Privacy Policy

Effective 3 July 2026 · Written to comply with Uganda's Data Protection and Privacy Act, 2019 (PDPO)

Mu Luganda — mu bufunze

KashTicket etwala byonna ku by'ekyama byo nga bikulu. Tukung'aanya erinnya lyo, ennamba yo ey'essimu, ne email (bw'ogiteekamu) okusobola okukuweereza etikiti yo ku WhatsApp ne SMS. Tetutunda bikwata ku ggwe eri abantu abalala. Bw'oba oyagala tusazeemu ebikukwatako, tutuukirire ku ssimu oba email eri wansi w'olupapula luno.

1. What we collect — and why

We collect only what the service needs:

  • Buyers: your name and phone number (required — this is how your ticket reaches you on WhatsApp/SMS and how Mobile Money payment works), and your email only if you choose to give it.
  • Organisers: your name, business name, email, phone number, and the Mobile Money number you register for payouts.
  • Gate staff: a name and phone number added by the organiser, plus a PIN we store only as a secure hash.
  • Fraud prevention: on orders we record the network address and a device identifier, as permitted for fraud detection and chargeback defence.

We never see or store your Mobile Money PIN or full card number — payments are processed by licensed payment providers (e.g. Pesapal, MTN, Airtel).

2. How we use your data

  • Delivering tickets and payment confirmations via WhatsApp, SMS, and email
  • Letting gate staff verify your ticket at the event (name and ticket type only)
  • Paying organisers and processing refunds
  • Detecting fraud and keeping the platform secure
  • Event reminders for events you hold tickets to

We do not sell your personal data, and we do not send you marketing for other events without your consent.

3. Who can see your data

The organiser of an event you buy tickets for can see your name, phone number, and order details — they need this to run their event and handle refunds. Our payment, SMS/WhatsApp, and email providers process the data needed to deliver their service. Beyond that, we disclose personal data only where Ugandan law requires it.

4. Where it lives and how long

Data is stored with our cloud database provider with encryption at rest and in transit (HTTPS everywhere). We keep transaction records for as long as tax and financial regulations require, then delete or anonymise them.

5. Your rights (PDPO)

Under the Data Protection and Privacy Act, 2019, you have the right to:

  • ask what personal data we hold about you and get a copy;
  • have inaccurate data corrected;
  • ask us to delete your data (we will, unless a legal duty requires keeping it);
  • object to processing and complain to the Personal Data Protection Office.

To exercise any of these, contact us using the details below. We respond within the timelines the Act sets.

6. Contact

Data questions or deletion requests: email privacy@kashticket.ug, or call/WhatsApp the support line in the footer. If we update this policy, the new version appears here with a new effective date.