Privacy Policy

1. Introduction

Geedup Entertainment (operating as "Geedup Pass", "we", "us", "our") operates the Geedup Pass ticketing platform at geedupentertainment.com and its associated services (the "Platform").

We take privacy seriously. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and the choices and rights you have. It applies to everyone who uses the Platform — ticket buyers, event attendees, event organizers and their staff, and visitors to our website. This Policy is written to meet our obligations under the Personal Information Protection and Electronic Documents Act ("PIPEDA") and other applicable privacy laws. It forms part of our Terms of Use.

Personal information means information about an identifiable individual. It does not include business contact information used solely to communicate with someone in relation to their employment or profession, or information that has been anonymized so that individuals can no longer be identified.

2. Who Is Responsible for Your Information

Our role depends on the context:

• When you use the Platform generally — browse, buy a ticket, contact support — we are responsible for your personal information and determine why and how it is handled.
• When you attend an Event, the Organizer of that Event is independently responsible for the attendee information they receive from us and for what they do with it afterwards. We provide the Platform to them as a service provider for those functions. Their handling of your information is governed by their privacy policy, not this one. See section 9.

If you are unsure who to contact about a particular use of your information, write to us at info@geedupentertainment.com and we will help direct your request.

3. Information We Collect

3.1 Information you give us

3.2 Information we collect automatically

• Device and connection data: IP address, browser type and version, device identifiers.
• Usage data: pages viewed, referring URL, interactions with the Platform.
• Ticket scan data: the date, time and event at which a ticket was scanned.
• Cookies and similar technologies: see section 7.

3.3 Information from third parties

• Stripe (our payment processor and payout facilitator) — transaction confirmations, authorization results, chargeback and fraud signals.
• Google, if you sign in with Google — your name, email and profile image, in accordance with your settings with that provider.
• Event Organizers — where an Organizer adds attendee details to an order on your behalf.

4. Why We Collect and Use Your Information

We use personal information for the following purposes:

To provide the service

• Process ticket purchases, issue tickets, and deliver them to you by email.
• Validate tickets at Event entry and prevent duplicate or counterfeit entry.
• Process refunds where applicable.
• Provide customer support and respond to your enquiries.

To operate our business

• Process payments and remit proceeds to Organizers via Stripe Connect.
• Meet tax, accounting and audit obligations.

To keep the Platform safe and lawful

• Detect, investigate and prevent fraud, account takeover, chargeback abuse and breaches of our Terms.
• Enforce purchase limits, including compliance with the Ticket Sales Act, 2017 (Ontario).
• Comply with legal obligations, court orders and lawful requests.

To communicate with you

• Send transactional messages — order confirmations, tickets, receipts, event changes and cancellations. These are not marketing and you cannot opt out of them while you hold an active ticket.
• Send marketing about events and features, where you have consented — see section 8.

5. Our Legal Basis and Your Consent

Under PIPEDA, we rely on your consent to collect, use and disclose personal information, except where the law allows otherwise. Express consent is obtained where the information is sensitive or the use would not be obvious to you — for example, before we send you marketing email. Implied consent applies where the purpose is obvious and the information is not sensitive — for example, using your email address to send your ticket after you buy it.

You may withdraw your consent at any time, subject to legal or contractual restrictions. Withdrawing consent for core processing means we can no longer provide you with tickets or account access. Contact info@geedupentertainment.com to discuss the consequences before withdrawing.

6. When We Share Your Information

We do not sell your personal information. We share it only as follows:

6.1 With Event Organizers. When you buy a ticket, we provide the Organizer with the information they need to run the Event and manage admission — typically your name, email address, ticket type, order reference, and any attendee details you supplied. See section 9.

6.2 With service providers. We use third parties to perform functions on our behalf, under contract, limited to what they need:

6.3 For legal reasons. We may disclose information where we believe in good faith that disclosure is required or permitted by law — including in response to a court order, subpoena, or lawful request from a government authority; to investigate suspected fraud or a breach of our Terms; or to protect the rights, safety or property of any person.

6.4 In a business transaction. If we are involved in a merger, acquisition or sale of assets, personal information may be disclosed to the parties involved, subject to confidentiality obligations.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Platform and understand how it is used.

• Strictly necessary — authentication, session management, security, and remembering items in your checkout. These cannot be disabled without breaking the Platform.
• Functional — remembering preferences such as language and theme (light/dark mode).

Blocking cookies may affect Platform functionality. We do not currently respond to Global Privacy Control or "Do Not Track" browser signals.

8. Marketing Communications and CASL

We send commercial electronic messages only in accordance with Canada's Anti-Spam Legislation (CASL). We obtain your express consent before adding you to a marketing list, or rely on an implied consent basis permitted by CASL — such as an existing business relationship arising from a ticket purchase in the preceding 24 months. Every marketing message identifies us and contains a working unsubscribe link. Transactional messages — tickets, receipts, event changes — are not marketing and continue regardless of your marketing preferences.

Organizers may separately email you about their events. Those messages are sent by the Organizer under their own CASL obligations. We require Organizers to have their own lawful basis for contacting you.

9. Information Shared With Event Organizers — What This Means for You

This is the part of ticketing that surprises people most, so we want to be clear about it.

When you buy a ticket, the Organizer of that Event receives your information — at minimum your name, email address and ticket details. They need it to admit you and manage their Event.

• They are independently responsible for it under privacy law.
• They may contact you about their Event. They must obtain your consent before sending marketing, must honour unsubscribe requests, and must not sell or rent your information.
• We cannot delete information from an Organizer's own systems on your behalf. If you want an Organizer to delete or stop using your information, contact them directly — we will pass your request along on request.

If you believe an Organizer has misused your information, tell us at info@geedupentertainment.com — we investigate and may suspend Organizers who breach these obligations.

10. Where Your Information Is Stored and Processed

We store and process personal information using service providers that may operate servers in Canada, the United States, and other countries. When information is in another country, it is subject to the laws of that country. Before transferring information outside Canada, we require our service providers to maintain a comparable level of protection.

11. How Long We Keep Your Information

We keep personal information only as long as needed for the purposes we collected it, or as required by law:

When information is no longer required, we securely delete it or irreversibly anonymize it.

12. How We Protect Your Information

• Encryption in transit (TLS 1.2+) and at rest.
• Role-based access control on a need-to-know basis.
• Passwords stored using a strong one-way hashing algorithm; we never store them in readable form.
• Card data handled by Stripe, a PCI-DSS compliant payment processor; we do not store full card numbers.
• Regular backups and ongoing review of our security practices.

No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your password confidential.

13. Breach Response

If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible, as required by PIPEDA.

14. Your Rights and Choices

• Access. You may request access to the personal information we hold about you. We will respond within 30 days.
• Correction. If information is inaccurate or incomplete, tell us and we will correct it.
• Deletion. You may ask us to delete your information. We will do so unless required to retain it — for example, transaction records needed for tax purposes.
• Withdraw consent. See section 5.
• Marketing opt-out. See section 8.

How to exercise these rights: email info@geedupentertainment.com. We may ask you to verify your identity before we act, to protect your information.

Additional rights in certain provinces: Quebec residents also have the right to data portability and to request that we cease disclosing their information. Alberta and British Columbia residents have comparable access and correction rights and may complain to their provincial Information and Privacy Commissioner.

15. Automated Decision-Making

We use automated systems to screen transactions for fraud and to enforce ticket purchase limits. These systems may decline a transaction or cancel an order. If an automated decision affects you, you may contact info@geedupentertainment.com to be told the main factors involved and to request review by a person.

16. Children's Privacy

The Platform is not directed at children under 16, and we do not knowingly collect their personal information without parental consent. Note also that every Geedup event carries a 19+ age restriction — see the event page for details before purchasing.

17. Changes to This Policy

We may update this Policy. We will post the revised version with a new "Last updated" date. For material changes, we will give you advance notice by email or in-Platform notice.

18. Contact Us and How to Complain

Geedup Entertainment (o/a Geedup Pass) — Ontario, Canada
Email: info@geedupentertainment.com
Phone: +1 (226) 337-6644

We will acknowledge your enquiry or complaint within 5 business days and respond substantively within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada — 30 Victoria Street, Gatineau, Quebec, K1A 1H3 — 1-800-282-1376 — priv.gc.ca.