Policies
Privacy policy
This Privacy Policy explains how Ticketkaran collects, uses, stores, and shares personal data. Product by WARX.
Ticketkaran is operated by WARX DIGITAL PRIVATE LIMITED. Product by WARX.
Last updated 21 September 2026 · Effective 21 September 2026
Law we follow
We follow the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable.
Data we collect
| Type | Examples | Why |
|---|---|---|
| Account | Name, phone, email, password hash / OTP logs | Create and secure your account |
| Orders | Event, seats, amount, tax invoice fields | Fulfil the ticket |
| Payment | Last 4 digits, gateway reference, status | We do not store full card numbers. The gateway does |
| Device | IP, browser, app version, approximate location | Security, fraud, language, city events |
| Support | Chat, email, call recordings if we notify you | Complaints and refunds |
| Organiser | Tax ID, bank / payout details, KYC | List events and pay you |
| Marketing (optional) | Campaign clicks, WhatsApp opt-in | Offers you asked for |
We do not collect caste, religion, or health data as a condition of buying a ticket. If an event needs extra fields (age, gender for a stand), we tell you on that form.
How we use data
- Create accounts and send OTPs
- Process orders, invoices, and e-tickets
- Show relevant events (city, language, category)
- Prevent fraud, scalping, and account takeover
- Comply with tax, accounting, and law-enforcement requests
- Send transactional messages (always) and marketing messages (only if you opt in)
- Improve the product with aggregated, de-identified stats
Legal bases we rely on include consent, performance of a contract (your order), and legitimate uses allowed under the DPDP Act such as compliance and security.
Who we share data with
We do not sell your personal data. We share what is needed with:
- Event organisers and venues (buyer name, ticket type, sometimes phone/email for entry lists)
- Payment gateways, banks, and escrow partners
- SMS, email, WhatsApp, and push vendors
- Cloud hosting, analytics, and security vendors (including CDN / bot tools such as Cloudflare)
- Professional advisers and auditors
- Government, courts, police, or regulators when the law requires it
Vendors are contractually required to use data only for our instructions.
Cookies and similar tech
See the Cookie Policy. Essential cookies run the cart and login. Analytics and marketing cookies run only after you choose them, where the law requires a choice.
How long we keep data
- Account: while the account is open, then a limited period for disputes
- Orders and invoices: as required by tax and company law (usually 8 years in India)
- OTP and server logs: a short security window
- Marketing lists: until you unsubscribe
Your rights (DPDP)
You may request access to the personal data we hold, correction of inaccurate data, erasure where the DPDP Act allows, withdrawal of consent for marketing, and nomination of another person to handle your data if you die or are incapacitated (when we enable that flow).
Email [email protected]. We may need to verify it is you. We will answer within the time the DPDP Act requires. You can also complain to the Data Protection Board of India after you first write to us.
Children
Ticketkaran is not aimed at children under 18 buying on their own. A parent or guardian must complete the purchase. We delete accounts we reasonably believe belong to a child using the service alone.
Security
We use HTTPS, access controls, vendor review, and least-privilege admin access. No method is perfect. Tell us at [email protected] if you see a leak.
Cross-border processing
Some vendors may process data on servers outside India. Where the DPDP Act requires it, we will restrict transfer to countries or mechanisms the Government of India allows.
Contact — data
Privacy: [email protected]