Privacy Notice

The Purpose and Scope of this Notice

SeatGeek is committed to protecting your privacy and creating a safe and secure experience for anyone who uses our Services.

This SeatGeek Privacy Notice ("Notice"), together with our Terms of Use and Cookie Policy, explains how SeatGeek, Inc. and its subsidiaries and affiliates (together, "SeatGeek", "we", "us", or "our") collect, use, and share your information when you access or use our mobile applications, websites, developer tools, and other services (collectively, our "Services"), open an account, contact our customer support, engage with us on social media, or otherwise communicate or interact with us.

In some cases, we provide software products pursuant to an agreement with another organization. In such cases, this Notice does not apply to the extent we process personal information as a service provider or processor on behalf of such organizations. This Notice also covers the rights and choices you may have regarding your personal information. If you do not agree with this Notice, do not access or use the Services or otherwise interact with our business.

To better protect your personal information and privacy, we advise you to carefully read this Notice before accessing or using the Services.

Personal Information We Collect

Information You Provide

When you access or use the Services or interact with our business, you may provide us with certain information. Depending on how you use our Services, we may collect:

• Account and Contact Information. We collect account and contact information that you provide when you create and update your SeatGeek account, set preferences, register for a presale, sign up for marketing, share or receive a ticket transfer, or transact using the Services. This may include information like your name, SeatGeek account profile picture, username, login credentials, phone number, email, mailing and physical address, and favorite teams, events, or artists.
• Billing Information. You may provide us with certain payment and billing information if you purchase tickets or other products or pay for Services. This may include payment methods, such as credit card, debit card, and bank account information, which we collect via third-party secure payment processing services.
• Seller Information. When you sell tickets through our Services, we may collect additional information like your government ID, date of birth, social security number or tax identification number, and bank account information. If you are selling on behalf of a business, we may also collect information about your organization, including its name, address, proof of address, tax identification number, and its management or beneficial ownership.
• Your Content. Our Services may permit you to upload event photos and recordings. Our use of your content is explained in our Content Policy & License.
• Customer Support & Survey Information. When you reach out to us to solve or report an issue, contact customer support, provide feedback, participate in a product survey or research, or otherwise interact with us, we may collect information regarding your communication. This may include additional information which may be required in order to authenticate or identify you or your request.
• Linked Accounts. We collect information with your permission when you link a social media, music streaming service, sport team, or other third-party account with your SeatGeek Account (for example, by linking your Spotify account). This may include your name, username, profile picture, and content and usage information from your linked account (like artists or accounts you follow). You can remove this access at any time in your third-party account settings or by unlinking the accounts.
• Partner & Contract Data. We collect personal information from our business partners and our business partners' employees and representatives. This includes contact information as well as information about the contract, business relationship, and services provided.

In some situations, you may provide us with information concerning your disabilities, which we may collect and process for the purpose of assisting you with purchasing accessible seats at events. This information may be considered sensitive data under applicable law.

Automatically-Collected Data

When you access or use the Services or visit our online properties, we automatically collect information, which may include:

• Purchase & Event History. We maintain records of your use of our Services, including events attended and tickets purchased.
• Device Information. We collect information about the computer or mobile device you use to access our Services, including the hardware model, battery usage, operating system and version, unique device identifiers, device storage, MAC address, SIM information, and mobile network information.
• Log & Browser Information. We may collect log information about your use of the Services, including the type of browser you use, app usage, access times, pages and content viewed on the Services, page interaction information (such as scrolls and clicks), cart abandonment, your IP address, advertiser IDs, and the page you visited before navigating to the Services.
• Location Information. We may collect your IP address, and if you consent to our connection to your device's geolocation functionality, information about the location of your device when you access or use the Services. For more details, including how you can consent or opt-out of location sharing, please see the "Your Choices" section below. We also collect sufficient information to determine if you are trying to fake your location using a VPN, VPN app with location spoofing, or other related tools.
• Information Collected by Cookies and other Tracking Technologies. We use various technologies, including cookies and web beacons, to collect information concerning your online activities, such as the device and browser information, the pages you visit and the content you view. The technologies might collect information over time and across other websites. We may also use third-party analytics tools (such as Google Analytics) to obtain such information. For more details, please see our Cookie Policy.

Information We Collect From Other Sources

We may also obtain personal information from other sources and combine that with personal information we collect directly. For example, we may collect personal information about you from third parties, including but not limited to our partners, identity verification services, fraud detection service providers, mailing list providers, and publicly available sources.

When you buy tickets from third-party e-commerce sites, the third party site will send us information such as your contact and billing details and information about your ticket purchase for us to allocate tickets to you.

How We Use the Information We Collect

We use the personal information we collect primarily for the following purposes and, where mandated by applicable law, legal bases. Depending on the circumstances, we may rely on different legal bases when processing the same information for different purposes.

Performance of Our Contract with You

We process your information to operate our marketplace and provide our Services. This includes processing for the following purposes:

• Providing our Services. We use your information to operate, provide, develop and improve our Services, for instance: enabling you to purchase, transfer, and sell tickets; manage your account; use our platform and marketplace; and receive confirmations, promo codes, survey incentives, event reminders, and other relevant information.
• Event Operation. We and our Event Partners use your information to run events, allocate seating, and notify you of changes to events or other important event information.
• Customer Service. This includes responding to your inquiries and requests, receiving your communications and feedback, and enabling use of our chatbot.
• Contests, Competitions, Presales, & Referrals. We may use your information to confirm your registration for a presale, event, or contest. With their knowledge and consent, you may provide us with your friends' information, or have your information provided, for the purpose of a referral. If you enter a fan registration presale for an event, we process your information to limit fraudulent purchases. If you are rejected, you may still purchase tickets at a later date.

Legitimate Interest

We process your information as necessary for our or others' legitimate interests. You may have the right to object when we process your information based on our legitimate interest. See the "Your Choices" section below for details.

• Security; Fraud Prevention. We use your information to: protect the safety of our fans and users and to ensure the security of our system and the systems of our Event Partners; and to detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of SeatGeek and others.
• Exercise our Rights. We may process your information to exercise or protect our rights in contract or by law (including in any dispute resolution process) or the rights of our users or business partners, including enforcing our terms of use and preventing or protecting against any illegal or authorized activities.
• Marketing. Where permitted, we may contact you with information or offers regarding upcoming events, products, or services via email or push and web notifications. You may update your notification preferences in the "My Account" page on our website or app.
• Market Research. To help improve our Services, we conduct market research and analysis such as surveys and user research.
• Personalization. To make sure our content and features are relevant to you, we profile events you attend and how you use our Services in order to provide the services, including personalized recommendations and custom newsletters. However, profiling for features like fraud screening will still be performed to deliver our Services.

Consent

Where permitted and with your consent, we process your information based on consent. You can withdraw your consent at any time. See "Your Choices" section below for details.

• Marketing. We may contact you with information or offers regarding upcoming events, products, or services via email, SMS, or push and web notifications and send follow up communications (for example, if you abandon your cart we may, with your consent, reach out by email or SMS). During a ticket purchase, you may consent to receive marketing messages from our Event Partners and other third parties involved in providing the event you are purchasing ticket(s) to. If you opt in to such marketing messages, we will pass your consent to the applicable third party so that they can contact you for this purpose. You can opt out by contacting that third party directly or by unsubscribing from their marketing.
• Location-based Services. Our mobile applications may request location permission for features like browsing events near you, receiving push notifications about events, or locating yourself and amenities at an event.
• Accessibility. We may process your data to fulfill your accessibility request.
• Third-party Controllers. In some circumstances, where sharing is not necessary for us to perform the contracts with you for the services you have requested, we will request your permission to share information with third-party data controllers.

Legal Obligation

We process your information as necessary for us to comply with legal obligations such as responding to court orders, subpoenas, government agencies, or investigatory bodies.

Sharing Your Personal Data

We share your personal information as described below or as otherwise described in this Notice:

• SeatGeek Subsidiaries and Affiliates. We may share your information with our subsidiaries and affiliates for the purposes described in the "How We Use the Information We Collect" paragraph above.
• Event Partners. We share your information with our Event Partners (such as teams, leagues, and venues) so that they can operate events, understand their visitors, and for other reasons described in their privacy notices.
• Third-Party Product Providers. If you buy any goods and services fulfilled by third parties (such as merchandise) through our Services, we'll share your information with those providers so that they can process your orders.
• Sellers and Buyers. If you sell, buy, transfer, or share tickets on our Services, we may share your information with the buyer, seller, transferee, or other relevant party to facilitate the ticket sale or transfer.
• Service Providers. We disclose your information to our third-party service providers in order to conduct our business and operate the Services. This includes service providers that provide cloud hosting, tax reporting, customer service, fraud prevention, data analytics, advertising, and marketing communications. SeatGeek also utilizes third-parties to manage automated promotional and marketing text and SMS messages that you may explicitly consent to receiving. We may also use such third-party providers to send you SMS messages when our internal APIs detect you have abandoned your cart. You may reply HELP or STOP at any time to cancel these messages. For more information, please review our Text Message Terms of Service.
• Payment Processors. We disclose your information to payment processors to process online transactions. For users who sell tickets, we utilize Stripe to process all payments and tax-reporting documents on our behalf. When you provide certain personal information, like your SSN, all such information is provided directly by you to Stripe. When we use Stripe for these purposes, Stripe will in most cases act as our processor. However, under some circumstances, Stripe may also act as a controller, for example when monitoring, preventing, and detecting fraudulent payment transactions. For full information about how Stripe processes your personal data, please review their Privacy Policy at www.stripe.com/privacy.
• Legal Disclosures. We may share your information, for instance when we investigate a potential fraud, investigate another unlawful act, respond to a court order or subpoena, cooperate with law enforcement, or investigate a breach of our rules or contracts.
• Successors. We may share your information with any successor to all or part of our business.
• Links to Other Sites, Platforms. Our Services may include links and connections to third-party sites. Your use of such sites and any information you share terms is subject to the privacy practices of the applicable third party. SeatGeek is not responsible for, and this Notice does not address, any information practice by such third party. If you link your Account to a third-party platform (for example, linking your Spotify account), we may provide information necessary to facilitate the integration.

We may also share data in an aggregated and anonymized form, for instance, to understand how users collectively use our Services. When we do this, we ensure that the data we share cannot reasonably be used to identify you or your device. We require any third parties who receive anonymized data to agree not to try to reidentify it.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Data Retention

We retain your information for no longer than is necessary for fulfilling the purposes set out in this Notice and your information will be stored securely as long as we have it. The retention period is dictated by a number of factors, such as the type of information, the purpose for which the information was collected, the legal basis we rely on for processing, statutory requirements, industry guidelines, and our legitimate interests in providing the Services safely and securely and with integrity.

When we no longer have a legitimate reason to process your information, we will delete it or anonymize it such that it no longer identifies you, as permitted or required by law. If you close your Account with us, we may still retain certain information associated with your Account and past transactions for the purposes of compliance with legal and regulatory requirements. We may not be able to delete your Account when you have a pending event with us because otherwise you will not be able to attend the event you have purchased for. If we anonymize data, we commit to not attempt to reidentify the data (except to test our anonymization process).

Data Security

No method of internet transmission or electronic storage is fully secure. While we use reasonable efforts to protect personal information, we cannot guarantee its security. If we are required to inform you about a security incident, we will do so electronically, in writing, or by phone, as the law permits. Some of our websites permit you to create an account. You are responsible for selecting a unique and complex password and keeping it confidential.

You are responsible for any access to or use of your account by someone who has obtained your password, whether or not you approved of such access or use. Notify us of unauthorized use of your password or account immediately.

Your U.S. State Privacy Rights

Certain U.S. states permit residents to request certain details about how their information is used, stored, and shared. Depending on where you reside, you may have some or all of the rights described in the "Your Choices" section below.

For more information on this and your rights under U.S. state privacy laws, please see our U.S. Regional Privacy Notice.

Information for Users Located in the United Kingdom (UK) or European Economic Area (EEA)

If you are located within the UK/EEA, the following information applies to you:

• In collecting your personal information, we are acting as a data controller under applicable UK/EEA privacy laws.
• Unless we otherwise notify you, we do not use the personal information you provide to make any automated decisions that might affect you.
• We will let you know when we collect your personal information if there is a statutory or contractual requirement to provide the personal information.
• Applicable UK/EEA privacy laws give you the right to ask us what personal information we hold about you, and you can also ask us to correct it if it is inaccurate. You can also ask your personal information to be erased and you can ask for us to give you a copy of the information. Under certain circumstances, you also have a right to object to the collection or processing of your personal information or restrict its processing. If you wish to access, correct, erase or restrict or object to the collection or processing of your personal information held by us, please contact us via Contact Us information below.
• Where processing of personal information is based on your consent, you have the right to withdraw consent at any time for future processing.
• If you have a complaint about our use of your personal information, you have a right to lodge a complaint with an applicable data protection authority.
• We process and retain your personal information on servers located in the U.S. and in other geographical territories.
• As set out in this notice, we may share your personal information with third parties, who act as our processors, in which case we will ensure that our processors assume the applicable data protection obligations we are subject to under applicable UK/EEA data protection laws, in particular if any processing is carried out outside the UK or EEA.
• As required by applicable law, we will put in place appropriate or suitable safeguards to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the data protection laws of the country in which you reside. Whenever we transfer your personal information outside of the UK or EEA, we aim to ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: (i) We will transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information. For further details, see ICO: International data transfers (for the UK) or European Commission: Adequacy decisions (for the EEA); and/or (ii) where we transfer your personal information to countries that are not deemed to provide an adequate level of protection for personal information, we will use specific standard contractual clauses (see here for UK and here for EEA) in accordance with the UK/EEA data protection regime which give personal information the same protection it has in the UK/EEA. Please contact privacy@seatgeek.com if you want further information on the specific mechanism used by us when transferring your personal information out of the UK/EEA, including obtaining a copy of the documents (such as standard contractual clauses) used to protect your information.
• We have designated a data protection officer to monitor our compliance with this notice and applicable UK/EEA privacy laws. The data protection officer can be contacted via the Contact Us information below.
• Where we process your personal information based on our legitimate interest, as set out in this notice, we will only do so where the processing is relevant, adequate, and limited to the minimum required in order to achieve the purpose for which the information is collected.
• We comply with the EU-US and Swiss-US Data Privacy Framework and the UK Extension to the EU-US DPF ("DPF"), and have certified our participation in the DPF with the US Department of Commerce. This certification relates to our processing of personal information received from the UK and EEA. If there is any conflict between the terms in this Privacy Notice and the DPF principles, the DPF principles shall govern. To learn more about the DPF, or to review our certification, please visit the DPF website. The Swiss-US Data Privacy Framework will not be relied upon in relation to transfers of any relevant personal information to the US from Switzerland until the date of entry into force of Switzerland's recognition of adequacy (i.e. entry into force of the expected recognition by the Swiss Federal Administration that the Swiss-US DPF ensures data protection consistent with Swiss law).
• In compliance with the DPF, we commit to resolving DPF principles-related complaints about our collection and use of your personal information. Please first contact us at privacy@seatgeek.com with any questions or concerns about our DPF certification. You can resolve any applicable disputes with us related to our certification through the American Arbitration Association (AAA), a non-profit alternative dispute resolution provider located in the United States. You can contact AAA through the AAA Dispute Resolution system here. In some situations, the DPF framework gives you the right to invoke binding arbitration. You can do this to resolve complaints not resolved by other means, as described in Annex I to the DPF framework.
• You may refer to the "Sharing Your Personal Data" section of this Privacy Notice about the type or identity of third parties to which we disclose your personal information and the "How We Use the Information We Collect" section of this Privacy Notice about the purposes for which we make such disclosures. Please note such purposes include the requirement for us to disclose your personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. You may also refer to the "How You Can Access or Change Your Personal Data" section and the "Information for Users Located in the United Kingdom (UK) and/or European Economic Area (EEA)" section of this Privacy Notice about the right you have with respect to your personal information, and the "Your Choices" section of this Privacy Notice about the choices and/or means we offer you for limiting the use and disclosure of your personal information.
• Our compliance with the DPF is subject to the investigatory and enforcement powers of the US Federal Trade Commission. In accordance with the DPF, we may remain responsible for any onward transfers of your personal information to third parties for external processing on our behalf, as described in the "Sharing Your Personal Data" section of this Privacy Notice.

Your Choices

How You Can Access or Change Your Personal Data

Depending on where you reside, you may have some or all of the rights listed below in relation to your personal information:

• Right to Access. You may have the right to request access to and receive confirmation about the personal information that we hold about you.
• Right to Delete. You may have the right to request that we delete personal information we maintain about you.
• Right to Correct. You may have the right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may have the right to receive a copy of the personal information we hold about you in a structured, commonly used and machine-readable format for onward transmission, and to request that we transfer it to a third party, in certain circumstances.
• Right of Restriction of Processing. You may have the right to ask us to stop, suspend or restrict our processing of personal information.
• Right to Object. You may have the right to object to our processing of your personal information, including the right to object to automated processing.
• Right to Withdraw Your Consent. You may have the right to withdraw your consent where we rely on your consent to process your information as a legal basis.
• The Right to Appeal. You may have the right to appeal our decision to deny your request.

However, these rights are not absolute, and may apply only in certain circumstances. We may decline your request as permitted by law, for example, if fulfilling your request would reveal personal information about another person or where they would infringe the rights of a third party (including your rights). In the case of a request for deletion of data, we may nevertheless retain such data in a temporary archived form for the period necessary to satisfy our legal, accounting, or tax obligations.

You may exercise your rights using our privacy form at Your Privacy Choices, on our mobile application by signing into your Account and going to your "My Account" page, or by contacting us using the contact details provided below. Further information may be needed to verify your identity before exercising these rights. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.

If you have a complaint about how we process your personal information, please contact us at our contact details below and we will respond to your request as soon as possible. You may also have the right to complain to your data protection supervisory authority or regulator. Details of the relevant authorities or regulators are available by emailing us at privacy@seatgeek.com. We will not discriminate against you for exercising any of these rights.

Communication Preferences

If you would prefer not to receive email promotions from SeatGeek, you may simply opt-out from receiving them by clicking the "unsubscribe" link included within any email or by updating your notifications preferences in the "My Account" page on our website or app. Please note that, even if you opt-out of promotional emails, we may still send you important service-related communications regarding your account and tickets you may have purchased. If you consented to receive promotional messages via SMS, you may reply HELP or STOP at any time to cancel these messages.

Location Information

You may be asked to consent to the collection of location information on your mobile device. You can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. You may also stop our collection of location information by following the standard uninstall process to remove our mobile application(s) from your device.

When we ask to collect your location information, we will only do so with your consent and limit the processing of this information in order to provide you with the specific location-based services, including providing you with directions to an event or helping you utilize third-party ride-sharing services. In these contexts, it may be necessary to share this information with third parties at your request.

Children's Privacy

At SeatGeek, we do not intentionally collect or process personal information from children under the age of thirteen (13). If a child under 13 submits personal information to SeatGeek and we learn that the information is from a child under 13, we will attempt to delete the information as soon as possible. If you are a parent or guardian and you believe we have collected personal information from your child under 13, please contact us via the Contact Us information below.

Amendments to this Privacy Notice

If SeatGeek decides to change this Notice, we will post the updated notice within the Apps, on this page, and/or the homepage of our website, or other places we deem appropriate. We reserve the right to modify this Notice at any time, so please review it frequently. If we make material changes to this Notice, we will notify you here, by email, or by means of a notice on our homepage.

Contact Us

We care about your personal information and your rights. If you have any questions or comments about this Notice, the ways in which SeatGeek collects and uses your information as described here, your choices and rights regarding such use, need to access this Notice in a different form due to a disability, or wish to exercise your rights under law, please do not hesitate to contact us at:

Email: privacy@seatgeek.com

Website: www.seatgeek.com

Postal Address:
SeatGeek, Inc.
Attn: Legal Department
902 Broadway, 10th Floor
New York, NY 10010

If you are located within the UK, our representative in the UK is SeatGeek Sport Limited, Unit 8 Merchant Court, Monkton Business Park South, Tyne & Wear, NE31 2EX. It can be contacted via privacy@seatgeek.com.

If you are located within the EEA, our representative in the EEA is SeatGeek ApS, Njalsgade 76 2300 Copenhagen S. It can be contacted via privacy@seatgeek.com.