Privacy Policy

1. Information We Collect

When you register interest or place a ticket prepurchase, we collect your name, email address, city selection, IP address, device headers, and referral code.

Payment Method Tokenization: For payment commitments, full credit card details are processed directly by our PCI-DSS Level 1 compliant payment partners (Airwallex or Stripe). TurnUpTour never receives or stores raw payment card numbers; we store only tokenized customer consent IDs (`airwallex_consent_*` / `stripe_pm_*`).

2. How We Use Your Data

We process data to aggregate city demand, execute deferred card collection upon city confirmation, issue platform tickets, administer loyalty points, and prevent fraud.

SMS Updates: If you explicitly opt in to SMS text alerts, your mobile phone number is used exclusively for operational tour alerts and city confirmation updates. SMS consent is single-tenant and is never sold or shared with third-party marketers. Opt out at any time by replying STOP.

3. Data Sharing & Ticketing Data Consent

With your explicit, affirmative consent (recorded via versioned consent captures in our database), your name and email are shared with the official ticketing platform for confirmed shows in your city so your prepurchase reservation can convert to a ticket.

Fan Right to Withdraw Consent: You may withdraw your ticketing data-sharing consent at any time directly from your Fan Pass control panel.

4. Cookies & Tracking Technology

We use strictly necessary session cookies for user authentication, locale preferences, and security. We do not deploy third-party advertising or cross-site tracking cookies. Non-essential preference cookies require your active opt-in via our cookie banner.

5. California Privacy Rights (CCPA/CPRA)

California residents have the right to request access, correction, or deletion of personal information, and to opt out of any sale or sharing of personal data. TurnUpTour does not sell personal information. To exercise CCPA rights, contact us at the email listed below.

6. GDPR Compliance & EU Representative

For data subjects in the EEA/UK: Processing is based on contract performance (ticket sales), explicit consent (marketing/data sharing), and legitimate interest (anti-abuse). You have the right to access, rectify, erase, or export your personal data.

Our designated EU Data Representative under GDPR Article 27 can be reached at gdpr-rep@turnuptour.com.

7. Privacy Contact Information

For privacy inquiries or data rights requests, email us at privacy@turnuptour.com.