as the use of a VPN, proxy, or private browsing mode may be considered together with other factors in assessing fraud risk, and we may decline, hold, or require additional verification for an order as a result.

Automated Fraud Screening: We use automated tools, including the fraud prevention services described above, to assess orders and account activity for fraud risk. In some cases, this may result in an order being automatically declined, held for review, or made subject to additional verification requirements (such as will call pickup with matching photo identification). If your order was declined or conditioned and you believe this was in error, contact us at legal@aftontickets.com.

Optional Add-On Providers: If you purchase an optional product or service offered during checkout (such as ticket protection), we share with the provider of that product or service the information necessary to provide it to you and to administer your requests under it. Our ticket protection provider, Happiness Locked, is our affiliate (a separate company); other providers of optional products or services may also be affiliated with Afton.

ANALYTICS

We use Google Analytics to analyze the use of the Service. Google Analytics tracks and reports website traffic. Google uses the data collected to track and monitor the use of the Service and may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on the privacy practices of Google, please visit: https://policies.google.com/privacy?hl=en

We also use product analytics tools such as PostHog to understand how our features are used and how our systems perform; these tools process usage information on our behalf. Links in our text messages may use a link-shortening service that registers clicks so that we can deliver and measure those messages. If we add or change analytics providers, equivalent providers may process similar information on our behalf.

We also use HubSpot as our marketing platform. HubSpot places analytics and advertising-related cookies that help us understand how visitors use our websites and support our marketing; HubSpot processes this information on our behalf. For more information, see HubSpot’s privacy policy at https://legal.hubspot.com/privacy-policy. You can opt out of advertising-related tracking as described in the “Your Privacy Rights” sections above. If we change marketing platforms, an equivalent provider may place similar cookies.

PAYMENTS

We may provide paid products and/or services within the Service. We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

The payment processors we work with include:

Stripe — https://stripe.com/privacy
PayPal / Braintree — https://www.paypal.com/webapps/mpp/ua/privacy-full
Authorize.Net — https://www.authorize.net/company/privacy/

We may add or change payment processors or offer additional payment options, such as payment plans; this section applies equally to those providers.

DELETION OF DATA

If a user wants Afton Tickets to delete all personal data, users can send a request to Afton Tickets by emailing legal@aftontickets.com. We will respond to deletion requests within 45 days. Please note that we may be required to retain certain data notwithstanding a deletion request, including data necessary to comply with legal obligations, resolve disputes, enforce agreements, or maintain transaction records required by law. In such cases, we will notify you of the data we are retaining and the legal basis for doing so. We may also retain information where reasonably necessary to detect and prevent fraud and abuse, protect the security of our Services and our customers, and prevent circumvention of our fraud and security controls, as permitted by applicable law.

LINKS TO OTHER SITES

Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

CHILDREN'S PRIVACY

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us at legal@aftontickets.com. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will revise the "Effective Date" at the top of this Privacy Policy, and if we make material changes, we will provide prominent notice on our Service before the changes take effect. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

CONTACT US

If you have any questions about this Privacy Policy, please contact us:

By email: legal@aftontickets.com
By mail: 581 Lancaster Dr SE #169, Salem, OR 97317

By phone: 888-308-9574