Notice for people who don't use Eventbrite services
Eventbrite, Inc. (“Eventbrite”, “we”, “our” or “us”) may process your name, phone number and/or other contact information if we receive it from our users through certain features available on the Eventbrite Services, such as Eventbrite Friends (collectively, “Contact Uploading”). We process this information even if you’re not an Eventbrite user and don’t have an account with us (a “Non-User”).
About Contact Uploading and how it works
When a user uses Contact Uploading and gives us access to their device’s address book, we will access and upload certain contact information, such as phone numbers, in their address book to our servers. This contact information may include people who are Eventbrite users and other contacts who are not users and don’t have an Eventbrite account (i.e., Non-Users).
What information is collected about Non-Users?
We collect the phone number of a user's contacts, and may collect name and other contact information as well.
How do we use a Non-User’s information?
Contact Uploading is part of certain features of the Eventbrite Services, such as the Eventbrite Friends feature where users can connect with friends and, with their friends’ permission, see the events for which their friends have purchased tickets or registered. Users can also share information about their own event attendance with those friends. Users choose to upload their device's address book to Eventbrite, and we will process the phone numbers in the address book to see if any of the numbers belong to other users.
If a user’s contact is also on Eventbrite, we can suggest this contact as someone the user can request to follow on Eventbrite Friends. Users may also invite Non-Users to join Eventbrite. If a Non-User later joins Eventbrite, we will use the phone number to suggest them as a friend on the Eventbrite Friends feature.
Finally, we will also use the address books uploaded to investigate suspicious activity on the Eventbrite Services and keep our platform safe and secure.
We may share the information we collect with vendors that help power the Eventbrite Friends feature and with our parent companies, subsidiaries, and our affiliates for the purposes described in this Notice. We may also share your information if required to do so by law in order to (for example) respond to a subpoena or request from law enforcement, a court or a government agency (including in response to public authorities to meet national security or law enforcement requirements), or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect or defend our rights, interests or property or that of third parties, (c) prevent or investigate possible wrongdoing in connection with the Services, (d) act in urgent circumstances to protect the personal safety of Users of the Eventbrite Services, or the public, or (e) protect against legal liability.
We retain Non-User’s personal information for as long as needed to provide the Contact Importer feature to users and for the purposes described above. In certain cases, we may need to keep your contact information for longer, including after you ask us to erase it. This includes for legal reasons such as to respond to a legal request or comply with applicable law, for regulatory or litigation matters, to prevent harm or for safety, security and integrity purposes. The length of time we need to keep it will depend on the specific reason.
How Non-Users can exercise their rights
We provide Non-users the ability to exercise their rights under applicable laws. For example, you can ask us to confirm whether we have your phone number or other contact information. If we do, you can request that we delete it from our address book database. To prevent it from being uploaded to this database again through someone’s address book, we need to keep a copy in our block list. Please note that if you'd like us to delete and block more than one type of contact information, we need to confirm each separately.
To exercise your rights please complete the form available here . If you have a complaint, contact us at privacy@eventbrite.com. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.
How we Transfer information
As Eventbrite is a global company, we may need to transfer your information outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with who may be located in jurisdictions outside the EEA, Switzerland and the UK which have no data protection laws or laws that are less strict compared with those in Europe.
Whenever we transfer your information outside of the EEA, Switzerland or the UK, we take legally required steps to make sure that appropriate safeguards are in place to protect your Personal Data. This includes the use of Standard Contractual Clauses issued pursuant to Commission Implementing Decision (EU) 2021/914 of June 4, 2021 of the European Parliament and of the Council, and for transfers from the UK, the UK International Data Transfer Addendum (IDTA).
Eventbrite has also certified its compliance with the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework, and the UK Extension to the EU-US Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data transferred from those countries. We have certified that we adhere to the Data Privacy Framework principles of Notice, Choice, Accountability for Onward Transfers, Security, Data Integrity & Purpose Limitation, Access, and Recourse, Enforcement & Liability when processing Personal Data from the EEA, Switzerland or the UK in the United States. You can find out more about our commitment to the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework, and the UK Extension to the EU-US Data Privacy Framework in our Data Privacy Framework Notice.
Residents of Certain U.S. States
If you are a resident of a U.S. state that has implemented a law that provides you with additional rights regarding your personal data including California, Virginia, Colorado, Connecticut, Utah or Nevada, we provide additional information about our information practices and you may have certain rights with respect to your information. For more information, please see the State-Specific Supplemental Privacy Notices.
Contact us
If you have questions about this Notice, or have questions, complaints or requests regarding your information, please contact us at privacy@eventbrite.com.