Last updated: March 25, 2026
Your privacy matters to us. This policy explains what data we collect, why we collect it, and how you can control it.
DashTicket ("we", "us", or "our") is committed to protecting your personal information and being transparent about how we collect, use, and share it. This Privacy Policy applies to all users of the DashTicket platform, website, and associated services. By using DashTicket, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use our Platform. For questions about this policy or to exercise your rights, contact us at hello.dashtickets@gmail.com.
We collect the following categories of information: Personal Data • Full name • Email address (stored in lowercase for consistency) • Phone number (with country code) • Citizenship ID (CID) — 11 digits for Bhutanese users; 6+ characters for international users • Nationality • Date of birth • Physical address • Profile photo (if uploaded) Account & Organisation Data • Organisation name and country (for Organisers) • Role and permission assignments within organisations Transaction Data • Tickets purchased, including event, ticket type, and quantity • Order history, amounts, and currency • Payment method type (DK Bank or Stripe — card numbers are never stored by DashTicket) • Platform fees and processing fees applied • Reservation and payment timestamps Technical Data • IP address • Browser type and version • Device type and operating system • Referrer URL • Pages visited and session duration Activity & Audit Data • Events browsed and viewed • Ticket and profile views • Order and payment events (reserved, paid, failed, cancelled) • Check-in timestamps and gate assignments • This data is used for security, fraud prevention, and account activity logs visible to you in your profile.
We use your information to: (a) Create and manage your account and verify your identity; (b) Process ticket purchases, payments, and refunds; (c) Verify nationality and citizenship as required by event organisers or applicable law; (d) Generate and deliver your digital tickets; (e) Provide customer support and respond to enquiries; (f) Detect, prevent, and investigate fraud, unauthorised access, and security incidents; (g) Comply with legal and regulatory obligations; (h) Improve the Platform's features and user experience through anonymised analytics; (i) Send transactional communications (booking confirmations, receipts, event updates) — these are required for the service and cannot be opted out of; (j) Send marketing communications, only with your explicit consent, and you may opt out at any time.
We process your personal data on the following legal bases: Contract Performance: Processing necessary to provide the Services you have requested — account creation, ticket purchase, payment processing. Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and activity logging, where our interests are not overridden by your rights. Legal Obligation: Processing required to comply with applicable laws, including financial record-keeping and law enforcement requests. Consent: Where we rely on your consent (e.g., for marketing emails), you may withdraw consent at any time by contacting hello.dashtickets@gmail.com or using the unsubscribe link in our emails.
We share your data only as described below. We do not sell or rent your personal information to any third party. Payment Processors • DK Bank receives the transaction data necessary to process local BTN payments (account numbers, amounts). • Stripe receives the transaction data necessary to process international USD payments. Card details are processed and stored by Stripe, not DashTicket. Stripe is certified to PCI DSS Level 1. By using Stripe checkout, you also agree to Stripe's Privacy Policy. Event Organisers • Your name and email address are shared with the Organiser of an event you have purchased tickets for, solely to enable attendee management, entry verification, and event communications. Analytics Providers • We use Vercel Analytics, which collects anonymised usage data (page views, performance metrics). No personally identifiable information is shared with Vercel Analytics. Law Enforcement & Legal Compliance • We may disclose your information to government authorities, law enforcement, or regulators when required by applicable law or legal process, or to protect the rights, property, or safety of DashTicket, our users, or the public. Business Transfers • In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to this Privacy Policy or a substantially equivalent one.
DashTicket is operated from Bhutan. When you use Stripe for international payment processing, your transaction data is processed by Stripe on servers located in the United States and/or the European Union. Stripe maintains appropriate safeguards for international data transfers in compliance with applicable data protection laws. By making an international payment through Stripe, you consent to this cross-border transfer of your transaction data.
We retain your data for as long as necessary to fulfil the purposes set out in this Privacy Policy, subject to the following minimum retention periods: • Account data: Retained for the duration of your active account plus 2 years after account closure. • Transaction records and financial data: Retained for 7 years from the date of transaction to comply with financial and tax regulations. • Activity and audit logs: Retained for 1 year from the date of the activity. • Marketing consent records: Retained until consent is withdrawn. After the applicable retention period, data is securely deleted or anonymised.
You have the following rights regarding your personal data: (a) Access: Request a copy of the personal data we hold about you. (b) Correction: Request correction of inaccurate or incomplete personal data. (c) Deletion: Request deletion of your personal data, subject to our legal obligations to retain certain records. (d) Data Portability: Request a copy of your personal data in a structured, machine-readable format. (e) Withdraw Consent: Withdraw consent for any processing based on consent (e.g., marketing) at any time. (f) Object to Processing: Object to processing based on legitimate interests. To exercise any of these rights, please contact us at hello.dashtickets@gmail.com with your full name, registered email address, and a description of your request. We will respond within 30 days. We may need to verify your identity before processing your request.
The Platform is not intended for children under the age of 16. We do not knowingly collect personal data from anyone under 16 years of age. If we discover that we have inadvertently collected data from a child under 16, we will promptly delete that information. If you are a parent or guardian and believe your child under 16 has provided personal information to DashTicket, please contact us at hello.dashtickets@gmail.com.
We use the following types of cookies and tracking technologies: Essential Cookies: These are strictly necessary for the Platform to function — for example, to maintain your login session and to remember your preferences during checkout. These cannot be disabled. Analytics: We use Vercel Analytics, which collects anonymised page view and performance data to help us improve the Platform. This does not track individual users across sites. We do not use third-party advertising cookies or behavioural tracking technologies on the Platform. We do not share your data with advertising networks.
We implement the following security measures to protect your personal data: • All data transmitted between your browser and our Platform is encrypted via HTTPS (TLS). • Passwords are stored using secure one-way hashing — we cannot read your password. • Payment card data is never transmitted to or stored on DashTicket servers — it is handled entirely by Stripe (PCI DSS Level 1 certified). • Access to user data is restricted to DashTicket staff who require it for their job function. • All significant account and payment actions are logged in an audit trail. • We conduct regular security reviews of our systems and practices. No method of transmission over the internet is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. Please notify us immediately at hello.dashtickets@gmail.com if you suspect any unauthorised access to your account.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the Platform. Your continued use of the Platform after the effective date of any change constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact: DashTicket — Data Privacy Email: hello.dashtickets@gmail.com We aim to respond to all privacy-related enquiries within 30 days.
See also: Terms & Conditions and Refund Policy.