Legal

Privacy Policy

1. About This Policy

This Privacy Policy explains how Come Thru collects, uses, stores, and shares personal information when you visit this website, buy tickets, or contact us about an event.

We are based in Sydney, New South Wales, Australia.

2. Personal Information We Collect

When you purchase a ticket, we may collect your name, email address, order details, ticket details, payment status, and event attendance information such as whether a ticket has been scanned or redeemed.

Payment card details are handled by Stripe. We do not store your full card number, CVC, or full payment card details on our servers.

If you contact us, we may collect the information you choose to provide, including your name, email address, social media handle, and the contents of your message.

We may also collect basic technical information such as device, browser, IP address, and website usage data where this is provided by our website hosting, security, payment, or infrastructure providers.

3. How We Use Personal Information

We use personal information to process ticket purchases, issue tickets, send ticket confirmation emails, manage event entry, prevent fraud, respond to support requests, process eligible refunds, and operate the website.

We may use your contact details to send important event updates, including venue details, timing changes, cancellations, rescheduling information, or refund instructions.

We may use limited information for internal reporting, accounting, legal compliance, security, and improving future events.

4. Sharing Personal Information

We share personal information with service providers where needed to run the website and events. These providers may include Stripe for payments, Supabase for database hosting, Resend for ticket emails, website hosting providers, and event venue or door staff for ticket validation.

We may disclose personal information if required by law, regulation, court order, government authority, payment provider rule, or where reasonably necessary to protect our rights, users, staff, artists, venues, or attendees.

We do not sell personal information.

5. Overseas Service Providers

Some of our technology providers may store or process information outside Australia. Where this happens, we rely on those providers to handle information in accordance with their own privacy and security commitments.

6. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

No website, payment system, or email system can be guaranteed to be completely secure. You should keep your ticket email and QR code private because each ticket can only be scanned once.

7. Retention

We keep personal information for as long as reasonably needed for ticketing, event operations, refunds, accounting, legal compliance, dispute handling, and legitimate business records.

When information is no longer needed, we will take reasonable steps to delete it or de-identify it.

8. Access and Correction

You can ask us to access or correct personal information we hold about you. We may need to verify your identity before responding.

For ticketing or privacy requests, contact us through the email address listed in your ticket confirmation or through our official Come Thru event channels.

9. Cookies and Third-Party Services

This website and our service providers may use cookies, local storage, or similar technologies to operate checkout, protect the site, remember session information, and understand basic website performance.

Third-party services, including Stripe, may set their own cookies or collect information when you use their checkout or payment flows.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.