Subprocessors

A subprocessor is a third party we engage to process personal data as part of delivering 263tickets — to take a payment, send your ticket, or store a file, for example. Each is bound by a contract with data-protection obligations equivalent to ours, and may only use the data to provide its service to us. We notify organisers before we add or replace one. Regions below reflect where each provider principally operates; the definitive location for any provider is set out in that provider's own data-processing agreement.

Where an organiser connects their own advertising account, we can send conversion data — with identifying fields hashed — to that organiser's Meta or TikTok account through the provider's server-side Conversions API. This is off by default, configured per organiser, and used only to serve that organiser's own campaigns. It applies only to organisers who switch it on, and to attendees who accept marketing cookies.

Our payment rails run in Zimbabwe. Most other providers above operate in the United States or globally. Where personal data crosses borders we rely on safeguards appropriate to the markets involved, consistent with GDPR, POPIA, and Zimbabwe's Cyber and Data Protection Act.

This is the current set of subprocessors and may change as the platform evolves; we notify organisers before adding or replacing one. To raise an objection or ask a question, email privacy@263tickets.com.