PRIVACY POLICY

1. INTRODUCTION

Aslan Softicketing Innovations Limited (hereinafter referred to as “ASIL”, “we”, “us”, or “our”) is the owner, developer and operator of Softickets, a proprietary digital platform and experience ecosystem.

Softickets is designed to connect people to experiences that matter by enabling users to discover events, entertainment, communities, opportunities and other experiences.

This Privacy Policy explains how ASIL collects, receives, stores, uses, processes, shares and protects personal information through its digital services, including:

• Softickets Customer App: The customer-facing application used to discover experiences, explore events, make bookings, purchase tickets and manage attendance.
• Softickets Pro: The organizer-facing application used by event organizers and their authorized teams to create and manage events, manage ticket inventory, verify tickets, manage attendees and monitor event performance.
• Softickets Website: The official Softickets website and associated web services.
• Other Softickets Services: Any additional digital products, features, platforms or services introduced and operated by ASIL within the Softickets ecosystem.

Together, these services are referred to as the “Services” or the “Platform”.

This Policy applies to customers, event attendees, organizers, business representatives, managers, authorized team members, website visitors and other individuals whose personal information ASIL processes.

By registering for an account, accessing or using our Services, you acknowledge that you have been provided with this Privacy Policy. Where consent is required by applicable law, we will obtain that consent separately through an appropriate affirmative action.

If you do not agree with the applicable terms of this Policy, you should discontinue using the relevant Services.

Our handling of personal information is intended to comply with the applicable laws of the Republic of Zambia, including the Data Protection Act No. 3 of 2021, and other applicable legal and regulatory requirements.

2. OUR CORPORATE IDENTITY AND RESPONSIBILITY

Aslan Softicketing Innovations Limited (ASIL) is the legal corporate entity responsible for the ownership, operation, management and administration of the Softickets ecosystem.

Softickets is a proprietary product, platform, brand and service operated by ASIL. Softickets Pro is part of the same ecosystem and is not a separate legal entity.

For the purposes of this Privacy Policy, references to “Softickets” mean the products and services owned, developed or operated by ASIL.

Unless otherwise expressly stated, ASIL acts as the data controller responsible for determining the purposes and means of processing personal information collected through its Services.

Certain third-party service providers may act as data processors on behalf of ASIL, while event organizers or other independent parties may separately determine how they process information received through their use of the Platform.

3. INFORMATION WE COLLECT

We collect information that is reasonably necessary to provide, maintain, secure and improve our Services.

3.1 Information You Provide Directly

Depending on how you use the Platform, we may collect:

A. Account and Registration Information

• Full name.
• Email address.
• Mobile phone number.
• Username or account identifier.
• Password and authentication credentials.
• Account type and assigned user role.
• Registration and account verification information.

B. Profile Information

• Profile photographs or avatars.
• Personal profile details.
• Preferences and saved interests.
• Organizer biographies and business descriptions.
• Business names, websites and contact information.
• Other information voluntarily provided through your profile.

C. Event and Organizer Information

For organizers using Softickets Pro, we may collect:

• Event names and descriptions.
• Event categories and classifications.
• Event photographs, promotional videos and banners.
• Event dates, times and venues.
• Venue and geographical information.
• Ticket categories, prices and availability.
• General Access, VIP, VVIP and other ticket classifications.
• Event visibility and access settings.
• Organizer business and verification information.
• Information about authorized event management teams.

D. Booking and Ticket Information

• Events discovered, selected or booked.
• Ticket categories and quantities.
• Booking references and transaction identifiers.
• Ticket status and verification records.
• QR-code ticket information.
• Check-in and attendance records.
• Season Pass and other eligible booking activity.
• Refund and cancellation information.

E. Payment and Financial Information

We may collect information necessary to facilitate payments and financial transactions, including:

• Payment method and transaction references.
• Mobile money transaction information.
• Card payment transaction status.
• Payment amounts and applicable fees.
• Wallet top-ups and wallet transaction history, where applicable.
• Refund records.
• Organizer payout information.
• Settlement and reconciliation records.

Payments are facilitated through third-party payment providers, including Lenco, where applicable.

Full payment card credentials and sensitive payment authentication information are handled by the relevant payment provider. We do not intend to store complete payment card details on our own servers.

F. Communications and Customer Support

• Messages and enquiries sent to our support team.
• Complaints, feedback and requests.
• Communications with organizers through supported Platform features.
• Information provided when reporting technical or account-related problems.

3.2 Information Collected Automatically

When you access or use our Services, we may automatically collect:

A. Usage and Activity Information

• Pages and sections visited.
• Events and experiences viewed.
• Search queries and discovery activity.
• Saved events and favourites.
• Booking interactions.
• App feature usage.
• Session information and interaction history.

B. Device and Technical Information

• IP address.
• Device type and model.
• Operating system and version.
• Browser type and version.
• Application version.
• Device identifiers and technical identifiers where available.
• Access dates and timestamps.
• Error reports, diagnostics and performance information.

C. Location Information

Where you grant permission, we may collect approximate or precise geographical location information to support features such as:

• Discovering nearby events.
• Displaying events on maps.
• Providing venue directions.
• Improving location-based recommendations.
• Displaying geographically relevant experiences.

Location permissions are controlled through your device settings.

You may disable location access at any time. However, certain location-dependent features may become unavailable or less accurate.

3.3 Information Received from Third Parties

We may receive relevant information from third-party service providers, including:

• Payment confirmation and transaction status from Lenco and other supported payment providers.
• Email delivery and notification status from communication providers.
• SMS delivery information from messaging providers.
• Authentication and account verification services.
• Hosting, infrastructure and technical service providers.
• Event organizers and authorized representatives where relevant to bookings and event administration.

We only use information received from third parties for legitimate purposes connected to providing, securing and improving our Services or meeting legal obligations.

4. HOW WE USE YOUR INFORMATION

ASIL processes personal information for the following purposes:

4.1 Account Management

• Creating and maintaining customer and organizer accounts.
• Authenticating users and managing access permissions.
• Verifying account information where necessary.
• Managing administrator, organizer, manager and scanning roles.
• Supporting account recovery and password resets.

4.2 Experience Discovery and Personalisation

• Displaying events and experiences.
• Recommending relevant experiences.
• Supporting searches, maps and location-based discovery.
• Remembering favourites and saved experiences.
• Improving the relevance of content displayed to users.

4.3 Bookings and Ticket Management

• Processing reservations and ticket purchases.
• Generating booking references and digital tickets.
• Managing ticket availability and inventory.
• Validating tickets and QR codes.
• Recording event check-ins and attendance.
• Supporting eligible Season Pass and Quick Book services.
• Managing booking cancellations and refunds.

4.4 Payments and Financial Operations

• Processing customer payments.
• Verifying payment confirmations.
• Managing wallet transactions where available.
• Calculating applicable service fees.
• Reconciling financial transactions.
• Processing organizer payouts.
• Investigating disputed or suspicious transactions.

4.5 Organizer and Event Management

• Supporting event creation and administration.
• Managing organizer accounts and teams.
• Enabling authorized ticket verification.
• Providing event attendance information.
• Supporting event performance reporting.
• Helping organizers manage their experiences and attendees.

4.6 Communications

We may send:

• Account registration and verification messages.
• Password reset notifications.
• Booking confirmations.
• Payment receipts.
• Ticket and check-in updates.
• Event-related notifications.
• Refund and payout notifications.
• Security alerts.
• Important changes to our Services or policies.

Where permitted, we may also send promotional communications, marketing materials and information about upcoming experiences.

You may opt out of promotional communications without affecting essential service-related notifications.

4.7 Security and Fraud Prevention

We use relevant information to:

• Detect suspicious activity.
• Prevent fraudulent bookings and transactions.
• Protect user accounts.
• Investigate unauthorized access.
• Detect misuse of tickets and QR codes.
• Enforce Platform rules.
• Protect the integrity of the Softickets ecosystem.

4.8 Legal and Regulatory Compliance

We may process and retain information where necessary to comply with applicable laws, regulatory requirements, tax obligations, financial reporting requirements, lawful requests and legal proceedings.

5. LAWFUL BASIS FOR PROCESSING

ASIL processes personal information on lawful grounds permitted under applicable data protection legislation.

Depending on the circumstances, these grounds may include:

• Consent: Where you have freely and expressly agreed to a particular processing activity.
• Contractual necessity: Where processing is necessary to create an account, fulfil a booking, provide a service or perform an agreement with you.
• Legal obligations: Where processing is necessary to comply with applicable laws and regulatory requirements.
• Legitimate interests: Where processing is necessary for legitimate business purposes, provided those interests do not override your legally protected rights and freedoms.
• Vital interests and public interest: Where processing is legally justified to protect an individual’s vital interests or perform a legally recognised public-interest function.

Where processing relies on consent, you may withdraw that consent, subject to any other lawful basis that may permit continued processing.

6. HOW WE SHARE YOUR INFORMATION

ASIL does not sell your personal information to third parties.

We may disclose personal information only where necessary for legitimate operational, contractual, legal or security purposes.

6.1 Event Organizers

When you book or purchase a ticket for an event, relevant information may be shared with the event organizer and authorized members of their management team.

Depending on their assigned permissions, this may include:

• Your name.
• Relevant contact details.
• Booking reference.
• Ticket category.
• Ticket validity and status.
• Payment confirmation status where necessary.
• Check-in and attendance information.

This enables organizers to manage attendees, verify bookings and administer event entry.

Organizers must handle information received through Softickets responsibly and in accordance with applicable data protection obligations.

6.2 Payment Service Providers

We share relevant transaction information with Lenco and other supported payment or mobile money providers to facilitate:

• Customer payments.
• Payment verification.
• Refund processing.
• Transaction reconciliation.
• Organizer payouts.

These providers process information in accordance with their applicable privacy policies and contractual obligations.

6.3 Technical and Operational Service Providers

We may engage third-party service providers to support:

• Hosting and infrastructure.
• Database and application operations.
• Email and SMS delivery.
• Security and fraud monitoring.
• Analytics and diagnostics.
• Customer support.
• Payment and financial integrations.

These providers may only access personal information to the extent reasonably necessary to perform their assigned services, subject to applicable contractual and legal safeguards.

6.4 Legal and Regulatory Authorities

We may disclose information where required or authorized by applicable law, court orders, regulatory requirements or lawful government requests.

We may also disclose information where reasonably necessary to protect the rights, safety, property or security of ASIL, its users or the public.

6.5 Business Transfers

If ASIL undergoes a merger, restructuring, acquisition, financing arrangement or transfer of business assets, relevant information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.

7. ORGANIZER ACCESS AND DATA RESPONSIBILITIES

Softickets Pro provides organizers and their authorized teams with tools to manage events and attendees.

ASIL applies role-based access controls intended to restrict information according to each user’s assigned responsibilities.

For example:

• Owners and administrators may access authorized event management information.
• Event managers may access information necessary to administer assigned events.
• Gate managers may access relevant attendance and entry information.
• Scanners may access the information required to verify tickets and manage event entry.
• View-only users may access information permitted by their assigned permissions.

Organizers are responsible for ensuring that their employees, contractors and authorized representatives use attendee information only for legitimate event-related purposes.

Organizers must not:

• Sell or unlawfully disclose attendee information.
• Use attendee contact details for unrelated marketing without an appropriate lawful basis.
• Share account credentials with unauthorized individuals.
• Attempt to access information beyond their assigned permissions.
• Retain or misuse information contrary to applicable legal requirements.

ASIL may restrict, suspend or revoke access where misuse, unauthorized disclosure or other security violations are identified.

8. LOCATION SERVICES AND DEVICE PERMISSIONS

Certain Softickets features may require access to device permissions.

These may include:

• Location access for nearby experiences and directions.
• Camera access for scanning or capturing supported content.
• Photo and media access for uploading profile photographs or event promotional materials.
• Notification permissions for alerts and updates.

These permissions are requested when required by the relevant feature.

You may manage or withdraw device permissions through your device settings.

Disabling a permission may affect the functionality of the associated feature but will not necessarily prevent you from accessing unrelated Platform services.

9. DATA RETENTION

ASIL retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected or processed, subject to applicable legal and regulatory obligations.

Retention periods may vary depending on the nature of the information.

We may retain:

• Account information while an account remains active.
• Booking and ticket records for service administration and verification.
• Financial transaction records for accounting, reconciliation, tax and legal purposes.
• Organizer payout records for financial reporting and settlement verification.
• Security and access logs for security monitoring and investigations.
• Customer support records for complaint resolution and service improvement.
• Other information for the period required by applicable law.

When information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.

Some information may remain in restricted backups for a limited period before being securely overwritten or deleted.

10. DATA SECURITY AND PROTECTION

ASIL takes reasonable technical, administrative and organizational measures to protect personal information against:

• Unauthorized access.
• Accidental loss or destruction.
• Unlawful processing.
• Unauthorized alteration.
• Disclosure or misuse.
• Fraudulent activities.
• Other reasonably foreseeable security threats.

Our security measures may include:

• Password hashing and secure authentication practices.
• Role-based access controls.
• Restricted administrative permissions.
• Secure communication and transmission.
• System monitoring and logging.
• Security testing and maintenance.
• Backup and recovery procedures.
• Access restrictions for employees and authorized service providers.

Payment processing is handled through supported payment partners, and full payment card credentials are not intended to be stored on ASIL’s servers.

Although we take reasonable precautions, no digital platform, communication channel or storage system can be guaranteed to be completely secure.

Users are also responsible for protecting their login credentials and promptly notifying us if they suspect unauthorized access to their accounts.

11. DATA BREACHES AND SECURITY INCIDENTS

If ASIL becomes aware of a personal data breach affecting information under its responsibility, we will assess the incident and take appropriate steps to:

• Investigate the cause and extent of the incident.
• Contain and mitigate the breach.
• Protect affected accounts and information.
• Restore the security and integrity of affected systems.
• Notify the relevant regulatory authority and affected individuals where required by applicable law.
• Take reasonable measures to prevent similar incidents.

All applicable statutory reporting and notification requirements will be observed.

12. DATA STORAGE AND INTERNATIONAL TRANSFERS

ASIL operates within the Republic of Zambia and recognises the requirements governing the storage, processing and transfer of personal information under Zambian data protection legislation.

Personal information will be stored and processed in accordance with applicable data localisation requirements, including Section 70 of the Data Protection Act No. 3 of 2021.

Where a lawful exception or authorization permits information to be processed or stored outside Zambia, ASIL will take the necessary steps to comply with applicable regulatory requirements and safeguards.

Sensitive personal information will be handled in accordance with the specific requirements governing its processing and storage.

Third-party service providers may have their own infrastructure and processing arrangements. Any relevant international processing or transfer must be assessed and handled in accordance with applicable law.

13. CHILDREN’S PRIVACY

The Softickets Services are not primarily directed at children.

ASIL does not knowingly collect or process children’s personal information without the required parental, guardian or legally authorized consent.

Where a child is permitted to use a relevant Service, ASIL will apply appropriate age-verification and parental-consent measures as required by applicable law.

Parents and legal guardians who believe that a child has provided personal information without appropriate authorization should contact us using the details provided in this Policy.

Upon verification, we will take appropriate steps to address the matter in accordance with applicable legal requirements.

14. YOUR DATA PROTECTION RIGHTS

Subject to applicable law, you may have the following rights concerning your personal information:

14.1 Right to Information

You may request information about how your personal data is collected, processed, used and shared.

14.2 Right of Access

You may request confirmation of whether ASIL processes your personal information and request access to relevant information.

14.3 Right to Rectification

You may request correction of inaccurate or incomplete personal information.

14.4 Right to Erasure

You may request deletion of personal information where the applicable legal requirements for erasure are satisfied.

14.5 Right to Object

You may object to certain forms of processing, including processing for direct marketing, subject to applicable law.

14.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent.

Withdrawal does not affect processing lawfully conducted before the withdrawal or processing supported by another lawful basis.

14.7 Rights Relating to Automated Decisions

You may exercise applicable rights concerning decisions made solely through automated processing where those decisions produce legal or similarly significant effects.

14.8 Right to Data Portability

Where applicable under the law, you may request the transfer of your personal information to another data controller where technically feasible.

14.9 Right to Lodge a Complaint

You may lodge a complaint with the Office of the Data Protection Commissioner of Zambia if you believe that your personal information has been processed contrary to applicable data protection legislation.

14.10 Exercising Your Rights

To exercise any of these rights, contact us using:

Email: softicketing@gmail.com

Telephone: +260 969 200 599

We may request reasonable information to verify your identity before processing a request.

We will assess and respond to requests in accordance with applicable legal requirements.

Some requests may be limited where ASIL is legally required to retain information or where another lawful basis permits continued processing.

15. ACCOUNT DELETION AND CLOSURE

Customers and organizers may request account deletion by contacting ASIL or using an available account deletion feature within the relevant application.

Upon receiving a verified request, we will assess the information associated with the account and take appropriate steps to delete or anonymise information that is no longer required.

However, certain information may need to be retained for:

• Financial and accounting records.
• Completed transactions.
• Organizer settlements and payout records.
• Legal and regulatory compliance.
• Fraud prevention and investigations.
• Dispute resolution.
• The establishment or defence of legal claims.

Deleting an account does not automatically reverse completed transactions, cancel independent obligations or erase information that ASIL is legally required to retain.

Where information must be retained, access and processing will be restricted to the relevant lawful purposes.

16. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to support functionality, maintain sessions, improve website performance and understand visitor interactions.

These technologies may be used to:

• Remember user preferences.
• Maintain login sessions.
• Improve website navigation.
• Monitor website performance.
• Identify technical issues.
• Support security and analytics activities.

You may manage cookies through your browser settings.

Disabling certain cookies may affect the availability or performance of some website features.

Where required, we will obtain consent before using non-essential cookies or similar technologies.

17. THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links to third-party websites, applications, payment services or external platforms.

These services may operate under independent privacy policies and terms.

ASIL does not control the privacy practices of independent third parties and is not responsible for their information-handling practices.

We encourage users to review the privacy policies of third-party services before providing personal information to them.

18. INTELLECTUAL PROPERTY AND PLATFORM PROTECTION

Softickets is a proprietary platform and product ecosystem owned by Aslan Softicketing Innovations Limited.

Its software, applications, source code, platform architecture, databases, designs, branding, documentation, technology and proprietary systems are protected by applicable intellectual property laws.

Nothing in this Privacy Policy grants users, organizers or third parties ownership of ASIL’s intellectual property or unrestricted rights to access, reproduce, extract, distribute or commercially exploit Platform information or technology.

Users and organizers may only access and use the Services within the permissions and rights granted by ASIL and the applicable Platform agreements.

This section does not transfer ownership of user-provided content or other third-party intellectual property to ASIL.

19. CHANGES TO THIS PRIVACY POLICY

ASIL reserves the right to update, amend or revise this Privacy Policy when necessary to reflect:

• Changes in applicable laws and regulations.
• New Platform features and services.
• Changes to our data collection or processing practices.
• Changes in our technical infrastructure.
• Security and operational improvements.
• Other legitimate business or regulatory requirements.

The latest version will be published on our official website and, where appropriate, communicated through our applications or other available communication channels.

The revised Policy will display an updated effective or revision date.

Where changes materially affect your rights or the manner in which your information is processed, we will provide additional notice or obtain consent where required by law.

Continued use of the Services following publication of an updated Policy will be subject to applicable legal requirements concerning notice and consent.

20. GOVERNING LAW

This Privacy Policy shall be interpreted and applied in accordance with the laws of the Republic of Zambia, including the Data Protection Act No. 3 of 2021 and other applicable legislation.

Nothing in this Policy is intended to exclude or restrict any mandatory rights or protections granted to individuals under applicable law.

21. CONTACT US

For questions, complaints, requests, account deletion enquiries or concerns regarding the collection, use, processing or protection of your personal information, please contact us through the official channels below.

ASLAN SOFTICKETING INNOVATION LIMITED (ASIL)

Platform: Softickets

Email: softicketing@gmail.com

Telephone / WhatsApp: +260 969 200 599

Website: https://softicketing.com

Jurisdiction: Republic of Zambia

For privacy-related enquiries, please use the subject line:

PRIVACY POLICY / DATA PROTECTION REQUEST

We will review and respond to your enquiry in accordance with applicable legal requirements.