Privacy Policy

This Privacy Policy explains how Halo Media, Inc., with a registered address at 127 W 26th St, Rm 1002, New York, NY 10001 ("TicketFlip," "Halo Media," "we," "us," "our"), collects, uses, shares, and protects personal data in connection with the TicketFlip application (the "App"), a Shopify app that merchants install to create, sell, and manage tickets for events on their own Shopify stores.

This Policy applies to two groups of people: (i) merchants who install and use the App ("Merchants," "you"), and (ii) individuals who purchase tickets through a Merchant's Shopify store using the App ("Buyers," "you"). Where the two are treated differently, this Policy says so explicitly.

1. Who We Are and Our Role

TicketFlip is a technology provider. Merchants use the App to run their own event and ticketing business on their own Shopify store. In relation to a Merchant's use of the App, TicketFlip generally acts as a data processor / service provider, processing Buyer data on the Merchant's behalf and under the Merchant's instructions. In relation to information TicketFlip collects about Merchants themselves (account, billing, and usage information), TicketFlip acts as a data controller.

2. Information We Collect

2.1 Information about Merchants

• Account and store information: Shopify store name and URL, contact name, email address, and phone number.
• Billing information: information needed to charge the Platform Fee, processed through Shopify's app billing system (TicketFlip does not directly store full payment card details).
• Usage information: how the Merchant configures and uses the App (events created, ticket types, settings), support communications, and technical logs (e.g., IP address, device/browser information, timestamps) generated while using the App.

2.2 Information about Buyers

• Order and contact information: name, email address, and any other information collected by the Merchant's Shopify checkout at the time of purchase.
• Event registration information: answers to custom attendee questions, information submitted through liability waivers, and other registration details the Merchant configures for a given Event, including preference information (e.g., chef, venue, dining, seating, or itinerary preferences) and sensitive information such as dietary restrictions, allergies, or accessibility needs where a Merchant collects it for an Event.
• Ticket and check-in information: the QR code issued for a ticket, and records of when and where it was scanned for Event admission.
• Technical information: information automatically generated when a Buyer interacts with the checkout or with a ticket link/QR code (e.g., IP address, device/browser information, timestamps).

TicketFlip does not itself request or process full payment card numbers; payment is handled by Shopify's checkout and its payment processors.

3. How We Use Information

• To operate the App: create and manage events and ticket types, process ticket sales through Shopify's checkout, issue and deliver QR-code tickets, manage attendee registration and waivers, and support door check-in/scanning.
• To manage the Merchant relationship: provision and maintain Merchant accounts, calculate and collect the Platform Fee, provide customer support, and communicate service updates.
• To maintain and improve the App: troubleshoot issues, monitor performance and security, and develop new features.
• To comply with legal obligations and enforce our Terms of Service and these policies, including preventing fraud and misuse.

4. How We Share Information

• With Shopify: the App runs on Shopify's platform, and checkout, payment processing, and billing are handled through Shopify and its payment partners, subject to Shopify's own privacy practices.
• With the Merchant: a Buyer's order, registration, and check-in information is shared with the Merchant that sold the ticket, since the Merchant is the seller of record and needs this information to run its Event and handle customer service.
• With service providers: vendors that help us operate the App (e.g., hosting, email delivery for QR-code tickets, analytics, customer support tools), under confidentiality and data protection obligations.
• For legal reasons: where required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of TicketFlip, our users, or others.
• In a business transaction: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

TicketFlip does not sell personal data to third parties for their own independent marketing purposes.

5. Data Retention

We retain Merchant and Buyer information for as long as reasonably necessary to provide the App, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and applicable legal requirements.

6. Data Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location and applicable law, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Buyers should generally direct requests about their order or registration data to the Merchant they purchased the ticket from, since the Merchant is the data controller for that transaction; TicketFlip will support Merchants in responding to such requests where TicketFlip acts as a processor. Merchants and Buyers can also contact TicketFlip directly using the details in Section 11.

8. Cookies and Similar Technologies

The App and the Merchant's Shopify store may use cookies and similar technologies (including those provided by Shopify) to operate the checkout, remember preferences, and understand usage.

9. Children's Privacy

The App is not directed to children, and TicketFlip does not knowingly collect personal data from children below the age required by applicable law without appropriate consent. Merchants are responsible for ensuring their Events and ticket sales comply with any applicable age-related requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the App's admin panel, by email, or by other reasonable means, and will take effect on the date indicated. Continued use of the App after that date constitutes acceptance of the updated Policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at [email protected]. Buyers with questions about a specific Event, ticket, or order should contact the Merchant that sold them the ticket.

12. Governing Law

This Policy will be interpreted in accordance with the laws of the State of New Jersey, USA, without prejudice to any non-waivable data protection rights you may have under the law of your place of residence.