Privacy
Draft privacy notice for My Spot — to be reviewed by counsel before launch.
What we collect
Your mobile number (to sign you in and send tickets), your name (printed on tickets), an optional email for receipts, and your bookings. Payments are processed by PayHere or Stripe — we never see or store card numbers.
Why we use it
To issue and deliver tickets, let organisers admit you at the door, prevent fraud and touting, and handle refunds, transfers and resales you ask for.
WhatsApp and SMS
We message you about bookings you make. WhatsApp updates are only sent if you opt in, and you can turn them off any time in your account.
Who we share it with
The organiser of an event you book sees the name on each ticket, your order reference and contact number so they can admit you and contact you about changes. Payment providers receive what they need to process your payment. We don’t sell your data.
How long we keep it
Order records are kept for 7 years for tax and audit purposes. You can ask us to delete your account; tickets for upcoming events must be used, transferred or refunded first.
Your rights
Under Sri Lanka’s Personal Data Protection Act No. 9 of 2022 you can ask for a copy of your data, correct it, withdraw consent, or ask us to delete it. Contact privacy@myspot.example.