This Privacy Policy explains how Boletos Express Inc. ("Boletos Express," "we," "us" or "our") collects, uses, shares and protects personal information when you use www.boletosexpress.com, our promoter portal, apps, box office and related services (the "Services"). It applies to Fans who browse or buy tickets and to Promoters who create events and sell tickets. Purchase, fee, refund and payout terms are covered in our Terms of Use.
1. Who We Are
Boletos Express provides ticketing services and sells tickets as an agent for the promoters, organizers and venues that produce events ("Event Organizers"). When a Fan buys a ticket, both Boletos Express and the Event Organizer for that event receive information about the purchase. Each Event Organizer is responsible for its own use of that information under its own privacy policy.
2. Information We Collect from Fans
- Contact and account information: name, email, phone number, mailing/billing address, and account login details.
- Order information: events, tickets, seats, prices, fees, delivery method, and ticket scan/entry records.
- Payment information: card details are entered on our site and processed by our payment processor(s). We do not store your full card number or security code (CVV/CSC). We retain limited details, such as card type, last four digits and expiration date, to identify orders, verify ticket pickup and prevent fraud.
- Communications: messages to customer service and your communication preferences.
3. Information We Collect from Promoters
- Business and contact information: legal and business name, contact person, email, phone, address, and account login details.
- Payout and tax information: bank account details for payouts, taxpayer identification numbers and tax forms (such as Form W-9), which we use only for payouts, tax reporting, identity verification and fraud prevention, and protect with restricted access.
- Event information: event details, pricing, inventory, Promoter Content (images, flyers, videos), sales and settlement records.
- Verification information: information needed to confirm identity and authority to sell tickets for an event, which may include government ID or venue and artist agreements.
3A. Information Collected Automatically (All Users)
3.1 Device and usage data
IP address, device and browser type, operating system, approximate location (derived from IP), referring pages, pages viewed, and dates/times of visits.
3.2 Cookies
We use cookies and similar technologies to operate the Services (for example, keeping items in your cart and keeping you signed in), to understand how the Services are used, and to measure and deliver advertising.
3.3 Pixels and analytics/advertising tools
Third-party tools on the Site currently include:
- Meta (Facebook/Instagram) Pixel — measures the effectiveness of ads and helps show ads to people who may be interested in events. It may collect pages viewed, actions taken (such as viewing an event or completing a purchase), and device identifiers.
- Google Tag Manager and Google Analytics — helps us manage site tags and understand site traffic and usage.
- Server-side conversion tracking — such as the Meta Conversions API and similar tools from other advertising platforms, which send event and purchase information (for example, event viewed, tickets added to cart, purchase completed, order value, and hashed email or phone number) directly from our servers to the advertising platform to measure ad performance and build advertising audiences.
- Custom conversions and advertising audiences — we may define custom conversion events (for example, purchases for a specific event, artist or city) and create custom and lookalike audiences from Site activity or hashed contact information, to show relevant event ads to Fans and similar people.
- Other advertising and conversion-tracking pixels — which may include the TikTok Pixel, Google Ads conversion tracking, Snapchat, X (Twitter) and similar tags.
- Promoter-installed pixels — Promoters may be permitted to add their own pixels or conversion tags to their event pages (see below).
- Session analytics — tools that record how visitors interact with pages (such as clicks, scrolling and heatmaps) to improve the Site. We configure these tools not to capture payment card information.
- Fraud-prevention and security tools — including tools from our payment processors and bot-protection services, which may collect device, browser and network information to detect fraud, bots and unauthorized activity.
We may add or change these technologies over time; this Section describes the categories we use.
Where we allow Promoters to add their own tracking pixels to their event pages, those Promoters' pixels may collect similar information for the Promoter's use under the Promoter's own privacy policy. These providers may combine information collected on our Site with information they collect elsewhere.
4. How We Use Information
- To process and deliver ticket orders, verify identity at pickup or entry, and provide customer service.
- To operate promoter accounts, publish events, calculate settlements, make payouts, and meet tax reporting obligations.
- To send transactional messages about orders, events, payouts and accounts, including changes, postponements, cancellations and refunds.
- To send marketing about events and our services, where permitted by law and subject to your choices.
- To prevent, detect and investigate fraud, chargebacks, bots, and violations of our Terms.
- To operate, analyze, secure and improve the Services.
- To measure and deliver advertising.
- To comply with law, enforce our agreements, and resolve disputes.
5. How We Share Information
- With Event Organizers (Fan data). We share Fan names, contact information and order details with the Event Organizer and venue for the event purchased, so they can manage entry and contact Fans about the event. Event Organizers may also use this information to tell Fans about their future events. Their use is governed by their own privacy policies and by contractual obligations in our Terms requiring them to comply with privacy, anti-spam and telemarketing laws.
- With Fans and venues (Promoter data). Promoter business names, event details and Promoter Content are displayed publicly on event pages and may be shared with venues and Fans as needed to operate events.
- Service providers. Payment processors, banks, hosting providers, email and SMS providers, customer-service tools, fraud-prevention and identity-verification services, accountants and similar vendors who process information on our behalf.
- Advertising and analytics partners. As described in Section 3.3.
- Legal and safety. When we believe disclosure is required by law, subpoena or court order, or necessary to protect the rights, property or safety of Boletos Express, our users, or others, including in response to fraud or chargebacks.
- Business transfers. In connection with a merger, acquisition, financing, bankruptcy, or sale of all or part of our business.
- With your consent or at your direction.
We do not sell personal information for money. Some state laws treat the use of advertising pixels as a "sale" or "sharing" of personal information for targeted advertising; you can opt out as described in Section 8.
6. Data Retention
We keep personal information for as long as needed to provide the Services, maintain transaction, settlement and tax records, resolve disputes, prevent fraud, and enforce our agreements, and as required by law. Order, settlement and tax records are generally retained for at least 7 years.
7. Security
We use industry-standard safeguards, including TLS encryption for data transmitted through the Services, access controls limiting customer and promoter data to authorized personnel and service providers, and payment processing through PCI-compliant processors. No system is completely secure, and we cannot guarantee the security of information. If a data breach affects your personal information, we will notify you as required by applicable law.
8. Your Choices
- Marketing emails: click "unsubscribe" in any marketing email. You will still receive transactional messages.
- Text messages: reply STOP to any marketing text to opt out. Reply HELP for help.
- Cookies: you can block or delete cookies in your browser settings; some features may not work without them.
- Targeted advertising: to opt out of the sharing of your information for targeted advertising, email [email protected] with the subject "Do Not Sell or Share." We honor Global Privacy Control (GPC) browser signals where required by law. You can also adjust ad preferences in your Meta and Google account settings.
- Event Organizer marketing: to stop marketing from an Event Organizer, use the opt-out method in its messages or contact it directly. We can also forward your request.
9. Your Privacy Rights
Depending on where you live (including California, Colorado, Connecticut, Virginia, New Jersey, and other states with consumer privacy laws), you may have the right to:
- know or access the personal information we hold about you;
- correct inaccurate information;
- delete your information, subject to legal exceptions (such as records we must keep for transactions, settlements, taxes, fraud prevention or disputes);
- obtain a portable copy of your information; and
- opt out of targeted advertising, the "sale" or "sharing" of personal information, and certain profiling.
To make a request, email [email protected] or call (800) 430-4202. We will verify your identity before responding and will respond within the time required by law. You may use an authorized agent where permitted by law. If we deny your request, you may appeal by replying to our decision. We will not discriminate against you for exercising your rights. Requests about data held by an Event Organizer should also be sent to that Event Organizer.
10. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Ticket purchasers and Promoters must be at least 18. If you believe a child has provided us information, contact us and we will delete it.
11. International Users
Boletos Express is based in the United States and also lists events in other countries, including the Dominican Republic and Mexico. Information is processed and stored in the United States, where data protection laws may differ from those in your country. By using the Services, you understand your information will be transferred to and processed in the United States.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and, for material changes, provide notice on the Site or by email.
13. Contact Us
Boletos Express Inc.
Attn: Privacy
571 W 183 St
New York, NY 10033
(800) 430-4202
[email protected]
