Privacy Policy

1. Who we are

Offbeat ("we", "us", "our") operates an event ticketing platform in Kenya. We act as a technology provider for organisers and as a facilitator when you purchase tickets through our checkout.

For privacy questions, use the contact details at the end of this policy or in the site footer.

2. Information we collect

Depending on how you use the Services, we may collect:

• Account data: name, email address, phone number, password hash, and role (buyer, organiser, or admin).
• Checkout data: ticket selections, order totals, payment references, M-Pesa or Pesapal transaction IDs, and Lipa Pole Pole instalment status.
• Guest checkout: if you buy without an account, we collect the name and email you provide so we can deliver tickets and support your order.
• Organiser data: event listings, payout details, and check-in activity related to events you manage.
• Technical data: IP address, browser type, device information, pages viewed, and cookies or similar technologies needed to keep you signed in and secure the platform.
• Communications: messages you send us and emails we send about orders, tickets, or account activity.

3. How we use your information

We use personal data to:

• Process ticket purchases and deliver digital tickets by email or to your account.
• Operate Lipa Pole Pole instalment plans and show payment status.
• Authenticate users, prevent fraud, and protect platform security.
• Provide customer support and respond to enquiries.
• Enable organisers to manage events, sales, check-in, and payouts.
• Improve the Services, fix errors, and comply with legal obligations.
• Send service-related notices (for example order confirmations). Marketing messages are sent only where permitted and with appropriate consent.

4. Legal bases

We process personal data where necessary to perform a contract with you (such as completing a ticket purchase), to pursue our legitimate interests in operating a secure ticketing platform, to comply with law, or with your consent where required (for example optional marketing).

5. Sharing with third parties

We do not sell your personal data. We share information only as needed to run the Services, including with:

• Event organisers for events you buy or attend (for example name, email, and ticket details for fulfilment and entry).
• Payment partners such as Safaricom M-Pesa, Pesapal, and card processors to authorise and settle payments.
• Infrastructure providers that host our application, send email, store images, or provide analytics strictly required for operations.
• Authorities when required by law, court order, or to protect rights, safety, and security.

Third parties are expected to handle data under contractual safeguards and only for the purposes we specify.

6. Data retention

We keep personal data for as long as needed to provide the Services, meet legal and accounting requirements, resolve disputes, and enforce our agreements. Order and payment records may be retained for several years where required for tax, audit, or fraud prevention.

When data is no longer needed, we delete or anonymise it using reasonable technical measures.

7. Security

We use administrative, technical, and organisational measures appropriate to the sensitivity of the data, including encrypted connections (HTTPS), access controls, and secure password hashing. No online system is completely secure; please use a strong password and keep login details confidential.

8. Your rights

Subject to applicable Kenyan law, you may have the right to request access to, correction of, or deletion of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is consent-based.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

9. Cookies and similar technologies

We use essential cookies and session storage to maintain login state, protect against cross-site request forgery, and remember preferences required for checkout. You can control non-essential cookies through your browser settings, though some features may not work correctly if essential cookies are disabled.

10. Children

The Services are not directed at children under 18. We do not knowingly collect personal data from children without appropriate parental or guardian consent. Contact us if you believe we have collected such data in error.

11. International transfers

Your data may be processed in Kenya and, where we use cloud or payment providers, in other countries with adequate safeguards or contractual protections as required by applicable law.

12. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Continued use of the Services after an update means you accept the revised policy.

13. Contact

Questions about this Privacy Policy:

• Email: hello@offbeat.co.ke
• Phone: +254112362021