Privacy Policy

Effective Date: 1 November 2026

1. Introduction

hi.Malta ("we," "us," or "our") operates an online ticketing platform that enables event organisers to create, manage, and sell tickets to their events, and enables customers to discover and purchase tickets to events. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our platform.

2. Information We Collect

2.1 Information You Provide

When you use our platform, you may provide us with:

• Account Information: Name, email address, phone number, password, and profile information
• Payment Information: Credit/debit card details, billing address, and payment history
• Transaction Information: Ticket purchases, order history, and event attendance records
• Event Organiser Information: Business details, banking information for payouts, and tax information
• Communications: Messages sent through our platform, customer support inquiries, and feedback

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages viewed, features used, time spent on platform, and search queries
• Location Data: General location based on IP address
• Cookies and Similar Technologies: As described in our Cookie Policy

3. How We Use Your Information

We use your information to:

• Process ticket purchases and deliver digital tickets
• Facilitate payments between customers and event organisers
• Verify identity and prevent fraud
• Send order confirmations, ticket updates, and event reminders
• Provide customer support and respond to inquiries
• Improve our platform and develop new features
• Send marketing communications (with your consent)
• Comply with legal obligations and enforce our Terms of Service
• Analyse platform usage and generate anonymised analytics

4. Information Sharing and Disclosure

4.1 Event Organisers

When you purchase tickets, we share necessary information (name, email, ticket quantity) with the event organiser to facilitate event entry and communication.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment processors (e.g., Stripe, PayPal)
• Email service providers for transactional and marketing emails
• Cloud hosting and storage providers
• Analytics and performance monitoring services
• Customer support platforms

4.3 Fraud Prevention and Security

We may share information with banks, card issuers, payment processors, fraud prevention services, credit reference agencies, and law enforcement where we consider it necessary or appropriate to detect, investigate, prevent, or respond to fraud, chargebacks, money laundering, illegal activity, abuse of our Platform, or breach of our Terms of Service. This is done on the basis of our legitimate interests (and those of our users and payment partners) in maintaining a safe and trustworthy Platform.

4.4 Legal Requirements

We may disclose information where required by law, court order, regulator, or government request, or where we consider it necessary to establish, exercise, or defend our legal rights, to protect our property or safety, or the rights, property, or safety of our users or third parties.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement reasonable, industry-standard technical and organisational measures designed to protect personal information, including:

• Encryption of data in transit and, where appropriate, at rest
• Use of PCI-DSS compliant third-party payment processors (we do not store full card details)
• Periodic security reviews and vulnerability monitoring
• Access controls, authentication, and role-based permissions
• Training for personnel with access to personal information

No system, transmission, or storage method is completely secure. We cannot and do not warrant absolute security. To the maximum extent permitted by law, we are not liable for any unauthorised access, disclosure, loss, or alteration of personal information that occurs despite the implementation of reasonable security measures, including as a result of hacking, phishing, social engineering, credential theft, or third-party compromise.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Transaction records are retained for accounting and tax purposes for at least 7 years.

7. Your Rights and Choices

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent for marketing communications
• Opt-out of certain cookies through your browser settings

To exercise these rights, please contact us at hello@himalta.mt

8. Children's Privacy

Our platform is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or by a notice on the Platform. Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.

11. Limitation of Liability

To the maximum extent permitted by law, our liability under or in connection with this Privacy Policy is limited as set out in our Terms of Service. Nothing in this Privacy Policy excludes or limits any right or remedy that cannot be excluded under applicable mandatory data protection law.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

hi.Malta Email: hello@himalta.mt Address: Marsascala, Malta Phone: +356 9916 1718