Data processing agreement

How TicketSprint handles personal data on behalf of organisers.

Last updated August 2026

Roles

When you use TicketSprint to sell tickets, you are the controller of your attendees’ personal data and TicketSprint, part of EventSprint is your processor. We handle attendee data only to provide the service, on your instructions.

What we process for you

To sell a ticket and admit its holder we process the attendee’s name and email address, their order and ticket details, and the payment metadata our processor returns to us. We never receive card numbers: those go directly to the payment processor and are tokenised.

Our commitments

We process attendee data only for the purposes you instruct; keep it confidential and bind our staff to the same; apply appropriate technical and organisational security measures; assist you with attendee requests and with any breach notification; and delete or return the data when our agreement ends.

Sub-processors

We use sub-processors to provide the service, including our hosting provider and our payment processor.

International transfers

Where a sub-processor operates outside the EEA, the transfer relies on the European Commission’s standard contractual clauses.

Signing

If your organisation needs a countersigned DPA, or its own paper, write to sales@ticketsprint.com.

Status of this page

This page summarises how we handle attendee data on your behalf. It is a summary, not the agreement itself — ask us and we will send you the contract to sign.