Privacy Policy

tikk.at is operated by Ahura Technosoft LLP, a limited liability partnership registered under the Limited Liability Partnership Act, 2008, at D 2003, Sun Central Place, Opposite Iscon Platinum, Bopal Cross Roads, Bopal, Ahmedabad, Gujarat 380058, India (“tikk.at”, “we”, “us”, “our”).

For the personal data described here we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

tikk.at is a ticketing platform. Events are created and run by independent event organisers.

Where we share your data with an organiser, that organiser becomes a separate Data Fiduciary for its own use of it, with its own obligations under the DPDP Act. We contractually restrict what they may do with it, but we do not control them. The organiser’s identity is shown on every event page.

When you buy a ticket

Automatically

If you opt in

If you complete your profile (optional)

We do not collect biometric data, facial images, government ID numbers, health data, caste, religion, or full card details. Profile fields (date of birth, gender, anniversary date) are voluntary and collected only if you choose to complete your profile. Card data never touches our servers - it stays with Razorpay.

You must be 18 or over to buy a ticket on tikk.at.

If you check out without registering, we create an account for you using your mobile number so you can access your tickets later and log in with an OTP. We tell you this at checkout. You can delete the account at any time from your account settings.

We ask for your consent separately for each purpose. You can buy a ticket without agreeing to marketing - we will never make a purchase conditional on it.

You can withdraw any consent at any time from Account → Privacy, or by writing to us. Withdrawing is as easy as giving it. Withdrawal applies going forward, not retrospectively, and may mean we can no longer provide part of the service - for example, withdrawing consent to WhatsApp messaging will stop ticket delivery to WhatsApp.

The event organiser. For events where the organiser has accepted our data protection terms, we share the buyer’s name, mobile number, email and ticket details so they can admit you and contact you about that event. For all other events, the organiser receives only ticket, scan and attendance data without your contact details. Either way the organiser may use it only for that event and may not market to you without your separate consent. Each event page states which applies.

Razorpay Software Private Limited - payment processing, settlement and refunds.

Rara Botbuz Private Limited - WhatsApp Business Platform partner, to deliver your OTP and tickets. WhatsApp is operated by Meta.

Amazon Web Services - hosting, storage and email delivery (Amazon SES), in the AWS Mumbai region.

Google Analytics, Meta Pixel, Microsoft Clarity - product analytics and session recording, only with your consent. Personal details and ticket codes are masked and are not captured in session recordings.

Where you bought through an organiser’s website, that organiser’s own analytics and advertising tools may be notified that a purchase occurred, and of the order value. This happens on the organiser’s website under the organiser’s privacy policy.

Authorities and advisers - where required by law, a valid legal order, or to establish or defend a legal claim.

We do not sell personal data.

Personal data is stored in India, in the AWS Mumbai region. Some of the partners named above process data outside India, including Meta and Microsoft. Where that happens we rely on contractual safeguards and comply with any restrictions notified by the Central Government under section 16 of the DPDP Act.

Where the law requires it, we notify you before deleting data on expiry of these periods. After the period, data is deleted or irreversibly anonymised.

Under the DPDP Act you may:

• Access - get a summary of the personal data we hold about you, and the organisers and processors it has been shared with.
• Correct, complete or update - fix anything inaccurate.
• Erase - have your data deleted, except records we must keep for tax, accounting or legal reasons.
• Withdraw consent - see section 5.
• Nominate - name someone to exercise these rights on your behalf if you die or become incapacitated.
• Grievance redressal - complain to us first, and to the Data Protection Board of India if we don’t resolve it.

Use Account → Privacy, or write to support@tikk.at. We respond within 7 working days.

You must be 18 or over to hold an account or buy a ticket on tikk.at. Events may admit people under 18 - an adult buys on their behalf and is responsible for them.

We do not knowingly process the personal data of a child. Where an event requires attendee names and an attendee is under 18, the purchasing adult confirms they are the parent or lawful guardian and consents on the child’s behalf. We do not knowingly track children’s behaviour and do not serve targeted advertising to children. If we learn that a child holds an account without verifiable parental consent, we will delete it.

TLS in transit. Encryption at rest for personal data. Role-based access with multi-factor authentication for staff. Scanner apps require per-device sign-in and log every scan. Staff access to personal data is logged.

No system is completely secure. We will never ask for your card PIN, CVV, UPI PIN or netbanking password. Do not share your OTP with anyone, including anyone claiming to be from tikk.at.

We will tell you without delay - what happened, what data was affected, what we are doing, and what you should do. We will report to the Data Protection Board of India within the timelines under the DPDP Rules, 2025, and to CERT-In within six hours where the incident is reportable under the CERT-In Directions, 2022.

Necessary cookies keep you logged in and your cart intact - these can’t be switched off. Analytics and advertising cookies run only with your consent, which you can change at any time from the cookie banner or Account → Privacy.

We’ll post updates here with a new version number and date. Material changes are notified by WhatsApp, email or in-app before they take effect.

Grievance Officer and Data Protection contact - Yohaan Tavadia, Designated Partner, Ahura Technosoft LLP · support@tikk.at · 87995 68085 · D 2003, Sun Central Place, Opposite Iscon Platinum, Bopal Cross Roads, Bopal, Ahmedabad, Gujarat 380058 · Monday to Friday, 11:00-18:00 IST.

We acknowledge complaints within 48 hours with a ticket number and resolve them within 30 days.

If you are not satisfied with our response on a data protection matter, you may complain to the Data Protection Board of India.