Privacy Policy

Welcome to EVENTSMANDU.

EVENTSMANDU is an online event-ticketing and event-management platform that allows customers to discover events, purchase tickets, receive electronic tickets, and communicate with event organisers.

We are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, create an account, purchase tickets, register as an organiser or use our services.

We process personal information in accordance with applicable data-protection laws, including the UK GDPR, the UK Data Protection Act 2018 and relevant privacy laws in other countries where our services operate.

Depending on how you use EVENTSMANDU, we may collect:

A. Personal and account information

• Full name
• Email address
• Mobile phone number
• Account username or identifier
• Securely stored password hash
• Country and preferred currency
• Account preferences

B. Ticket and booking information

• Event details
• Ticket category and quantity
• Attendee names and contact information
• Booking references
• Digital ticket and QR code identifiers
• Booking and cancellation history
• Entry or check-in status

C. Payment information

• Transaction amount and currency
• Payment status
• Payment reference numbers
• Refund and chargeback details
• Relevant payment-provider identifiers

Payments may be processed through Stripe, Khalti or other supported providers. We do not intend to store full payment-card numbers or card security codes on EVENTSMANDU servers. Card information is handled by authorised payment providers.

D. Organiser information

• Organiser or company name
• Business registration information
• Contact details
• Event and venue details
• Stripe connection information
• Bank account details required for approved payouts
• Sales, commission and payout history
• Identity or business-verification information where required

E. Technical information

• IP address
• Browser and device information
• Operating system
• Website activity and security logs
• Cookie preferences
• Approximate location derived from technical information, where applicable

F. Communication information

• Customer support enquiries
• Messages sent through the platform
• Event-related notifications
• Communication preferences
• Feedback and complaints

We use personal information to:

• Create and manage customer and organiser accounts.
• Process ticket purchases.
• Generate and deliver digital tickets.
• Validate event tickets and prevent duplicate entry.
• Manage ticket refunds and cancellations.
• Provide organisers with event-management tools.
• Process payments, commissions and authorised payouts.
• Detect and prevent fraud.
• Provide customer support.
• Send essential booking and event notifications.
• Improve website performance, functionality and security.
• Comply with applicable legal, financial and tax obligations.
• Send promotional communications where permitted by applicable law.

Where the UK GDPR applies, we rely on appropriate lawful bases depending on the processing activity.

Our legitimate interests include maintaining a secure platform, investigating misuse, improving our services and protecting users against fraud. We consider individuals' rights and interests when relying on this basis.

We may share relevant personal information with:

• Event organisers responsible for the events you book.
• Payment providers such as Stripe and Khalti.
• Email and notification delivery providers.
• Website hosting and cloud infrastructure providers.
• QR ticket validation and event check-in services.
• Customer support and technical service providers.
• Banks and authorised payout providers.
• Regulators, law enforcement and other authorities where legally required.

Only information reasonably necessary for the relevant purpose should be shared.

Event organisers may be independent data controllers for information they use to operate their events. Where applicable, they are responsible for explaining their own use of attendee information.

We do not sell customers' personal information to advertisers or data brokers.

EVENTSMANDU may send essential communications, including:

• Booking confirmations
• Ticket delivery emails
• Event reminders
• Event cancellation or postponement notices
• Refund updates
• Account security notifications
• Organiser payout updates

These essential service messages are separate from marketing communications.

Promotional emails, SMS messages and push notifications will be sent only where permitted by applicable law. Users may manage their marketing preferences and unsubscribe from optional promotional communications.

Unsubscribing from marketing does not prevent necessary booking, security or transaction messages.

Our website may use cookies or similar technologies for:

• Login authentication
• Website security
• Session management
• Ticket checkout functionality
• Remembering user preferences
• Website analytics
• Advertising and promotional measurement, where implemented

Where legally required, optional cookies will only be activated after appropriate user consent. Users will be able to manage relevant cookie preferences through the website's cookie controls.

Further information should be available in our separate Cookie Policy when published.

EVENTSMANDU uses appropriate technical and organisational measures designed to protect personal information. Measures may include:

• Encrypted connections using HTTPS
• Secure password hashing
• Access controls
• Role-based administration permissions
• Protected payment integrations
• Security monitoring
• Appropriate system backups
• Restricted access to sensitive organiser and bank details

No online system can guarantee absolute security. We regularly assess the security risks associated with our services.

We retain personal information only for as long as reasonably necessary for the relevant purposes. Retention periods depend on factors including:

• Whether an account remains active
• Whether an event or booking is ongoing
• Contractual obligations
• Applicable tax and accounting requirements
• Dispute and chargeback periods
• Fraud-prevention requirements
• Legal retention obligations

When information is no longer required, we will delete, anonymise or otherwise securely dispose of it in accordance with our retention procedures.

We may retain certain transaction records after account closure where necessary to comply with legal obligations.

EVENTSMANDU may operate across different countries, including the United Kingdom and Nepal. Some service providers or authorised organisers may process personal information outside the country where a customer lives.

Where UK data-protection law requires safeguards for international transfers, we will use an applicable lawful transfer mechanism, such as an adequacy arrangement or appropriate contractual safeguards.

Users may contact us for further information about applicable international transfer arrangements.

Depending on applicable law and the circumstances, you may have the right to:

• Request access to your personal information.
• Correct inaccurate information.
• Request deletion of personal information.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Challenge certain solely automated decisions that have legal or similarly significant effects.

These rights may be subject to legal conditions or exceptions. To exercise your rights, contact admin@eventsmandu.com. We may request reasonable identity verification before responding to requests involving sensitive account information.

UK users may also complain to the Information Commissioner's Office: https://ico.org.uk

EVENTSMANDU may advertise family events and events attended by children.

Where a child's personal information is required for ticketing or attendance, we will process it only as necessary and in accordance with applicable law.

We will not knowingly use children's personal information for inappropriate marketing or profiling. Additional parental or guardian consent will be requested where legally required.

Event listings may contain venue addresses, postcodes and map locations.

We may use Google Maps or related location services to help customers view venues and obtain directions. Where device location is requested, users will be given an appropriate permission choice.

Location information will not be used beyond the purposes disclosed to users without an appropriate lawful basis. Google Maps services may process information under Google's applicable privacy terms.

EVENTSMANDU may contain links to:

• Event organiser websites
• Venue websites
• Payment services
• Google Maps
• Social media platforms
• External customer support services

We are not responsible for the privacy practices of independent third-party websites. Users should review the privacy policies of external services before providing information directly to them.

We may use automated systems for activities such as ticket generation, payment-status updates, fraud alerts and duplicate-ticket detection.

If we introduce solely automated decision-making that has legal or similarly significant effects on individuals, we will provide the additional information and safeguards required by applicable law.

We may update this Privacy Policy to reflect changes to our services, technology, business operations or legal obligations. The latest version will be published on our website with an updated date.

Where required, we will notify users of significant changes or obtain additional consent.

For privacy questions, data requests or complaints, please contact:

• Legal company name: EVENTSMANDU LIMITED
• Website: https://eventsmandu.com
• Email: admin@eventsmandu.com
• Registered address: 114 Peckenham Road, Basingstoke, RG21 8XX

See also our Terms and Conditions and Contact page for general support.