Privacy policy

Last updated: 10 November 2026

This policy explains what data TicketPiazza processes, why, how long we keep it and how to exercise your rights. It applies alongside our terms of use and our cookie policy. The UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR) apply.

1. Who is responsible for your data

The controller is the publisher of the site, Hestia Data (SAS), a company registered in France, 29 boulevard Edgar Quinet, 75014 Paris, France. It has no establishment in the United Kingdom. Contact for data protection matters: contact@ticketpiazza.com.

Representative in the United Kingdom: we have not appointed one. Article 27 UK GDPR does not require it, as our processing of personal data about people in the United Kingdom is occasional and unlikely to result in a risk to them.

2. The data we process

TicketPiazza processes as little data as possible:

• Optional account: browsing the listings and event pages never requires an account. You can create one, with no password, to save events and receive your reminders (see "Your account" below).
• Email address only with an account: the site offers no newsletter. We ask for your email address only if you create an account, to sign you in and to send you the emails the account provides for.
• Browsing data (IP address, browser, page requested, date and time), handled by our host when your browser connects to the site, for security and to keep the site running.
• Cookie-free usage measurement: to find out which features are actually used, the site records interactions such as a filter used, a venue calendar opened, a player opened, a page viewed, the length of the visit and, if you came from an AI assistant, its name. Each record carries a random visit code kept in your browser tab (sessionStorage, not a cookie) and deleted when you close the tab. It cannot recognise you from one visit to the next or follow you across sites. We do not store your IP address with these records and we build no profile.
• Clicks on "Book" links: each click is recorded with the event, the ticket seller, the page you clicked from, the first page of your visit, the website or AI assistant you came from (if any), the type of device, your country (worked out by our host from the connection) and the random visit code. No cookie and no IP address are stored. We pass only the name of the event page to the affiliate network, so that a sale can be credited to us; nothing that identifies you.
• Connector for AI assistants (ChatGPT, Claude…): when an assistant searches our listings through our connector, we count the request anonymously: the tool used, the name of the assistant, the city and language requested, and whether an answer was found. No account, no IP address stored and none of your conversation: we only receive the technical question sent to the listings (for example "what's on tonight in London"), never your identity.
• Messages you send us (questions, corrections, requests about your data): your email address, your name if you give it, the content of the message and any attachments.

We do not process special category data (such as health or political opinions) and we do not ask for it.

Your account (optional)

If you create an account, we process:

• your email address, which serves as your identifier. You sign in with a 6-digit code sent to you by email, valid for 10 minutes. There is no password;
• what you keep in it: the events you save (and those where you mark "I was there"), your alerts (city, genre or category, free or not), your shared lists, and your preferred city and categories;
• your email settings (reminders, alerts) and a record of the reminders already sent, so that we never write to you twice about the same thing;
• your signed-in devices: a label such as "iPhone · Safari", the date of each device's last visit and the date you last signed in. A device stays signed in for at most 180 days after its last visit; you can sign it out from the account page.

What this data is used for. Only to make the account work: finding your saved events on all your devices, building the "For you" row, and sending you the emails the account provides for (a reminder before a saved event, a change of date, a cancellation, tickets available again, tickets going on sale, and once a week the new listings matching your alerts). These emails can be turned off from the account page or through the link in each email. Legal basis: performance of the service you request by creating the account. We do not sell this data and do not use it for advertising.

What others can see. When you share a list, anyone who has its link sees its title and its events, never your address; you can delete it at any time. The subscription link to your calendar is personal: anyone who has it sees your saved events; you can replace it from the account page, and the old one then stops working.

Retention. The account is kept until you delete it. A sign-in request (code) is deleted once it is more than 24 hours old, at the weekly purge: at most 8 days after it was created.

Download or delete. The account page lets you download everything the account keeps ("Download my data") and delete it ("Delete my account"). Deletion is immediate: devices, saved events, alerts, lists and reminders are erased.

3. Why we process it, and our lawful basis

• Providing listings and event pages: our legitimate interests in running the site.
• Security, preventing abuse, technical logs: our legitimate interests in keeping the site safe and available.
• Cookie-free usage measurement and click records: our legitimate interests in knowing which features and pages are useful, improving the site and checking the commissions we are owed. These records are used only in aggregate, for these purposes.
• Audience measurement with cookies: your consent.
• Answering your messages: our legitimate interests in replying to you.

Your right to object. Where we rely on legitimate interests, you have the right to object at any time, on grounds relating to your situation. Write to contact@ticketpiazza.com.

We make no decisions about you based solely on automated processing, and we do not profile visitors.

4. Cookies and similar technologies

The full list is in our cookie policy. In short: the site uses no advertising cookies. Without asking for consent, it uses the cookie that stores your choice in the cookie banner, the cookie that remembers the country you pick on the TicketPiazza home page, the random visit code of our cookie-free usage measurement, and a few display preferences kept in your browser. Audience measurement with cookies only loads after your consent.

5. Embedded third-party content and media

To help you discover artists, some pages embed players from third-party services:

• Spotify and Deezer: we may show a Spotify player and Deezer audio previews of the artist. These players are governed by the privacy policies of Spotify and Deezer.

YouTube (YouTube API Services)

• What we use. TicketPiazza uses the YouTube API Services (YouTube Data API) to find an artist's video or a show's trailer, and the embedded YouTube player to show it on event and artist pages. By watching a YouTube video on our site, you agree to the YouTube Terms of Service. Data processed by YouTube is governed by the Google Privacy Policy.
• What we collect and keep. No personal data goes through the YouTube API: we never ask you to sign in to YouTube or Google, we access no account and keep no authorisation token. We only keep the public identifier of the video shown (and, for some venues, the identifier of their official YouTube channel). Each identifier is checked again with YouTube at least every 30 days: if it is no longer public or embeddable, it is deleted; so is the one of an archived event page.
• Use and sharing. These identifiers are only used to show the video concerned. We do not share or sell any data obtained through the YouTube API and do not use it for advertising or to track you.
• What happens on your device. Before you click, only the video thumbnail loads (an image served by YouTube, i.ytimg.com): your browser then sends Google the technical information of any web request (IP address, browser). When you click to play, the YouTube player loads in privacy-enhanced mode (youtube-nocookie.com) and shares basic usage data with YouTube (IP address, device, playback). YouTube and Google may then set or read cookies and local storage on your device and show third-party content, including advertising, in the player. We set no YouTube-related cookie ourselves; we only count, anonymously, that a player was opened.
• Control and revoke. TicketPiazza does not ask for any access to your Google account. You can review or revoke access granted to apps at any time on Google's security settings page, and delete YouTube cookies from your browser. Any request to delete data about you, sent to contact@ticketpiazza.com, is handled within 7 days.

6. Who receives your data

• Cloudflare, Inc. (United States), our host: it runs the site, its databases and its content delivery network, as our processor. Our databases are located in Western Europe; pages are served from the Cloudflare data centre nearest to you.
• For the messages you send us: Google (the mailbox our messages are forwarded to), Anthropic (an AI assistant that helps us sort messages and prepare or send replies) and Scaleway SAS (France), which sends our replies.
• The providers of embedded media (Google / YouTube, Spotify and Deezer) when a page loads a player (section 5). We send them nothing: your browser connects to them directly.
• Partner ticket sellers and their affiliate networks, only through what they collect on their own websites after you click a "Book" link. Their own privacy policies apply.
• Competent authorities, when the law requires it.

We do not sell your data and we do not share it for advertising.

Transfers outside the United Kingdom

Your data is processed in the European Economic Area, which the United Kingdom recognises as providing adequate protection, and in the United States. For Cloudflare, transfers to the United States rely on its certification under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") and, as a fallback, on the EU standard contractual clauses with the UK International Data Transfer Addendum, included in its data processing terms. For Google, transfers to the United States rely on Google LLC's certification under the same UK Extension. Anthropic handles the messages you send us under its own terms of service: we have switched off any use of them to train its models, and Anthropic keeps them for 30 days. You can ask us for a copy of these safeguards at contact@ticketpiazza.com.

7. How long we keep it

• Technical logs: 12 months at most.
• Your cookie choice: 6 months.
• Cookie-free usage measurement: 90 days, then deleted automatically.
• Records of clicks on "Book" links: kept with no set time limit, as sales statistics. They contain nothing that identifies you: no cookie, no IP address, and the random visit code is erased from your browser when you close the tab.
• Messages you send us: 1 year after our last exchange.
• YouTube video and channel identifiers (no personal data): checked with YouTube at least every 30 days and deleted when no longer available (YouTube section).

8. Your rights

Under UK GDPR, you have the right to:

• access the personal data we hold about you;
• have it corrected if it is wrong;
• have it erased;
• restrict how we use it;
• object to our use of it (see section 3);
• receive it in a portable format, where this applies;
• withdraw your consent at any time, where we rely on it, without affecting what was done before.

To exercise them, write to contact@ticketpiazza.com. We reply within one month. We may ask you for information to confirm your identity.

Complaints

If you are unhappy with how we handle your data, you can complain to us at contact@ticketpiazza.com. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You also have the right to complain to the UK data protection regulator, the Information Commission (formerly the Information Commissioner's Office, ICO).

9. Contact

Questions about this policy: contact@ticketpiazza.com, or see our contact page.