Privacy Policy

Last reviewed: [DATE]. [LEGAL ENTITY NAME], [REGISTERED ADDRESS].

This policy explains what personal information Kilikood collects, why, and what you can do about it. It is written to meet our obligations under PIPEDA and applicable provincial privacy legislation.

What we collect

When you buy a ticket, whether or not you have an account:

• your name and email address;
• your phone number and city, where the organizer requires them;
• the name of each attendee on the order, and their email or phone where the organizer requires per-attendee contact details;
• answers to any custom questions the organizer has added to their checkout;
• whether you consented to marketing email.

When you pay, your card details go directly to our payment processor, Stripe. We never receive or store your full card number. We retain the payment identifier, the amount, and the last four digits for reconciliation and refunds.

Automatically, we record the IP address associated with sensitive actions (checkout, refunds, administrative changes) for fraud prevention and audit purposes.

Why we use it

• To sell you a ticket, issue it, and admit you to the event — this is necessary to perform our contract with you.
• To send transactional email: order confirmations, refund notices, event reminders. These are not marketing and you cannot opt out of them while you hold a ticket.
• To prevent fraud and abuse.
• To send marketing email, only where you have given express consent. See the CASL Notice.

Who we share it with

• The organizer of the event you bought a ticket to. They receive the attendee details for their event, including names and any contact details and custom answers their checkout collected. They use this to run the event and are independently responsible for how they handle it.
• Stripe, to process payments and organizer payouts.
• SendGrid, to deliver email.
• Supabase, which hosts our database.
• Law enforcement or regulators where we are legally required to.

We do not sell personal information.

Where it is stored

Our infrastructure providers may process data outside Canada, including in the United States. Information stored outside Canada may be accessible to foreign courts and law enforcement under the laws of that jurisdiction.

How long we keep it

Order and ticket records are retained for [RETENTION PERIOD] to meet tax, accounting and dispute-resolution obligations. Marketing consent records are retained for as long as consent is current and for [RETENTION PERIOD] after it is withdrawn, as CASL requires us to evidence consent.

Your rights

You may ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, or delete it where we are not required to retain it. Write to [PRIVACY CONTACT EMAIL].

If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner of Canada.

Cookies

We use only the cookies needed to keep you signed in and to complete a checkout. We do not use advertising or cross-site tracking cookies.