Privacy Policy

Welcome to EyaTickets ! We are a ticketing and registration platform that aims to bring the world together through live experiences. Through our platform, we enable people to create, share and register for events.

When this Privacy Policy uses the term “Organizer”, we mean event creators who use our Services to create events intended for consumers.
When this Privacy Policy uses the term “Consumer ”, we mean people who use our Services to (a) consume information or attend events, or (b) for any other reason.
Organizers, Consumers and third parties who use our Services are all referred to collectively herein as “users”, “you”, “your” or “yours”.

RINTIO SARL is the Data Controller for the personal data collected via EyaTickets. DRWINTECH Rwanda acts as the local representative in Rwanda.

We use your information to:

• Process ticket purchases and issuance (including QR code generation), send event updates and handle refunds where applicable
• Verify entries (check-in) on the day of the event
• produce the aggregated statistics made available to organizers
• provide, maintain and improve ticketing, payment, attendee management and customer support services
• protect the platform, prevent fraud and comply with legal and regulatory obligations
• communicate with you about your account, your transactions and service updates where permitted.

Each processing operation is based either on your consent or on the performance of the ticket sale contract to which you are a party.

When you use the Platform, we may collect several types of personal data about you:

• Identification data: last name, first name, email address, phone number
• Payment data : Mobile Money (e.g. MTN MoMo, Airtel Money) or bank payment details, handled by our payment aggregator partners.

EyaTickets never directly stores your Mobile Money credentials or secret codes.

• Event-related data: information about your events, registrations, ticket purchases, name associated with tickets, purchase history.
• Browsing data: see the “Cookies and trackers” section below.

Some information is required to benefit from our Services (indicated as such at the time of collection). Refusing to provide this information may make certain features inaccessible.

We use cookies and similar technologies to ensure the proper functioning of the Platform, measure audience and, subject to your consent, run targeted communication campaigns (in particular on social media).

We may share your personal data with:

• our technical service providers (hosting, email/SMS delivery, analytics tools) acting as processors and bound by contractual confidentiality obligations;
• our Mobile Money and bank payment aggregator partners, for transaction processing;
• the event Organizers, limited to the information needed for entry verification (name, ticket, QR code);
• the competent authorities, where required by law.

We never sell your personal data to third parties for commercial purposes.

We implement reasonable technical and organizational measures (encryption of sensitive data, access control, environment segregation) to protect your personal data against unauthorized access, loss or disclosure.

As no system is infallible, we invite you to report any suspected vulnerability to legal@eyatickets.com .

Account and purchase data is kept for the duration of the relationship with EyaTickets, then archived for 5 years for accounting and tax purposes in accordance with Rwandan legal obligations, before permanent deletion.

Depending on where you live, you may have the right to:

• access your personal information, update it, correct it or delete it
• object to certain processing activities or request their restriction
• request data portability where applicable
• withdraw your consent where processing is based on it.

In accordance with Law N° 058/2021, any request to exercise these rights is processed within 30 days.

Deletion requests are handled in accordance with our data deletion policy (opens in a new tab) .

Our Services are not intended for persons under 16 years of age. If you are a parent or legal guardian and believe that a minor has provided us with personal data without your consent, contact us at legal@eyatickets.com so that we can delete it.

Your data may be transferred to and processed in countries other than the one where you reside, including with hosting providers located in other countries. Where applicable, we implement appropriate safeguards for cross-border transfers, in particular contractual protections compliant with applicable data protection legislation. As EyaTickets is established in Rwanda, these transfers are also governed in accordance with Article 50 of Law N° 058/2021.

For any questions about this policy or to exercise your rights, contact our data protection officer: legal@eyatickets.com.