EVENTLINQS
Get Started

LEGAL

Privacy Policy

Last updated 24 July 2026

About This Policy

EventLinqs is operated by Lawal Adams, trading as EventLinqs, ABN 30 837 447 587, PO Box 141, Newcomb VIC 3219, Australia. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we handle your personal information in accordance with them.

This policy explains what personal information we collect, why we collect it, who we give it to, where it goes, how long we keep it, and how you can access, correct or delete it. It applies to everyone who uses EventLinqs, whether you buy a ticket, run an event, or just browse.

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true and whether or not it is recorded in a material form.

What We Collect

We collect only what we need to run a ticketing platform. The categories are:

  • Account information: your name, email address, password (stored only as a cryptographic hash, never in readable form), and any profile details or photo you choose to add.
  • Contact details: phone number and postal address where you provide them, for example when an organiser requires them for entry.
  • Order and ticket information: the events and tickets you buy, order references, quantities, seat allocations, prices, the fees charged, discount codes used, refunds, and scan or admission records at the door.
  • Payment information: we do not collect or store your full card number. Card details are entered directly into Stripe. We receive and store only a payment token, the card brand, the last four digits, the expiry, and the outcome of the transaction.
  • Organiser and business information: if you sell tickets, your business or trading name, ABN, contact details, and payout bank account details. Identity verification documents go directly to Stripe, not to us.
  • Preference and interest information: the events, organisers, artists and communities you follow, saved events, and the alert and notification settings you choose. This is what powers your discovery feed.
  • Communications: emails and messages you send us, support enquiries, refund requests, and our replies.
  • Technical information: IP address, browser and device type, operating system, referring page, pages viewed, and timestamps. Where you allow notifications, a push subscription identifier for your browser or device.
  • Location information: the city or area you select, or that we infer approximately from your IP address, so we can show nearby events. We do not collect precise device location unless you explicitly grant it in your browser.

How We Collect It

We collect personal information directly from you wherever it is reasonable and practicable to do so: when you create an account, buy a ticket, list an event, follow an organiser, contact support, or set your preferences.

We also collect information:

  • Automatically as you use the platform, through server logs, cookies and similar technologies.
  • From Stripe, which tells us the result of a payment, the status of an organiser's identity verification, and details of any dispute.
  • From an organiser, where they upload or import an attendee list for an event they are moving to EventLinqs.
  • From another person, where they buy a ticket on your behalf and give us your name and email so we can issue your ticket.

If we receive personal information about you that we did not ask for and could not lawfully have collected, we destroy or de-identify it where it is lawful and reasonable to do so.

Why We Collect It

We use personal information only for the purposes below, for related purposes you would reasonably expect, and for any purpose you consent to or the law requires.

  • To provide the service: to create your account, process your order, issue and validate tickets, admit you at the door, handle transfers, and process refunds.
  • To communicate about your purchase: confirmations, tickets, reminders, changes to an event, postponements, cancellations and refund notices. These are essential service messages.
  • To run payments and payouts: to charge you, to hold funds, to pay organisers, to calculate fees, and to manage chargebacks and disputes.
  • To personalise discovery: to recommend events, build your feed, and send the alerts you have asked for based on the organisers, artists and communities you follow.
  • To support you: to answer enquiries, investigate problems and resolve complaints.
  • To keep the platform safe: to detect and prevent fraud, scalping, unauthorised access and misuse, and to enforce our Terms of Service.
  • To improve the platform: to understand which features are used and where people get stuck, using aggregated and de-identified data wherever possible.
  • To meet legal obligations: tax and financial records, responding to lawful requests, and complying with consumer, privacy and anti-money-laundering law.

We do not sell your personal information. We do not disclose it to advertisers or data brokers, and we do not allow our service providers to use it for their own purposes.

Sensitive Information

We do not ask for sensitive information as defined in the Privacy Act, such as health information, racial or ethnic origin, religious beliefs, political opinions, or sexual orientation.

Some events on EventLinqs are associated with a community, a faith, or an identity. If you choose to follow one, save an event, or buy a ticket to one, that choice may reveal something personal about you. We treat that information carefully, use it only to run the service and show you relevant events, and never use it to target you on that basis outside the platform or disclose it for advertising.

Where an organiser asks for information at checkout that is genuinely sensitive, for example dietary or accessibility requirements, we collect it only with your consent, pass it to that organiser for that event, and do not use it for anything else.

Sharing With Organisers

When you buy a ticket, the organiser of that event receives the information they need to run it: your name, email address, the tickets and any add-ons you bought, your order reference, any answers you gave to their checkout questions, and your attendance status at the door.

The organiser is a separate entity and a separate handler of your information. Once they receive it, their own privacy obligations apply. We require organisers by contract to comply with Australian privacy law, to use attendee information only for that event and their own legitimate purposes, and never to sell it. We cannot control their conduct beyond that, so if you have a concern about a specific organiser you may contact them directly, and you may also tell us.

Marketing by organisers is separate and opt-in. An organiser only receives you as a marketing contact if you tick the unticked consent box at checkout for that organiser. You can withdraw that consent at any time using the unsubscribe link in their emails, or by contacting us.

Our Service Providers

We use a small number of established providers to operate the platform. Each receives only what it needs, and only to provide services to us.

  • Stripe: our payment processor. Stripe handles card data, processes payments and refunds, verifies organiser identity, and manages disputes. Your card details go directly to Stripe's PCI-DSS certified systems and are never held by us. Stripe handles your information under its own privacy policy at stripe.com/au/privacy.
  • Supabase: our database, file storage and authentication provider. Your account, order and ticket records are stored here.
  • Vercel: our hosting and content delivery provider. Your IP address and request data pass through Vercel as part of serving the site.
  • Resend: our email delivery provider, used to send tickets, confirmations, event notices, and any newsletters you opted into.
  • Upstash: caching and rate limiting, used to keep the platform fast and to block abuse.
  • Sentry: error monitoring. When something breaks, Sentry records the technical details so we can fix it. This can include your IP address and the page you were on.
  • Google Maps: used to display event locations. Loading a map shares your IP address with Google under its own privacy policy.
  • Anthropic: powers the in-platform assistants. Where you use an assistant, the content of your questions is processed to generate a reply. We do not send payment data, and the content is not used to train external models.

We may also disclose personal information to our professional advisers, to a purchaser if the business is sold (on the same privacy terms), and to a law enforcement body, court or regulator where the law requires or authorises it.

Overseas Disclosure

Several of our providers store or process data outside Australia. In practice, the countries most likely to receive your personal information are the United States, and other countries where those providers operate infrastructure, including within the European Union and Singapore.

Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles, including through data protection terms with each provider. Our primary application and database infrastructure is configured to Australian and regional data centres where the provider offers that option.

By using the platform you acknowledge that where information is handled overseas, the overseas recipient may not be subject to the Privacy Act, and you may not be able to seek redress under the Act in that country.

Direct Marketing

We separate essential service messages from marketing. Service messages, such as your ticket, a change to an event, or a refund notice, are not marketing and continue while you hold an account or a ticket.

Marketing emails, including event recommendations and platform news, are sent only where you have opted in. Consistent with the Spam Act 2003 (Cth) and APP 7:

  • Consent boxes are never pre-ticked.
  • Consent to hear from EventLinqs is separate from consent to hear from an organiser.
  • Every marketing message identifies who sent it and carries a working unsubscribe link.
  • Unsubscribing does not require you to log in, and takes effect promptly.

You can change your preferences at any time in your account settings, or by emailing privacy@eventlinqs.com. You may also ask us to tell you where we obtained your information.

Cookies and Analytics

We use cookies and similar technologies to keep you signed in, remember your cart and preferences, keep the platform secure, and understand how it is used. Essential cookies are required for the site to work. You can block or delete cookies in your browser, but parts of the platform, including checkout, may stop working.

Full detail on the specific cookies we set is in our Cookie Policy.

How We Protect It

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Those steps include:

  • Encryption in transit (HTTPS) across the platform, and encryption at rest for stored data.
  • Passwords stored only as salted cryptographic hashes.
  • Row-level database security, so an account can only reach its own records.
  • Two-factor authentication and role-based access controls on administrative functions.
  • Card data confined to Stripe, so a breach of our systems cannot expose card numbers.
  • Audit logging of privileged actions, rate limiting, and continuous error monitoring.
  • Access limited to those who need it to do their job.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@eventlinqs.com.

How Long We Keep It

We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires.

  • Account information: while your account is open, then removed or de-identified after closure, subject to the records below.
  • Transaction and tax records: retained for at least 7 years, as required by Australian taxation law. This applies even if you close your account.
  • Ticket and attendance records: retained while needed to resolve disputes, chargebacks and refunds, then de-identified.
  • Support correspondence: generally up to 3 years.
  • Technical logs: generally up to 12 months, and shorter for routine access logs.

When information is no longer needed and we are not required to keep it, we destroy it or de-identify it.

Access and Correction

Under APP 12 and APP 13 you have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

Much of it you can see and change yourself at any time in your account settings, including your name, contact details, preferences and follows.

To make a formal request, email privacy@eventlinqs.com with the subject line “Access request” or “Correction request”, from the email address on your account, telling us what you need. You can also write to PO Box 141, Newcomb VIC 3219.

  • We acknowledge your request within 5 business days.
  • We respond within 30 days. If a request is complex we will tell you before that deadline and agree a new date with you.
  • We may need to verify your identity first, so that we do not disclose your information to someone else.
  • We do not charge for making a request, or for a correction.
  • If we refuse access or a correction, we will tell you in writing why, and how to complain. Where we refuse a correction you may ask us to attach a statement noting that you consider the information inaccurate.

Deleting Your Data

You can ask us to delete your personal information by emailing privacy@eventlinqs.com with the subject line “Deletion request”. We acknowledge within 5 business days and act within 30 days.

When you ask us to delete your account we remove your profile, preferences, follows and marketing contact details, and we de-identify your remaining activity so it is no longer linked to you.

What we cannot delete straight away. Some information must be retained, and we will tell you which of these applies:

  • Financial and tax records of completed transactions, kept for 7 years by law.
  • Records needed for a live dispute, chargeback, refund or legal claim, until it is resolved.
  • Information an organiser holds independently, which you need to raise with that organiser. We will help you contact them and pass on your request.
  • A record of an unsubscribe request, kept so we do not contact you again by mistake.

Deleting your account does not cancel tickets you already hold. If an event you have a ticket for has not happened yet, tell us and we will make sure you can still get in or be refunded.

Data Breaches

We maintain a data breach response plan. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

We will assess any suspected breach promptly, and within 30 days. Our notification will describe what happened, what information was involved, and the steps we recommend you take.

Children

EventLinqs is not intended for children under 16, and you must be at least 16 to hold an account. We do not knowingly collect personal information from a child under 16 without parental consent.

Children may of course attend events on tickets bought by an adult. Where an organiser requires the name of a child attendee, we collect only what is needed to admit them.

If you believe a child has given us personal information without consent, contact privacy@eventlinqs.com and we will delete it promptly.

Complaints

If you think we have breached the Australian Privacy Principles or mishandled your personal information, please tell us. We take privacy complaints seriously and we would rather fix a problem than have you go elsewhere first.

Step 1: complain to us. Email privacy@eventlinqs.com with the subject line “Privacy complaint”, or write to the Privacy Officer, EventLinqs, PO Box 141, Newcomb VIC 3219. Tell us what happened and what you would like us to do.

  • We acknowledge your complaint within 5 business days.
  • We investigate and give you a written response within 30 days. If we need longer, we will explain why and agree a timeframe with you.
  • Our response will set out our findings, what we are doing about it, and what to do if you are not satisfied.

Step 2: escalate to the OAIC. If you are not satisfied with our response, or we have not responded within 30 days, you can complain to the Office of the Australian Information Commissioner:

The OAIC generally expects you to raise your complaint with us first.

Changes to This Policy

We update this policy as the platform and the law change. The date at the top shows when it was last revised. For material changes affecting how we use your information, we will give you at least 30 days notice by email or through the platform before the change takes effect.

Contact Us

Privacy questions, access, correction, deletion and complaints: privacy@eventlinqs.com

General support: hello@eventlinqs.com

Post: The Privacy Officer, EventLinqs, PO Box 141, Newcomb VIC 3219, Australia.