Privacy Policy

Effective date: October 16, 2026

Who we are

Tooq Inc.runs tix.tooq.ca (the Service), which sells tickets for artists, venues and festivals (Organizers). This policy explains what personal information we collect, why, who we share it with and your choices.

Privacy officer: Brian MacKay contact@mytooq.com. Contact them with any question or request.

When an Organizer gets your information (for example the attendee list for their event, or your email if you chose to share it with them), their own privacy policy also applies to what they do with it.

What we collect and why

What

Why

Name, email, and for some events phone and billing address

To sell and send your tickets, contact you about your event, and handle refunds

Ticket holder names

For named tickets checked at the door, and tickets you send to someone

Order details (what you bought, when, amounts, tax)

Your receipt, the Organizer's settlement, our accounting and tax records

Payment details

Handled by Stripe. We get a payment reference and the last digits of your card, never the full number

Check-in records (when a ticket was scanned, by which door)

Entry, preventing reuse of tickets, attendance counts

IP address, browser details and order patterns

Security, stopping bots and ticket scalping, fraud checks

Your email choices (what you agreed to, the exact words, when)

To prove consent and honour unsubscribes

For crew, volunteers and artists: name, role, email, phone (optional)

To issue and check passes; the phone is for the coordinator only

For Organizers and team members: contact, tax and payout details, and what you change in the dashboard

To run your account, pay you, and keep an audit record

We collect only what we need for these purposes and don't sell or lease personal information.

Emails

Tickets and event updates. When you buy, we email your tickets and updates about your event: changes to the lineup, date, time or venue, and cancellations. These are part of your purchase, not marketing, so you can't opt out of them while you hold a ticket.

News and offers. We only send these if you tick the box at checkout. Each box says who will email you:

  • From us: we keep your email and send our own news. Unsubscribe any time with the link in every email or on the Email preferences page.
  • From an Organizer: if you tick "Share my email with [Organizer]", we give that Organizer your name and email so they can send you their own news. The Organizer then has your address and handles it under their own privacy policy, which is linked next to the box. To stop their emails, use the unsubscribe link in their emails or contact them. Unsubscribing from us doesn't remove your address from a list the Organizer has already downloaded.

Organizers only get this option once they've published a privacy policy and agreed to use the list for their own news only, honour unsubscribes and never sell or share it.

We keep a record of what you agreed to, the exact words you saw and when, as Canada's Anti-Spam Legislation requires.

Who we share it with

  • The Organizer of your event: your name, ticket details, check-in status, and your email so they can contact you about the event. Their door staff see names at entry. They may only use this to run the event, unless you chose to join their mailing list.
  • Stripe (payments). When the Organizer is paid through their own Stripe account, Stripe processes your payment for them. Stripe's privacy policy applies to card details.
  • Service providers who work for us under contract, applications used in providing our services, and phone wallet passes (Apple Wallet and Google Wallet, only if you add a ticket to your wallet).
  • People you send tickets to, when you transfer or resell a ticket: they see the event and ticket, not your payment details.
  • When the law requires it, or to protect people's safety, prevent fraud or enforce our terms.

We don't sell personal information or share it for anyone else's advertising.

Where it's kept, for how long, and how it's protected

Where. Our servers are in Toronto and Edmonton, Canada. Some providers (such as Stripe and Cloudflare) may process information in the United States and other countries, where it can be accessed by those countries' authorities under their laws.

How long.

Information

Kept for

Orders, tickets and payment records

7 years, for tax and accounting

Check-in and scan records

2 years after the event

Consent records and unsubscribes

As long as we email you, then 3 years as proof

Security records (IP addresses, blocked attempts)

Up to 90 days.

Crew and volunteer pass details

1 year after the event

After that we delete or anonymize it.

Security. Access is limited to people who need it, sign-ins are protected, ticket links are signed so they can't be guessed, and changes in the dashboard are logged. No system is perfectly secure; if a breach creates a real risk of significant harm to you, we'll tell you and the privacy commissioner as the law requires.

Your choices and rights

You can ask us to:

  • show you the personal information we hold about you,
  • correct it,
  • delete it, where we don't need to keep it for the law (for example tax records), or
  • withdraw consent to news and offers at any time.

Email the privacy officer at contact@mytooq,com. We'll answer within 30 days. If you're not satisfied, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

Cookies

We use cookies to keep you signed in, hold your cart and protect checkout from bots. We don't use advertising cookies. Analytics to track traffic and how the site is used are tracked by our own instance of Umami on our own hardware.

Children

The Service isn't meant for children under 13. A parent or guardian should buy tickets for them. If we learn we've collected a child's information without consent, we'll delete it.

Changes

We'll post any changes here with a new effective date, and tell you by email about significant ones.

Contact

Privacy officer: Brian Mackay contact@mytooq.com