Privacy notice
This notice says what personal data EventFlow collects, why, who sees it and how long we keep it. It follows Qatar Law No. 13 of 2016 on the Protection of Personal Data Privacy.
What we collect
When you book tickets
- Your name, email address and mobile number.
- The names of the people who use the tickets, if you give them.
- Your bookings, tickets, check-ins at the gate, waitlist places and feedback.
- A payment reference from our payment provider, Tap Payments. We never see or store your card number.
When you work as event crew
- Your name, date of birth, gender, nationality, residency status, phone number, city and emergency contact.
- Your ID number, its expiry date and a copy of your ID document.
- Your photos, height, weight, uniform and shoe size, and other appearance details that organizers ask for.
- Your languages, skills, CV, applications, shifts, ratings and hours.
- A selfie and your location when you check in to and out of a shift.
When you work for an organizer or supplier
- Your name, email address, role and the actions you take in the console.
When you use the site
- Your IP address, device and browser, and the pages you open. We use cookies only to keep you signed in, remember your language and protect forms. We do not use advertising cookies.
Why we use it
- To sell you tickets, send them to you and let you in at the gate.
- To match crew with jobs that fit them, and to record shifts, hours and amounts for organizers' payroll. We do not pay crew; the organizer pays them.
- To keep accounts, payments and check-ins secure and to prevent fraud.
- To keep the records that Qatar law requires for sales and payments.
- To send you offers and news, only if you switch this on. You can switch it off at any time.
We process crew ID documents, photos and appearance details only with your clear agreement, which you give when you create a crew profile.
Who sees it
- The organizer of an event sees the bookings and tickets for that event.
- Staffing managers see a crew profile only when the person applies to their job, or when the person makes the profile searchable. Opening an ID document is logged, and the crew member can see who looked.
- Tap Payments processes card payments.
- Our hosting, email and messaging providers process data for us under contract.
- Government authorities, when Qatar law requires it.
We do not sell personal data.
How long we keep it
- Check-in selfies and locations: 90 days after the shift.
- Contact details on checkouts that were not paid: 30 days.
- Records of who opened a crew profile: 730 days.
- Your account and profile: until you delete them.
- Paid bookings, hours and amounts: as long as Qatar law requires for business records. When you delete your account we remove your name and contact details from them.
Your rights
- See and download your data.
- Correct your details in your account or crew profile.
- Withdraw a consent you gave. This does not affect what we did before.
- Delete your account.
- Object to how we use your data, or complain to us.
Use the Your data page to do most of this yourself. Open Your data
If you are not satisfied with our answer, you can complain to the National Cyber Security Agency, which supervises personal data protection in Qatar.
Children
Accounts are for people aged 18 or older. A parent or guardian buys tickets for a child and gives the child's name only when the event needs it. Crew must be 18 or older on the day of the shift.
Security and breaches
We encrypt connections, limit who can open personal data and log access to ID documents. If a breach may harm you, we tell you and the National Cyber Security Agency within 72 hours of finding it.
Changes to this notice
When this notice changes, we change its version number and tell you before the change applies to you.
Who we are
EventFlow runs EventFlow.