Legal

Privacy policy

Last updated 15 October 2026

This policy explains what personal data we collect when you use this site and buy tickets, why, and the rights you have over it.

1. Who is responsible

Contact us about privacy at support@fireworktickets.com. We handle personal data in line with the UAE Personal Data Protection Law and, for buyers in the UK and the EU, the UK GDPR and EU GDPR.

2. What we collect and why

  • Order data (name, email address, zone, number of tickets, amount paid, order time): to process your order, send your confirmation and mobile tickets, and handle refunds. Legal basis: performance of a contract.
  • Payment data: processed directly by Stripe. We receive a payment reference and status, never your full card number. Legal basis: performance of a contract.
  • Accounting records: kept to meet our legal obligations.
  • Support emails: to answer your question. Legal basis: legitimate interests.
  • Technical data (IP address, browser, pages visited in server logs): to keep the site secure and working. Legal basis: legitimate interests.
  • Analytics and advertising data (pages visited, the ad you came from, whether you completed a purchase): only if you accept these cookies in our cookie banner. Legal basis: consent, which you can withdraw at any time via “Cookie settings” in the footer.

We do not sell your data and we do not send marketing emails without your consent.

3. Who we share it with

  • Stripe (payment processing)
  • Resend (sending order and ticket emails)
  • Zoho (our support mailbox)
  • Our server hosting provider
  • Google (analytics and ad measurement, only with your consent)

Some of these providers process data outside your country, including in the United States and Asia. Where the law requires it, transfers are protected by appropriate safeguards such as standard contractual clauses.

4. How long we keep it

Order and accounting records are kept for 5 years after the order, as required for accounting purposes. Support emails are deleted after 2 years. Server logs are kept for up to 30 days.

5. Security

Data is sent over encrypted connections (HTTPS), access to order data is limited to staff who need it, and card details never reach our servers.

6. Your rights

You can ask for access to, correction of, or deletion of your data, ask us to restrict or stop processing it, object to processing based on legitimate interests, and ask for a copy in a portable format. Email us and we will respond within one month. You also have the right to complain to the data protection authority in the country where you live.

7. Children

Tickets can only be bought by adults. We do not knowingly collect data from children.

8. Cookies

See our cookie policy.