Privacy Policy

What we collect, and why

We collect only what we need. What that is depends on what you do:

• Buying a ticket: your name and email address, so we can sell you the ticket, send it to you and contact you about the event, and a record of your order (what you bought, when, and whether it was paid or refunded). Your card details go straight to Stripe. If you buy for others and give us their names and email addresses, we use those only to put their name on their ticket and send it to them.
• At the door: a record of each ticket scanned, and when, so a ticket can't be used twice.
• Joining our mailing list: your email address, and a record of when and how you agreed to receive it.
• Contacting us: whatever you put in the message, so we can reply.

If you start a checkout but don't finish paying, we delete the contact details from it automatically.

We do not collect anything "just in case", and we never see or store your card details.

Who holds and processes it

• Public Service Center Limited: controls your data. We sell your ticket, and we are responsible for your information.
• ICU Media Design: builds and hosts this website and its ticketing system on our behalf (a data processor). Your booking is stored in our own database there.
• Stripe: processes your card payment. Your card details go straight to Stripe and never reach us. Stripe's handling of them is covered by Stripe's privacy policy.
• Resend: sends your tickets and receipts, our mailing-list email and messages from this website.

Some of these providers store data overseas. We only use reputable providers with appropriate safeguards.

How long we keep it

We keep different things for different lengths of time, and no longer than we need to:

• Anything that is a financial record (orders and receipts) for seven years, which is what Inland Revenue requires of us.
• Your mailing-list subscription: until you unsubscribe. After that we keep a scrambled record of the address only, so that we can never accidentally add you back.
• Messages you send us: two years.
• Door scans: twelve months.

Marketing

We only send you marketing email if you have explicitly opted in. Every marketing message identifies PSC and includes a working unsubscribe link. We never buy or import contact lists.

Analytics and cookies

Our own site analytics are non-identifying: we measure visits without tracking you across the web. Event pages set two small cookies of our own: one that lets us count a visit once (it ends when you close your browser), and, only if you arrived from a link in one of our campaigns, one that remembers which campaign for 30 days. Neither identifies you or follows you to other sites. The checkout adds one more of our own, a security cookie that stops anyone else submitting the form on your behalf; it ends when you close your browser.

Our checkout also uses cookies from Stripe, our payment processor, which Stripe uses to detect and prevent fraud: two on our site (one lasts 30 minutes, the other a year) and one on Stripe's own site. They are not used for advertising.

Your rights

You can ask us to access, correct, or delete the personal information we hold about you, including if someone else bought you a ticket and gave us your name and email. We'll action it, though we keep the minimum financial record the law requires even after a deletion.

To make a request, email info@publicservicecenter.co.nz. We'll come back to you as quickly as we can, and within the twenty working days the Privacy Act allows.

Security & breaches

Your data is encrypted in transit and access-controlled. If a privacy breach ever posed a risk of serious harm, we would notify affected people and the Privacy Commissioner as required by the Privacy Act 2020.

Purchase terms · Refund policy