How Ticketry handles your personal information

1. Who we are

Ticketry is a trading name of IBQS Inc., a federally incorporated Canadian company at 2972 Danforth Avenue, East York, Ontario M4C 1M6 ("Ticketry", "we", "us"). We sell tickets and run events on behalf of event organizers.

For the purposes of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ticketry is responsible for the personal information collected through ticketry.ca. Our Privacy Officer is reached at [email protected] — put "Privacy" in the subject line.

2. What we collect, and when

• When you buy a ticket: your name and email address (required), your phone number (optional), the language you chose, the tickets, add-ons and any promo code on the order, the payment method you selected, and your answers to any questions the organizer asked at checkout — for example dietary needs or a team name. The organizer decides which questions to ask; you see them before you answer.
• Attendee names: if you name the people attending, or transfer a ticket to someone, we record that person's name and, where given, email address against the ticket.
• Payment: card payments are processed by Stripe. Your card number, expiry and security code are entered into a form served by Stripe and go directly to Stripe; they never pass through, and are never stored on, Ticketry's systems. We receive the confirmation, the card brand and the last four digits. For Interac e-Transfer we record the reference, the sender name and the amount your bank shows when the transfer arrives. For cash at the door we record the sale and the amount.
• Waitlists and invitations: your name, email address and the number of tickets you want.
• At the door: when your ticket is scanned we record the time, the outcome (admitted, already used, voided) and which device scanned it.
• Email delivery: we keep a log of which notifications were sent about your order — confirmation, tickets, reminders, changes — and whether they were delivered. The log stores a hashed form of your address, not the address itself.
• Marketing list: if you sign up, your email address, the time, and the IP address from which you confirmed. We use double opt-in: nothing is sent until you click the confirmation link.
• When you write to us: whatever you include in the message, and the contact details you give.
• How you found us: if you arrived from a link carrying campaign tags (UTM parameters) or from another website, we record those tags and the referring page with your order so the organizer can see which promotion worked. We do not record your IP address against your order.

3. Why we use it

• To sell and deliver your tickets, including sending your confirmation and the tickets themselves.
• To tell you about the event you are attending: a reminder before it starts, changes to the date, time or venue, a cancellation, and a thank-you afterwards.
• To admit you at the door and to stop a ticket being used twice.
• To process refunds and to match e-Transfer payments to orders.
• To answer your questions and resolve disputes.
• To keep the accounting and tax records Canadian law requires.
• To detect and prevent fraud and automated abuse of the checkout.
• To send you marketing email — only where you have given express consent.

Messages about an order you placed are transactional. We send them without a marketing consent, as Canada's Anti-Spam Legislation (CASL) permits for messages that concern a transaction you entered into.

4. Who we share it with

The organizer. Ticketry runs events on behalf of organizers. The organizer of an event you buy a ticket for receives the attendee list for that event — names, email addresses, ticket types and the answers to the questions they asked — in order to run it. Our agreement with organizers requires them to use that information only for the event and to protect it; once shared, it is also subject to the organizer's own privacy practices.

We do not sell your personal information to anyone.

Service providers that process information for us, under contract and only on our instructions:

• Stripe Payments Canada, Ltd. — card payments and fraud screening. Stripe's privacy policy applies to the card form.
• CanKivo — the ticketing software, which is IBQS Inc.'s own platform.
• OVHcloud — the servers, file storage and encrypted backups that run it, located in Beauharnois, Québec.
• Cloudflare — content delivery, DNS and protection against attacks. Traffic to ticketry.ca passes through Cloudflare's network, which has points of presence outside Canada.
• Tucows (OpenSRS) — our email mailbox provider.
• Email delivery services used to send transactional and marketing messages.

The law. We disclose information where the law requires it — a court order or a lawful request from a Canadian authority — or where necessary to protect our rights or someone's safety.

A sale of the business. If IBQS Inc. sells or transfers the Ticketry business, your information may be transferred with it, subject to the same promises.

5. Where it is stored

Our systems, databases and backups are hosted in Canada (OVHcloud, Beauharnois, Québec). Stripe processes payment data on its own infrastructure, which may include servers in the United States. Cloudflare routes web traffic through the point of presence nearest to you, which may be outside Canada. Information that is outside Canada is subject to the laws of that country, including lawful access by its authorities.

6. How long we keep it

• Orders, payments, refunds and the tickets attached to them: at least six years after the end of the tax year they relate to, which is what Canadian tax law requires for business records. These records show the tax collected and cannot be deleted sooner.
• Attendee names and checkout answers: kept with the order for the same period.
• Waitlist and invitation entries: until the event has passed, or until you ask to be removed.
• Marketing list: until you unsubscribe. Unsubscribing takes effect immediately, and we keep a record of it so that we do not email you again.
• Messages you send us: for as long as needed to deal with your enquiry, normally no more than two years.
• Backups: encrypted copies of our databases are kept for 30 days and then deleted.

7. How we protect it

All traffic to ticketry.ca is encrypted. Card details never reach our servers. Databases and backups are held on private, access-controlled storage in Canada; backups sit in storage that permits no public access. Access to the ticketing system is limited to Ticketry staff with their own login, and each staff member sees only the events they manage. Ticket links expire after 180 days and are tied to your order; a transferred ticket's code is retired so the previous holder cannot use it. The checkout is rate-limited to deter automated buying.

No system is perfectly secure. If we discover a breach of security safeguards that creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

8. Your choices and rights

• Access and correction. You can ask for a copy of the personal information we hold about you and have it corrected. Email [email protected] with "Privacy" in the subject and the email address you used to buy. We respond within 30 days.
• Withdrawing consent. You may withdraw your consent at any time, subject to legal and contractual limits. Withdrawing consent for an order may mean we cannot deliver or honour the ticket; we will tell you the consequences before acting.
• Marketing. Every marketing email has an unsubscribe link, and unsubscribing is immediate. You can also email us.
• Your ticket link. From the link in your confirmation you can view and download your tickets, add the event to your calendar, correct an attendee's name or transfer a ticket — without contacting us.
• Québec residents have the additional rights set out in Québec's Act respecting the protection of personal information in the private sector. Our Privacy Officer is the person in charge of the protection of personal information for those purposes.
• Complaints. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

9. Children

ticketry.ca is not directed at children. Events may admit children, but tickets are bought by adults. We do not knowingly collect personal information from anyone under 13, and we do not send marketing to anyone we know to be under 18. If you believe a child has given us personal information, contact us and we will delete it.

10. Cookies

We use a small number of cookies and browser-storage entries, none of them for advertising or tracking across sites. Every one is listed, with its purpose and lifetime, in our Cookie Policy.

11. Changes to this policy

Changes are posted here with a new "last updated" date. For a change that materially reduces your rights or expands what we do with your information, we will tell you by email where we have one, before it takes effect.

12. Contact

Privacy Officer, IBQS Inc. operating as Ticketry
2972 Danforth Avenue, East York, Ontario M4C 1M6
[email protected]
Weekdays 9am–6pm Eastern