Privacy Policy
What we collect, why we collect it, and what organizers and ticket buyers can ask us to do with it.
Last updated: 17 September 2026
Adapted, not yet cleared. This text is carried across from FEARTICKET’s privacy policy - the same business, the same company - with the brand and contact details changed to Hytix. A lawyer should still confirm the retention periods against Hytix’s actual systems, and the named sub-processors and gateways, before this page goes live.
1. Scope and our role
This policy covers personal information handled by Hytix, Inc. (“Hytix”, “we”, “us”, “our”), a corporation incorporated in the State of Delaware, United States, through www.hytix.com, the organizer web application, the Hytix Organizer App, and the ticket buyer portal (together, the “Services”). Hytix, Inc. also owns and operates FEARTICKET, which has its own privacy policy.
Our role depends on whose information it is:
- Controller. We control information about Organizers - businesses and individuals with Hytix accounts - and about website visitors, and we determine how that information is used.
- Processor. We process information about Ticket Buyers on behalf of Organizers, who are the controllers. Organizers determine how that data is used; contact them directly about their own practices.
2. Information we collect
Information you give us
- Account and business details: name, email address, phone number, business name, postal and billing address, company logo, and payout details.
- Order information: tickets or items purchased, quantity, price, event, order reference, and buyer name and email.
- Support and enquiry content: messages sent through the contact form, by email, or by phone.
- Marketing preferences: newsletter subscription status.
Information we collect automatically
- Device and usage data: IP address, browser type, operating system, referring pages, pages viewed, and timestamps.
- Cookies and similar identifiers: see section 4.
- Security and fraud signals: login attempts and patterns that detect automated ticket purchasing and card testing.
We do not collect or store full payment card numbers - see section 6.
3. How and why we use it
| What we do | Why | Legal basis (EEA / UK) |
|---|---|---|
| Create and administer accounts; deliver tickets; run box office and check-in | To provide the Services you asked for | Performance of a contract |
| Process payments, payouts, refunds and chargebacks | To complete transactions | Performance of a contract; legal obligation |
| Provide support and respond to enquiries | To help you when something goes wrong | Performance of a contract; legitimate interests |
| Detect fraud, abuse and automated ticket buying | To protect organizers, buyers and us | Legitimate interests; legal obligation |
| Analyse usage and improve features | To make the product better | Legitimate interests |
| Send product updates, offers and our newsletter | To keep you informed about Hytix | Consent, or legitimate interests for existing customers |
| Meet tax, accounting and other legal requirements | Because we have to | Legal obligation |
| Transfer data in a merger, acquisition or sale of assets | Business continuity | Legitimate interests |
You can unsubscribe from marketing at any time using the link in any email, or by contacting info@hytix.com. Essential service messages - order confirmations, security notices - will continue.
4. Cookies and tracking
We use cookies and similar technologies - web beacons, pixels and scripts - to operate and improve the Services. The categories are:
- Strictly necessary: authentication, session management, load balancing, security and fraud prevention. These cannot be disabled.
- Functional: remembering preferences such as language or saved filters.
- Analytics and performance: understanding how the Services are used so we can improve them.
Cookies may be session-based, and deleted when you close your browser, or persistent. Most browsers let you refuse or delete cookies; blocking strictly necessary cookies will stop parts of the Services working.
We respect Global Privacy Control (GPC) signals as an opt-out mechanism where applicable law requires it. Browser “Do Not Track” signals are not standardized and we do not currently honour them independently.
5. Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share information only in these circumstances:
- With the Organizer: the Ticket Buyer information an Organizer needs to admit guests and run the Event.
- With service providers: cloud hosting, payment gateways, email and SMS delivery, analytics, error monitoring and customer support providers, acting on our instructions and only to provide those services.
- For legal reasons: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property or safety of Hytix, our users, or the public.
- In corporate transactions: a merger, acquisition, financing or asset sale, with this policy continuing to apply.
A current sub-processor list is available on request at info@hytix.com.
6. Payment information
Card payments are processed by PCI-DSS compliant payment providers - our integrated gateway, or a third-party gateway an Organizer connects. Full card numbers are submitted directly to those providers.
We retain limited transaction data - card brand, last four digits, authorization result, amount and timestamp - for order reconciliation, refunds and dispute handling. Each payment provider handles information under its own privacy policy.
7. International transfers
Hytix, Inc. is incorporated and based in the United States, with infrastructure and service providers primarily located there. Information accessed from outside the US will be transferred to and processed in the US, where data protection standards may differ.
For transfers of EEA, UK or Swiss personal information we rely on appropriate safeguards - chiefly European Commission Standard Contractual Clauses and the UK International Data Transfer Addendum - plus supplementary technical and organizational measures where necessary. Request copies at info@hytix.com.
8. How long we keep it
- Organizer account records: for the life of the account, then up to 24 months after closure, unless longer retention is required.
- Order and transaction records: typically 7 years, to satisfy tax, accounting and chargeback obligations.
- Support correspondence: up to 24 months after the matter closes.
- Marketing contacts: until you unsubscribe, plus a suppression record so we do not contact you again.
- Server and security logs: typically 12 months.
Attendee Data we hold on behalf of an Organizer follows that Organizer’s retention instructions. When a retention period ends, data is deleted or irreversibly anonymized.
9. Security
We use industry-standard security measures: encryption in transit, access controls, least-privilege permissions, logging, and regular review of our providers. Payment card data is handled by PCI-DSS compliant processors.
No system can be guaranteed completely secure. Keep your password confidential and enable multi-factor authentication where it is available. If we become aware of a breach affecting personal information, we will notify affected individuals and the relevant regulators where the law requires it.
10. Your privacy rights
Depending on where you live, you may have the right to:
- Access a copy of the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your personal information;
- Object to or restrict certain processing;
- Receive your data in a portable, machine-readable format;
- Withdraw consent at any time, without affecting processing already carried out;
- Avoid decisions based solely on automated processing that have legal or similarly significant effects.
Exercise these rights by emailing info@hytix.com. We will verify your identity and respond within the period the law allows - generally 30 days, or 45 days in California - and will tell you if we need longer. You will not be treated differently for exercising them.
If we hold your data as a processor for an Organizer, we will refer your request to them or handle it on their instructions.
EEA and UK residents also have the right to complain to their local supervisory authority.
11. US state privacy rights
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have the right to know about, access, correct, delete and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale, or profiling with significant effects.
We do not sell personal information and we do not share it for cross-context behavioural advertising as defined under the California Consumer Privacy Act as amended. We have not done so in the preceding twelve months, including for consumers under 16.
The categories of personal information we collect, the purposes, and the recipients are described in sections 2, 3 and 5. Submit requests to info@hytix.com; authorized agents may submit on your behalf with proof of authority. If we deny a request you may appeal by replying to the decision, and you may contact your state Attorney General where that applies.
12. Children
The Services are not directed at children, and we do not knowingly collect personal information from anyone under 16 - or under 13 in the United States - without appropriate consent. Ticket purchases must be completed by an adult.
Many events are family events where an adult buys tickets covering children; in those cases we collect only the information the Organizer needs for admission. If you believe a child has provided personal information to us, contact info@hytix.com and we will delete it promptly.
13. Third-party sites
The Services link to and integrate with sites we do not control, including organizer websites, payment providers and social platforms. Their privacy practices are their own and this policy does not apply to them. Review their policies directly.
14. Sensitive information
Please do not submit sensitive personal information - government identification numbers, financial account credentials, health information, racial or ethnic origin, political opinions, religious beliefs, biometric data, precise geolocation, or criminal history - unless we specifically ask for it. We do not use sensitive personal information to infer characteristics about you.
15. Changes to this policy
We may update this policy as the Services and the law evolve. For material changes we will give at least 30 days’ notice by email or in-product notice before they take effect for existing users; other updates take effect when posted. The “last updated” date above always reflects the current version, and prior versions are available on request.
16. Contacting us
Questions, requests or privacy complaints? Email info@hytix.com or call +1 201-244-4454. Put “Privacy” in the subject line for faster routing.