Privacy policy

SOCLUB Group Inc. is responsible for personal information under its control in connection with SOCLUB websites, applications, ticket purchases, memberships, events, Marketplace goods and services, inquiries, media and related services. Privacy questions, access requests and complaints may be sent to the Privacy Officer at info@soclubgroup.com.

• Guest ticket purchase information. No account is needed to buy tickets. At checkout we collect the name, email address and phone number you give us, your order details, ticket numbers, the QR code for each ticket and the private receipt link sent to you.
• Check-in information. When a ticket is scanned at entry we record the time, the result (for example admitted or already used) and the staff member who scanned it.
• Account and identity information for people who sign in, such as members, staff, hosts and partners: name, email, profile image, age confirmation, authentication identifier and membership tier.
• Event, ticket, product, service-request and transaction information, including event dates, attendance, ticket passes, service location, guest count, briefs, messages, quote versions, orders, shipping or fulfilment, booking status, refunds and disputes.
• Vendor, seller and organizer information, including business identity, services or products, qualifications, insurance indicators, tax status, permits, connected payment-account identifiers and payout settings.
• Technical and security information, such as IP address, device and browser information, timestamps, authentication events, rate-limit records, audit history and suspected abuse signals.
• Support, feedback, reviews and other information you choose to provide.

Stripe processes payment credentials. SOCLUB does not store complete card numbers or card security codes. We receive transaction identifiers, amounts, currency, payment status, refunds, disputes and connected-account information needed to operate and reconcile purchases and bookings.

• Process guest ticket purchases and deliver them by email: your confirmation, receipt, QR tickets and a printable PDF. If you use "Find my tickets", we re-send them only to the email address used at purchase, and we do not confirm to anyone else whether that address bought tickets.
• Contact you by phone or text message only about your purchase or the event, for example a change of time or venue, entry details or a problem with your order. We do not use your phone number for marketing.
• Verify tickets at entry by scanning QR codes, prevent duplicate or invalid admission and keep a record of check-in.
• Create and secure accounts for people who sign in, verify eligibility and record current legal acceptance.
• Operate events, tickets, membership, Marketplace goods and services; match members and approved vendors; maintain private conversations; prepare quotes; process orders and bookings; and coordinate fulfilment.
• Process and reconcile payments, vendor transfers, refunds, disputes, taxes and accounting records.
• Send essential purchase, ticket, receipt, event-change, account, verification, order, booking and message notifications. Conversation notifications do not include private message text. Purchase confirmations include receipt amounts, event details and the information needed to identify and access your purchase.
• Prevent fraud, abuse, off-platform circumvention and security incidents; enforce standards and resolve disputes.
• Improve accessibility, reliability, customer support and operations; meet legal, regulatory and insurance obligations.

We seek meaningful consent where required. Some processing is necessary to provide a requested service, perform a contract, protect our services or comply with law. Marketing consent is separate and optional: buying a ticket does not sign you up for marketing, and withdrawing marketing consent does not stop essential purchase or event communications.

We share information only as reasonably necessary with the event organizer, venue, member or vendor involved in a purchase or request; service providers supporting payment, email delivery, hosting, authentication, fraud prevention, analytics or support; professional advisers, insurers and auditors; a successor in a permitted business transaction; and authorities or other parties where required or permitted by law or needed to protect rights and safety.

We do not sell personal information. Organizers, vendors and members may not use information they receive through SOCLUB for unrelated marketing, data brokerage, scraping or off-platform solicitation.

Providers such as Stripe (payment processing) and Resend (email delivery), together with our hosting and database providers, may process information in Canada, the United States or other jurisdictions. Information in another country may be accessible to courts, law enforcement and regulators there. SOCLUB uses contractual, organizational and technical measures appropriate to the sensitivity of the information.

We retain information only as long as reasonably needed for the purposes described, including purchases, active accounts, bookings, tax and accounting obligations, fraud prevention, insurance, disputes and legal claims. Guest purchase and check-in records, including the purchase email address, are kept as transaction records. Retention periods differ by record type. Immutable agreement and audit records may be retained for the period needed to prove authorization and transaction history. Information is securely deleted or de-identified when no longer required, subject to backups and legal holds.

Measures include private, signed receipt links, single-use admission checks, server-side authorization, encrypted transport, restricted administrative access, origin and content-type checks, database-backed rate limiting, signed payment webhooks, idempotent payment processing, audit records, encrypted backups and restoration testing. No system is perfectly secure: keep your tickets, PDF and receipt link private, protect any account credentials and report suspected compromise promptly.

Subject to applicable law, you may request access to or correction of personal information, ask questions about use and disclosure, withdraw consent where processing depends on consent, unsubscribe from marketing, or complain about our practices. If you bought tickets as a guest, write to us from the purchase email address where possible and include your order or ticket number. Identity verification may be required. Some information cannot be deleted immediately where needed for contracts, admission, security, accounting, disputes or law.

Our services use technologies necessary for security, checkout, payment, session continuity, sign-in and preferences. See the Cookie Policy for categories, providers and choices. We will provide any consent controls required before introducing non-essential advertising or analytics technologies.

General SOCLUB membership and Marketplace access are intended for adults aged 18 or older, and events may set a higher minimum age. We do not knowingly create memberships for children. Contact the Privacy Officer if you believe a child supplied personal information.

Security and fraud tools may flag activity for restriction or human review. Ticket scanning automatically checks whether a ticket is valid for entry; staff can review any refusal. SOCLUB does not currently make solely automated decisions that produce legal or similarly significant effects about membership or vendor acceptance.

SOCLUB investigates suspected privacy and security incidents, limits harm, preserves necessary evidence and provides notices to individuals and regulators where required. You may also raise a concern with the Office of the Privacy Commissioner of Canada or another competent privacy regulator.

We may update this Policy as operations or law change. Material changes will carry a new effective date and will be presented for notice or renewed consent where required. Earlier versions and acceptance records are retained where necessary for accountability.