Product privacy notice. Not solicitor advice.
Who we are
Exeter Ticket Exchange is a student peer-to-peer ticket marketplace. Not affiliated with the University of Exeter or the Students' Guild. For data requests, email hello@exeterticketexchange.com.
What we collect
University email (@exeter.ac.uk), real name (public on listings by design), optional Instagram/Snapchat handles and course, referral codes, device id for the once-per-device wheel, session cookies, encrypted ticket screenshots and QR payload hashes, order/payment intent ids, dispute evidence you upload, and basic audit events (e.g. list, buy, dispute).
Why we use it
To run the marketplace (account, listing, checkout, release, disputes), prevent fraud and duplicates, show trust signals, and operate referrals and fee credits. Legal bases we rely on in product terms: contract (providing the service) and legitimate interests (fraud prevention, safety).
Payments
Card data is handled by Stripe. We store payment intent / status ids and, if you sell, your Stripe Connect Express account id and whether payouts are enabled — not full card numbers. Stripe's own privacy notice applies to payment processing. If Stripe is in test mode, no real charges are taken.
Sharing
Buyers who pay see the ticket image and entry details they need. Public profiles show your real name and optional socials. We do not sell your data. Processors: hosting and database, Stripe for payments, and email delivery if configured.
Retention
Ticket screenshots are intended to be deleted ~30 days after the event. Audit and dispute records are kept longer so we can handle chargebacks and bans (target ~24 months). You can ask about deletion; some records may need to stay for fraud/dispute reasons.
Your choices
Real name is required and public once set — that's how trust works here. Socials and course are optional. You can sign out anytime. Under-18s: do not use the product.
See also Terms and How resale works.