GDPR Compliance Statement
How AYATICKETS handles your personal data under EU GDPR regulations
Data Controller Information
Company:
Aya Tickets Limited
Platforms:
AYATICKETS, AyaCart, AyaBookings
Website:
https://ayatickets.com
Data Protection Contact:
support@ayatickets.com
Last Updated: May 13, 2025
What Data We Collect & How We Use It
Personal & Account Data
- Name, email, phone number
- Username, hashed password, user role
- Payment references (third-party gateways)
- Billing/shipping address (AyaCart)
- Booking details (AyaBookings)
- Location details for events/services
- Support tickets, emails, chat logs
Technical & Usage Data
- IP address & geo-location
- Browser, OS, device info
- Time zone & language settings
- Page visits, clicks, interaction logs
- Referral source
Service Delivery
- Service Delivery: ticket sales, orders, bookings, check-in
- Account Administration: login, profile updates, password resets
- Support: inquiries, troubleshooting, updates
Additional Uses
- Marketing: with consent, news & promotions
- Compliance & Security: fraud prevention, legal obligations
Legal Bases for Processing
Contract Performance
tickets, orders, bookings
Legitimate Interests
security, service improvement
Consent
marketing, analytics cookies
Data Sharing & Security
Data Sharing & Transfers
We share data with:
- Payment processors (Mobile Money, card issuers, PayPal, Apple Pay)
- Organizers, merchants & service providers
- Hosting, email, analytics, CRM & support services
Data Security Measures
- HTTPS/SSL encryption
- AES encryption at rest
- Role-based access controls
- Regular audits & incident response
Data Retention & Your GDPR Rights
Data Retention
Data is kept only as long as needed or required by Ghanaian/EEA law, then securely deleted or anonymized.
Your GDPR Rights
To exercise any right: Contact support@ayatickets.com with proof of identity
Cookies & Tracking
Cookies & Tracking
We use cookies to remember preferences, analyze usage, and—with consent—serve personalized ads.
Contact Us
For questions about this GDPR statement or to exercise your rights: