This notice explains how we handle personal data when you use TM360-Tickets. It covers:
- Organisers — venues, promoters, artists and others who license the platform.
- Ticket buyers and attendees — people who buy or are issued tickets through an organiser’s shop.
- My Tickets wallet users — people who store tickets in the TM360° My Tickets wallet.
1. Who we are
TM360-Tickets is software licensed by TM360 Limited (trading as TM360°), tm360.uk. We provide the ticket shop software and the My Tickets wallet.
We are not the ticket seller for events listed by organisers. Ticket money is taken by the organiser through their own Stripe account. We do not receive, hold or pay out ticket funds.
Privacy contact: hello@tm360.uk
2. Who is the controller?
This depends on the data.
Organiser accounts
For your organiser account, billing, support and how you use the platform, TM360° is the controller.
Event orders (shop)
For the ticket sale itself — what you bought, for which event, at what price — the organiser named on the event page is the controller. They sell the ticket. TM360° is their processor for hosting the shop, checkout hand-off to Stripe, ticket delivery into the wallet, scanning and organiser support.
My Tickets wallet
If you create or use a My Tickets wallet, TM360° is the controller of the wallet account and of:
- your name
- your email address
- your contact telephone number, if you provide one
Those details belong to the wallet relationship with TM360°. We use them to give you a single place to hold tickets, receive ticket and service messages, and recover access.
A ticket sitting in My Tickets may therefore be linked to two controllers:
- TM360° for the wallet identity (name, email, phone)
- the organiser for the event order
Payments
Card and wallet payments are handled by Stripe for the organiser. Stripe has its own privacy notice. We do not store full card numbers.
Website enquiries
If you only browse tm360.uk or send a sales enquiry, TM360° is the controller of that enquiry.
3. Data we use
Organisers
- Name, organisation, role, email, phone
- Login details and security events
- Event listings, ticket types, pricing, capacity
- Licence type (Member / Event / Tour), invoices, usage fees
- Stripe connected-account identifiers (not ticket payouts)
- Support messages
- Device, browser and approximate location used to access the dashboard
My Tickets wallet (TM360° as controller)
- Name
- Email address
- Contact telephone number, if populated
- Wallet login / authentication data
- Tickets stored in the wallet and related display data (event name, date, ticket type, barcode / QR)
- Device data needed to keep the wallet secure
- Preferences (for example notifications)
If name, email or phone is not populated in the wallet, we do not treat a wallet profile as complete. Checkout may still collect those fields for the organiser’s order.
Ticket buyers — event order (organiser as controller; we process it)
- Order details, ticket type, quantity, face value, discounts
- Event, venue and entry data
- Delivery details if the organiser collects them
- Marketing preferences the organiser asks for
- Scan / entry timestamps if the organiser uses scanning
- Limited technical data (IP, device, checkout errors) needed to run checkout securely
Special category data
We do not seek health or accessibility data as a standard field. If an organiser adds a custom question (for example access requirements), they are the controller of that answer and must have a lawful basis. We only store it as part of their form responses.
4. Why we use it
Organisers — TM360° as controller
| Purpose | Lawful basis |
|---|---|
| Create and run your account | Contract |
| Provide the shop, scanning and support | Contract |
| Charge licence and usage fees | Contract / legitimate interests |
| Security, fraud prevention, abuse | Legitimate interests / legal obligation |
| Improve the product (aggregated or limited analytics) | Legitimate interests |
| Service messages, outages, material term changes | Contract / legal obligation |
| Optional product news | Consent, or legitimate interests with opt-out |
My Tickets wallet — TM360° as controller
| Purpose | Lawful basis |
|---|---|
| Create and maintain your wallet | Contract |
| Show tickets you have been issued | Contract |
| Use name, email and phone (if provided) to identify you, send ticket and service messages, and recover the wallet | Contract |
| Security and fraud prevention | Legitimate interests / legal obligation |
| Optional wallet / product news from TM360° | Consent, or legitimate interests with opt-out |
We do not sell wallet contact details.
We do not give organisers a marketing list of all My Tickets users. An organiser only receives the buyer data for their event, as controller of that order.
Event orders — organiser as controller
| Purpose | Typical lawful basis (organiser) |
|---|---|
| Sell and deliver the ticket | Contract |
| Identify you at the door | Contract / legitimate interests |
| Refunds, postponement, cancellation | Contract / legal obligation |
| Event operations and safety | Legitimate interests / legal obligation |
| Organiser marketing | Consent, or soft opt-in where the law allows |
5. Where wallet data comes from
Name, email and phone in My Tickets may be:
- entered by you when you create or update the wallet
- captured at checkout and written into the wallet if you use or create My Tickets at purchase
- updated by you later in wallet settings
You can correct wallet name, email and phone in My Tickets. Changing wallet details does not automatically change the name on a ticket already issued for an organiser’s event; that order stays with the organiser unless they agree a change.
6. Who we share data with
- The organiser of an event you bought — order and ticket data they need to run that event. Not your full wallet history with other organisers.
- Stripe — payment for the organiser.
- Hosting, email, SMS and support providers we use to run TM360-Tickets and My Tickets, under contract.
- Professional advisers and authorities where the law requires it.
- A buyer of our business, if we ever transfer the platform, under the same kind of protections.
We do not sell personal data.
7. International transfers
If a supplier stores data outside the UK, we use a lawful transfer tool (UK adequacy or UK IDTA / addendum) where required.
8. How long we keep it
- Organiser accounts and invoices: life of the account plus up to 6 years for tax and contract records.
- My Tickets wallet profile (name, email, phone): while the wallet is open, then a short period after closure unless we must keep it for security or legal reasons.
- Tickets in the wallet: while useful for entry and a reasonable period after the event (typically up to 2 years unless the organiser’s records require longer processing).
- Event orders: retained for the organiser as their processor for the period they instruct, or our default of 2 years after the event if they set none.
You can ask us to close a My Tickets wallet. Closing the wallet does not delete the organiser’s order record for events you already bought.
9. Your rights
UK GDPR rights: access, correction, deletion, restriction, objection, portability, and withdrawal of consent where we rely on it.
- Wallet name, email and phone — request these from TM360° (we are the controller).
- A specific ticket purchase, refund or event communication — request these from the organiser first (they are the controller). We will help them if needed.
You may complain to the Information Commissioner’s Office: ico.org.uk.
10. Children
TM360-Tickets is not aimed at children creating their own wallet. If an organiser sells tickets for an under-18 event, they must collect only what they need and comply with the law. A parent or guardian should manage a wallet used for a child’s ticket.
11. Cookies and similar tech
We use essential cookies to run login, checkout and the wallet. Analytics or marketing cookies, if used, are described in a cookie banner and can be refused where they are not essential.
12. How to contact us
My Tickets wallet / TM360° platform: hello@tm360.uk
A ticket, refund or event: the organiser named on the ticket and event page.
TM360 Limited (trading as TM360°) · tm360.uk