Privacy policy

First version of 1 November 2026

This Privacy Policy explains what personal data we process when you use the website https://tixy.shop (the "Website") and the tixy bot in Telegram @tixyshopbot (the "Bot"), why we process it, who we share it with, how long we keep it and what rights you have.

The Website lists events whose tickets are sold by organisers on their own websites (the "Organiser"). You buy a ticket on the Organiser's website. Payment, the order, tickets and emails are handled by the Organiser as a separate data controller, under its own terms and privacy policy. The Website and the Bot do not take payments or sell tickets.

1. Who we are

1.1. Data controller: sole proprietor (FOP) Ihor Mykhailovych Revenko, tax number 3115205077, registered address: Ronalda Reihana St, 26, 327, Kyiv, Ukraine ("we").

1.2. Contact for personal data questions: hello@tixy.shop.

2. What data we process

2.1. You can browse the Website without telling us anything about yourself.

2.2. When you use the Website, we and our partners automatically receive technical data: your IP address, device and browser type, language, the pages you open, the website you came from, the date and time of your visit, and cookie data (section 3).

2.3. When you turn on reminders in the Bot, we keep your Telegram chat ID, the events you chose, your language, the time you turned reminders on and the messages the Bot sent you. The Bot does not ask for your phone number.

2.4. When you write to us, we receive your email address and the content of your message.

3. Cookies and similar technologies

3.1. The Website uses cookies, pixels and similar technologies ("cookies"). These are small records stored in or read from your browser.

3.2. We use these types of cookies:

  • necessary: keep the Website working and secure, including protection against bots and attacks, and remember your cookie choice;
  • functional: remember your settings to make the Website easier to use;
  • analytics: help us understand how people use the Website and improve it;
  • advertising: help show event ads to people who may be interested and measure their results.

3.3. Some cookies are set by our analytics and advertising partners. They also process the data they receive under their own terms and privacy policies.

3.4. We set all cookies other than necessary ones only with your consent. You can withdraw consent at any time as easily as you gave it. You can also delete or block cookies in your browser settings. Without necessary cookies, parts of the Website may not work.

3.5. Event pages may include videos, music and other content from third-party services, and links to third-party websites. Such content and websites follow their owners' rules.

4. The Bot

4.1. The Bot sends reminders and updates about the events you chose. You cannot buy tickets in the Bot.

4.2. You can turn reminders off at any time:

  • with the "Don't remind me" button under a message about an event: reminders for that event end;
  • with the /stop command: all reminders end and your chat ID is deleted immediately;
  • by blocking the Bot in Telegram: the same as /stop.

4.3. The Bot's messages pass through Telegram, which processes them under its own terms and privacy policy (telegram.org/privacy).

5. Why we process data

5.1. We process data to:

  • run the Website and the Bot and deliver reminders and updates about the events you chose on time. Legal basis: carrying out your request;
  • protect the Website and the Bot from abuse, attacks and errors. Legal basis: our legitimate interest;
  • keep statistics and improve the Website. Legal basis: our legitimate interest, and your consent for analytics cookies;
  • show event ads and measure their results. Legal basis: your consent;
  • answer your messages and meet legal requirements. Legal basis: our legitimate interest and legal obligation.

5.2. The legal bases are set out in Article 11 of the Law of Ukraine "On Personal Data Protection" and, for people in the European Union, Article 6 of the EU General Data Protection Regulation (GDPR).

5.3. We do not sell, trade or rent personal data.

6. Who we share data with

6.1. Service providers that help us operate: hosting and data storage, protection against attacks, message delivery, error monitoring, analytics and advertising. Providers receive only the data their service needs and process it on our instructions. Analytics and advertising partners also process data under their own policies (clause 3.3).

6.2. Telegram, to run the Bot (clause 4.3).

6.3. We do not share Bot data with Organisers. When you go to an Organiser's website, the link may contain a mark showing that you came from tixy. From then on, the Organiser processes your data under its own privacy policy.

6.4. Public authorities, only in the cases and in the manner provided by law.

6.5. Some providers and partners may process data outside Ukraine and the European Economic Area. In such cases the data is protected by safeguards provided by law, including standard contractual clauses.

7. How long we keep data

7.1. We keep data for as long as needed for the purpose it was collected for, or as long as the law requires. After that, it is deleted or anonymised.

7.2. Your chat ID with the Bot is kept while you use reminders. It is deleted by the /stop command, by blocking the Bot, or after a long period with no events you are waiting for.

7.3. How long cookies are kept depends on their type. You can delete cookies at any time in your browser settings.

7.4. For recovery after a failure, data is kept for a limited time in encrypted backups.

8. Your rights

8.1. Under the Law of Ukraine "On Personal Data Protection" and, for people in the EU, the GDPR, you have the right to:

  • know who processes your data and why, and access it;
  • have your data corrected or deleted;
  • restrict processing or object to it, including processing based on legitimate interest;
  • withdraw consent at any time. This does not affect processing that took place before withdrawal;
  • for people in the EU: receive your data in a structured, machine-readable format;
  • complain to the Ukrainian Parliament Commissioner for Human Rights, and for people in the EU, also to the data protection authority of their country.

8.2. To use a right, write to hello@tixy.shop. We reply within 30 calendar days. We may ask you to confirm that the data relates to you, but we never ask for card numbers or passwords.

9. Children

9.1. The Website and the Bot are not intended for children under 14. If you believe a child has given us data without parental consent, write to us and we will delete it.

10. Data protection

10.1. We take organisational and technical measures to protect data from loss, alteration and unauthorised access. Data is sent over encrypted connections and stored in infrastructure with an appropriate level of protection. Only people who need access for their work have it.

11. Changes to this Policy

11.1. We may update this Policy. A new edition is published on this page with its date.