Privacy Policy

1. Introduction

Guratike ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our event management and ticketing platform ("Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide

• Account Information — name, email address, display name, and password when you register for an account.
• Profile Information — role preferences (organizer or buyer), profile photo, and other optional details.
• Event Information — event titles, descriptions, venue details, images, ticket categories, and pricing (for organizers).
• Transaction Information — ticket purchase records, reservation details, and payment confirmation data.

2.2 Information Collected Automatically

• Device & Browser Data — IP address, browser type, operating system, device identifiers, and screen resolution.
• Usage Data — pages visited, features used, timestamps, click patterns, and referral URLs.
• Cookies & Similar Technologies — we use cookies and local storage to maintain sessions, remember preferences, and improve your experience.

3. How We Use Your Information

We use the collected information to:

• Create, maintain, and secure your account.
• Process ticket purchases, reservations, and free ticket requests.
• Generate and deliver QR-based digital badges for event entry.
• Enable organizers to manage events, track sales, and view analytics.
• Send transactional notifications (purchase confirmations, ticket approvals, etc.).
• Improve, personalize, and optimize the Service.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our Terms of Use.

4. Information Sharing & Disclosure

We do not sell your personal information. We may share information in the following cases:

• With Event Organizers — when you purchase or request a ticket, the organizer receives your name and email to manage attendance.
• Service Providers — trusted third parties that help us operate the Service (hosting, database management, analytics). These providers are bound by confidentiality agreements.
• Legal Requirements — when required by law, court order, or governmental authority, or to protect our rights, safety, or property.
• Business Transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Data Storage & Security

Your data is stored on secure servers with industry-standard protections including encryption in transit (TLS/SSL) and at rest. We implement access controls, regular security audits, and monitoring to protect against unauthorized access or data breaches.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Transaction and ticket records may be retained for a longer period to comply with legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention obligations.
• Portability — request a machine-readable copy of your data.
• Objection — object to certain processing activities, such as direct marketing.

To exercise any of these rights, contact us at privacy@guratike.com. We will respond within 30 days.

8. Cookies

We use the following types of cookies:

• Essential Cookies — required for authentication, session management, and core functionality.
• Analytics Cookies — help us understand how users interact with the Service to improve performance and features.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete it promptly.

11. International Data Transfers

Your information may be processed and stored on servers located outside your country of residence. By using the Service, you consent to the transfer of your data to jurisdictions that may have different data protection laws. We take appropriate safeguards to ensure your data remains protected.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Governing Law

This Privacy Policy is governed by the laws of the Republic of Rwanda, including the Law N° 058/2021 relating to the protection of personal data and privacy. Any disputes shall be subject to the exclusive jurisdiction of the courts of Rwanda.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at: