Privacy Policy

Last updated: April 13, 2026

1. Data controller and scope

The operator of Danza Pass ("we", "us", or "our") is the data controller for personal data processed through our website, mobile experiences, and related services (collectively, the "Services"), except where we process personal data strictly on behalf of event organizers as a processor—see Section 5.

This Privacy Policy describes how we collect, use, store, and share personal data when you browse our site, create an account, purchase tickets or passes, communicate with us, or use organizer tools. It should be read together with our Terms & Conditions and our Cookies information.

For privacy requests, use our Contact page or the in-product channels we provide.

2. Categories of personal data we collect

Depending on how you use the Services, we may process:

• Account and identity data: name, email address, phone number, profile details you choose to add, and authentication identifiers managed by our identity provider (we do not store your password in plain text).
• Transaction data: orders, ticket types, quantities, timestamps, and payment status. Card numbers are handled by our payment partners; we typically receive limited tokenized or non-sensitive payment metadata.
• Organizer and event data: business or billing details you submit to sell tickets, event descriptions, imagery, schedules, and staff or promoter contacts you add to the platform.
• Communications: messages you send to us (support, feedback) and service-related emails or in-app notifications.
• Technical and usage data: IP address, device and browser type, language, approximate location derived from IP, cookies and similar identifiers, pages viewed, and interactions with features—see our Cookies page for controls.

3. Purposes and legal bases (EEA/UK framing)

We process personal data for the following purposes, relying on an appropriate legal basis:

• Providing the Services and performing our contract — account setup, ticketing, payments facilitation, fraud prevention, customer support, and platform security.
• Legitimate interests — improving the Services, analytics in aggregated form, marketing similar services where permitted, and protecting users and our systems (balanced against your rights).
• Consent — where required for optional cookies, certain marketing, or location features you can turn off, we rely on your consent, which you may withdraw at any time.
• Legal obligations — tax, accounting, responding to lawful requests, and defending legal claims.

4. Sharing and recipients

We may share personal data with:

• Event organizers — to fulfill tickets, manage entry, and support your attendance at events you choose.
• Service providers — hosting, databases, authentication, email delivery, analytics, customer support tooling, and payment processing, under contracts that require appropriate safeguards.
• Professional advisers and authorities — lawyers, auditors, or regulators when required or permitted by law.

We do not sell your personal information for money. We may use aggregated or de-identified data that cannot reasonably identify you.

5. International transfers

We may process data in the European Economic Area and other countries where our providers operate. When we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, unless an exception applies.

6. Retention

We retain personal data only as long as necessary for the purposes above, including statutory retention for accounting and tax, dispute resolution, and enforcing our agreements. Retention periods may differ by data category; when no longer needed, we delete or anonymize data.

7. Security

We implement technical and organizational measures designed to protect personal data, including access controls, encryption in transit where appropriate, and vendor reviews. No online service is completely secure; please use a strong password and protect your devices.

8. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict or object to certain processing, data portability, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority.

To exercise rights, contact us via Contact. We may need to verify your identity before responding.

9. Cookies and similar technologies

We use cookies and similar technologies as described on our Cookies page. You can adjust browser settings or, where we provide a preference center, your choices there.

10. Children

The Services are not directed at children under the age at which parental consent is required for data processing in your region. If you believe we have collected such data, please contact us and we will take appropriate steps.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Where required by law, we will provide additional notice or seek consent.