Privacy Policy

1. Who we are

Jacombs Ticketing & Events, a business registered in England and Wales under company number 12571887, of One Mayfair Place, London, W1J 8AJ, is the data controller responsible for your personal data. We refer to it as "Jacombs Tickets" throughout this policy.

• Registered company: Jacombs Ticketing & Events (Registered Company Number 12571887)
• Address: One Mayfair Place, London, W1J 8AJ, United Kingdom
• Contact for privacy matters: helpdesk@jacombstickets.com

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. The personal data we collect

We collect and process the following categories of personal data:

Account information — when you create an account: your name, email address, and a securely stored (hashed) password.

Order and transaction information — when you buy tickets: the matches and tickets you purchase, the seats/blocks selected, prices paid, order references, and your purchase history.

Payment information — when you make a payment, your card details are collected and processed directly by our third-party payment provider. We do not store your full card details on our systems.

Match alerts and marketing preferences — if you sign up for match alerts: your email address and your selected club(s) or preferences.

Communications — records of any correspondence when you contact our support team.

Technical and usage information — your IP address, device and browser type, and information about how you use our website, collected via cookies and similar technologies (see section 8).

3. How and why we use your data

We use your personal data for the following purposes:

• To create and manage your account and let you sign in securely.
• To process and fulfil your ticket orders, including making your tickets available to download from your account.
• To send you service and transactional emails (for example, email verification, order confirmations, and password resets).
• To send you match alerts and, where you have opted in, marketing communications.
• To provide customer support and respond to your enquiries.
• To detect, prevent and address fraud, misuse, and unauthorised ticket resale.
• To operate, maintain, secure and improve our website and services.
• To comply with our legal and regulatory obligations.

4. Our lawful bases for processing

Under the UK GDPR we rely on the following lawful bases:

• Performance of a contract — to provide your account, process your orders, and deliver the tickets you have purchased.
• Legitimate interests — to secure our platform, prevent fraud and unauthorised resale, and improve our services, in a way that does not override your rights.
• Consent — for optional marketing communications and any non-essential cookies. You can withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with the law.

5. Who we share your data with

We do not sell your personal data. We share it only with the following categories of recipient, and only as necessary:

• Payment provider — our payment provider processes your card payments securely.
• Hosting and infrastructure — Vercel Inc. hosts our website.
• Database and authentication — Supabase provides our secure database and account authentication services.
• Email delivery — Resend delivers our transactional and service emails.
• Professional advisers and authorities — where required by law, or to protect our rights, we may share data with legal advisers, regulators, or law enforcement.

Each of these providers processes your data on our behalf under appropriate contractual safeguards.

6. International data transfers

Some of our service providers are based outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure appropriate safeguards are in place — such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or Standard Contractual Clauses — so your data receives an equivalent level of protection.

7. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy:

• Account data — for as long as your account is active, and for a reasonable period afterwards.
• Order and transaction records — for as long as required to meet our legal, accounting and tax obligations.
• Marketing data — until you unsubscribe or withdraw consent.

When your data is no longer needed, we securely delete or anonymise it.

8. Cookies

We use cookies and similar technologies to operate our website, keep you signed in, remember your preferences, and understand how the site is used. Essential cookies are necessary for the site to function; non-essential cookies are used only with your consent.

9. Data security

We take the security of your data seriously. We use appropriate technical and organisational measures — including encryption in transit, hashed passwords, access controls, and database-level security rules — to protect your personal data against unauthorised access, loss or misuse. Payment card details are handled by our payment provider and are not stored on our systems.

10. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), in certain circumstances.
• Restrict or object to our processing of your data.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at helpdesk@jacombstickets.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concerns first, so please consider contacting us before you do so.

11. Children

Our services are intended for adults. You must be 18 or over to create an account and purchase tickets. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you.

13. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Jacombs Ticketing & Events
One Mayfair Place
London
W1J 8AJ
Registered Company Number 12571887
Email: helpdesk@jacombstickets.com