Privacy notice

Who we are

Matchpass runs this ticket service. The data controller is responsible for how your information is used.

Controller

Contact details coming soon

Address

Contact details coming soon

Phone

Contact details coming soon

Email

Contact details coming soon

What we collect and why

For buyer phone checks and organizer sign-in, we record phone numbers, network addresses, code hashes and failed attempts to prevent abuse. We delete these records after 30 days. Codes expire after 5 minutes and never appear in the page inbox. With live SMS off, codes are written to the server log for operator recovery.

We use the buyer's phone number to send ticket links and arrange refunds. We use the holder's name or nickname and phone number to link the ticket to its holder. We record your NRC only if you enter at the gate without a claimed ticket.

With your consent, we take one holder photo so the gate steward can check it is you. We check photo quality and whether you complete the live camera steps. We process up to three extra camera frames only for the liveness check. These extra frames are not kept. Authorized organizers and supervisors can review photo or entry problems.

Your phone creates a device key to sign your ticket code. The private key stays on your phone. We store the public key to check the signature.

We keep payment references, amounts and status from the mobile money provider. We never see your mobile money PIN or hold a balance for you. If you choose parking, we also keep your car plate to check parking entry.

We keep loyalty points activity linked to phone numbers. Points earned for entry and surveys use the ticket phone. Points used for checkout discounts use the payer phone.

We keep your survey answers to help the organizer improve matches. Answers are stored separately from your ticket. We record whether your ticket has submitted a survey.

What we do not do

We do not create or store face templates, match faces, sell your data or build advertising profiles.

How long we keep it

We delete your photo and thumbnail when the match ends or is cancelled. We also start deletion as soon as your ticket is refunded, revoked by the buyer or reissued. A photo blocked by a supervisor stays as evidence until the match ends. Failed file deletions for recorded claims are retried. If a claim fails and its photo cleanup also fails, an orphan photo file can remain until manual cleanup. Expired photos are no longer served, and steward phones clear saved photos when the scanner checks that the match has ended, or next syncs a revoked ticket.

On our server, we clear NRCs 30 days after the recorded match end or cancellation. Cleanup runs regularly, so a failed cleanup is retried. A steward phone clears the NRC after upload. If a record has not uploaded, the phone clears its NRC when the scanner is next opened or synced after 32 days from the scan.

Payment and order records are kept for accounting and legal duties. The service does not currently delete these automatically. Holder details and ticket history also have no automatic deletion period. Contact us to ask about deletion.

Phone numbers are masked in application SMS logs and SMS delivery records. Delivery history keeps message text so ticket messages can be checked and resent using the recipient on the ticket. The sending queue temporarily holds the full recipient and message for match notices. When a notice is claimed for delivery, its queue record is masked and its message is cleared. Unsent queue records are removed 30 days after the recorded or scheduled match end, or after creation when no order is linked.

Who sees your information

The match organizer can see holder names, sections, ticket and admission details, masked phone numbers and NRC entry records. Authorized organizer staff can review flagged photos. Gate stewards see your name, photo, section, ticket status and public device key during the match. Parking staff also see parking details and car plates. Supervisors can review entry incidents and photos. When you use a ticket at a kiosk, the vendor sees your name, photo, section, masked phone number and available coupons. A sponsor who sends a guest ticket can see its number, delivery phone and ticket state.

Your ticket link shows your photo only on the phone that claimed it. Keep your ticket link safe.

The payment provider receives the paying phone number, amount, currency and payment reference or description. The SMS provider receives the recipient phone number and message, including a ticket link or sign-in code. When live SMS is off for a demo, messages are logged instead.

Matchpass and its hosting and storage services process this information to run the service. We may also disclose information when the law requires it.

Your rights

Under Zambia's Data Protection Act 2021, you can ask to access, correct or delete your information, or object to its use. Some records may need to stay for legal duties. Use the contact details above to make a request. You can also complain to the Data Protection Commissioner.

You can withdraw photo consent at any time. Use the contact details above to ask. We will delete your photo. Gate code and NRC entry is only available for unclaimed tickets; if you have already claimed, contact us about entry arrangements.

Changes to this notice

We update this notice when the service changes. Check the date below for the latest version.