How Aslan Softicketing Innovations Limited collects, uses, shares, retains and protects personal information across the Softickets experience platform, Softickets Pro, website and related services.
Aslan Softicketing Innovations Limited (ASIL) operates Softickets and Softickets Pro. We use personal information to provide accounts, discover experiences, manage bookings and event access, support organisers, process and reconcile transactions, communicate with users, and protect the platform. We do not sell personal information. You may contact us at softicketing@gmail.com about this Policy or your data rights.
This Privacy Policy explains how Aslan Softicketing Innovations Limited ("ASIL", "we", "us" or "our") collects, uses, stores, shares and protects personal information when you use the Softickets ecosystem, including the Softickets customer application, Softickets Pro organiser application, softicketing.com, related websites, APIs, communications and services.
It applies to customers, attendees, event organisers, organiser representatives and team members, website visitors, and other individuals whose personal information we process in connection with our services.
We handle personal information in accordance with applicable laws of Zambia, including the Data Protection Act No. 3 of 2021. Where the law requires consent, we will seek it separately and in an appropriate manner. This Policy is a privacy notice; it does not replace any separate consent or contractual terms that may apply.
ASIL is the legal corporate entity that owns, develops and operates the Softickets platform. "Softickets" and "Softickets Pro" are product names, applications, brands and services within ASIL's ecosystem; they are not separate legal entities by virtue of those names.
ASIL generally acts as the data controller for personal information processed to operate and administer the platform. Service providers may process information on ASIL's behalf as processors. An event organiser or another third party may act as an independent controller for information it determines how to use for its own event, legal or business purposes. The applicable role depends on the actual processing activity and relationship.
The information we collect depends on how you use the platform and the features you choose to access. It may include:
We may collect messages, enquiries, feedback, complaints, attachments and other information you provide when communicating with ASIL or through platform support channels.
When you use the platform, we may collect IP address, browser and device type, operating system, app and device identifiers, diagnostic and crash information, access logs, pages or screens viewed, searches, feature interactions, timestamps and referring URLs.
If you grant permission, we may use location information to support nearby discovery, maps, directions and relevant recommendations. Location permission is optional. You can manage it through your device settings. We do not describe this as continuous location tracking.
We may receive relevant information from payment providers, authentication, hosting, email or messaging providers, event organisers, verification partners and other service providers where needed to provide the service, confirm transactions, support users or meet legal obligations.
When a ticket is scanned, the platform may record the ticket or booking identifier, scan date and time, validation result and the authorised scanner account or staff member associated with the scan. The scanner feature may use the device camera to read ticket codes when activated by the user. Camera access is not a request to record general video or to perform facial recognition.
We may use personal information to:
Depending on the purpose and applicable law, ASIL may rely on one or more of the following lawful bases:
ASIL does not sell personal information. We may share information only where reasonably necessary for the purposes described in this Policy, including with:
Where necessary to administer an event, an organiser may receive relevant attendee information such as attendee name and contact details, booking and ticket information, payment confirmation status, and check-in or attendance status. The information shared should be limited to what is reasonably required for the event or related lawful purposes. The organiser may have its own privacy responsibilities as an independent controller.
We share transaction and payment information with payment processors and financial service providers, including Lenco or other providers used in the relevant transaction, to process, confirm, reconcile, refund or settle payments.
We may share information with hosting, database, authentication, cloud, analytics, security, communications, email, customer-support and other providers that help us operate the platform. These providers may process information on our instructions or under their own applicable terms depending on their role.
We may disclose information where required or authorised by law, to protect users or the platform, to establish or defend legal claims, or in connection with a merger, restructuring, financing, acquisition or transfer of all or part of our business. Where appropriate and legally permitted, we will provide notice of material changes.
Access to personal information through Softickets Pro or related tools should be limited according to assigned roles and operational responsibilities. Depending on the permissions configured, roles may include OWNER, ADMIN, EVENT_MANAGER, GATE_MANAGER, SCANNER and VIEW_ONLY.
Organisers and their authorised team members must use information only for legitimate event-related and lawful purposes; protect login credentials; respect role permissions; avoid unauthorised disclosure or unrelated marketing; and retain information only as permitted by law and their responsibilities. ASIL may restrict or suspend access where misuse, unauthorised access or a security risk is identified.
Depending on the features you use, the apps or website may request access to:
You can manage permissions through your device or browser settings. Some features may not work fully if the relevant permission is denied.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining records, resolving disputes, preventing fraud, enforcing agreements and meeting legal or regulatory obligations.
Account information may be retained while an account remains active. Booking, ticket, payment, settlement, tax, security, support and dispute records may be retained for the period required by applicable law or reasonably necessary for the relevant purpose. When information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to lawful retention requirements and backup or archival processes.
Specific retention periods may vary by data category, legal obligation, operational need and the status of a dispute or investigation. We do not state fixed periods in this Policy where those periods have not been confirmed for every relevant system and record type.
ASIL takes reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, role-based permissions, secure transmission, authentication controls, logging and monitoring, backups, provider security reviews, testing and staff or contractor access restrictions.
No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we work to maintain and improve safeguards appropriate to the nature of the information and the risks involved.
If ASIL becomes aware of a personal data breach, we will assess and respond to it, including taking reasonable steps to investigate, contain and mitigate the incident, restore affected systems where appropriate, and prevent recurrence. We will notify the relevant regulator and affected individuals where and when required by applicable law.
ASIL is based in Zambia and seeks to store and process personal information in Zambia. Where personal information is required to be transferred or accessed outside Zambia—for example, because a service provider or supporting infrastructure is located abroad—such transfer or access will be undertaken only where permitted by applicable Zambian data protection law, including any required authorisation, conditions or safeguards.
Some service providers may use infrastructure or personnel located outside Zambia. The location of processing may therefore depend on the provider, service configuration and operational requirements. ASIL will take steps required by applicable law in relation to cross-border transfers and will not treat use of the platform, by itself, as blanket consent to an otherwise unauthorised international transfer.
Softickets is not primarily directed at children. We do not knowingly process children's personal information without any parental, guardian or other consent or authorisation required by applicable law. Where an event is intended for or may be attended by minors, the event organiser and purchaser must ensure that the necessary permissions and safeguards are in place.
If you believe a child has provided personal information to ASIL in circumstances where this was not authorised, please contact us so that we can assess and take appropriate action.
Subject to applicable law, you may have rights to request information about the processing of your personal information, access or obtain a copy of it, correct inaccurate or incomplete information, request erasure, object to or restrict certain processing, withdraw consent where processing is based on consent, request data portability where applicable, and exercise rights relating to certain automated decisions.
You may also lodge a complaint with the relevant data protection regulator in Zambia. To exercise a right, contact softicketing@gmail.com or use the contact details in Section 21. We may need to verify your identity and may be unable to fulfil a request where a lawful exception or retention obligation applies.
You may request deletion of your account through an available in-app account deletion feature or by contacting ASIL. We will take reasonable steps to delete or anonymise personal information that is no longer required, subject to applicable law and legitimate retention needs.
We may retain limited records relating to transactions, bookings, payments, settlements, tax, fraud prevention, disputes, security incidents or legal claims where retention is required or permitted by law. Deleting an account does not necessarily cancel an existing booking or remove records that ASIL is legally required to retain.
Our website and digital services may use cookies, local storage, session technologies and similar tools to support essential functionality, remember preferences, maintain sessions, improve performance, protect security and understand service usage.
You can manage or delete cookies through your browser settings. Where required by law, we will seek consent before using non-essential cookies or similar technologies. Disabling certain technologies may affect website or service functionality.
Softickets may contain links to third-party websites, services, payment interfaces, social platforms or event organiser pages. Those third parties may operate under their own privacy policies and terms. ASIL is not responsible for the privacy practices of independent third parties, and we encourage you to review their notices before providing personal information to them.
Softickets, Softickets Pro and the platform's software, source code, systems, designs, branding, documentation and other proprietary materials are owned by ASIL or its licensors. This Policy does not transfer ownership of those rights to users.
Users and organisers retain whatever rights they hold in content they submit, subject to the permissions and licences required to provide, display, distribute and operate the services, and subject to applicable agreements and law. You must have the rights and permissions needed to submit content through the platform.
We may update this Policy to reflect changes in our services, data practices, technology, legal requirements or business operations. We will update the effective date and, where appropriate, provide notice through the website, apps, email or other reasonable communication channels. The updated Policy will apply from its stated effective date.
This Policy is governed by the laws of the Republic of Zambia, subject to any mandatory data protection rights or remedies that apply under relevant law.
For privacy questions, requests, complaints or concerns about this Policy, contact:
Softickets