Back to Home

Privacy Policy

Last updated: April 1, 2026

1. Information We Collect

We collect the following types of information:

  • Personal Information: Name, email address, and payment information when you make a purchase.
  • Usage Data: Pages visited, device type, browser information, and interaction patterns. IP addresses are hashed using SHA-256 for privacy.
  • Cookies: We use essential cookies for site functionality and analytics cookies to improve your experience.

2. How We Use Your Information

  • Process and fulfill ticket purchases.
  • Send order confirmations and ticket delivery notifications.
  • Improve our platform and user experience through anonymized analytics.
  • Detect and prevent fraud or unauthorized activity.
  • Comply with legal obligations.

3. Data Protection

We implement industry-standard security measures to protect your data:

  • All data transmissions are encrypted using TLS/SSL (HTTPS).
  • IP addresses are hashed and anonymized — we never store raw IP addresses.
  • Payment information is processed through secure, PCI-compliant payment processors.
  • Access to personal data is restricted to authorized personnel only.
  • We implement Content Security Policy (CSP), HSTS, and other security headers.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with trusted service providers (payment processors, hosting providers) solely for the purpose of operating our platform. We may disclose information when required by law or to protect our rights.

5. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data ("right to be forgotten").
  • Portability: Request your data in a machine-readable format.
  • Opt-out: Opt out of analytics tracking at any time.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy. Transaction records are kept for 7 years for legal and accounting purposes. Analytics data is retained for 2 years in anonymized form.

7. International Data Transfers

Our servers are located in the United States. If you are accessing our platform from outside the US, your data may be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers.

8. Children's Privacy

Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Contact Us

For privacy-related inquiries, contact us at privacy@fifaworldcupticket2026.com.