Privacy policy
Last updated: 15 July 2026
We process personal data to provide, secure, and improve Ticket Window. Payment card details are handled by payment providers and are not stored directly by Ticket Window.
1. Data we collect
- Account data, including name, email address, and phone number.
- Transaction and booking records needed to provide the service.
- Usage data, including visits and interactions with the platform.
- Device data, including browser type, operating system, and IP address.
2. How we use data
- Provide and improve platform services.
- Process bookings and payments.
- Send booking confirmations and important account notices.
- Support accounts and respond to requests.
- Analyze platform use and protect service security.
3. Data sharing
We do not sell personal data. Data is shared only with the relevant merchant, service providers needed to operate the platform, when legally required, or with user consent.
4. Security
- Encrypted connections using TLS.
- Access controls and security monitoring.
- Operational backups and recovery procedures.
- Payment processing through approved payment providers.
5. Your rights
- Request access to your personal data.
- Correct inaccurate account information.
- Request deletion where applicable.
- Opt out of marketing communications.
6. Cookies
We use cookies and similar technologies for essential sessions, preferences, security, and service improvement. Browser controls can be used to manage optional cookies.
Account deletion and invoice retention
This account deletion policy applies from 29 October 2026 and supplements the privacy information on this site.
When deletion is completed, sign-in access is disabled and existing sessions and notification device registrations are revoked or removed. Personal profile and contact details, including your name, email address, phone number and profile image, are deleted or irreversibly anonymized. Retained invoice data is handled separately below.
We complete account deletion within 10 business days of receiving your request. Account ownership must be verified before deletion is carried out.
Business days are Sunday, Monday, Tuesday, Wednesday, Thursday, excluding announced public holidays, in Asia/Riyadh time. The day we receive the request is not counted.
Invoices and the information required to substantiate them are retained for at least 10 years from the invoice issue date for accounting and legal obligations, with restricted access. A specific legal obligation or documented legal hold may require longer retention. This does not keep your personal account active or permit sign-in.
Deleting a merchant user’s personal account does not by itself close the merchant business or delete other staff or customer accounts. For a business owner, ownership transfer or business closure requires a separate authorized process.
Submitting a request does not mean the account has already been deleted. We confirm completion only after processing and explain any data that must be retained under the policy or a specific legal requirement.