Cookie Policy

This Cookie Policy explains how PataPass Africa Limited (PataPass, we, us or our) uses cookies and similar technologies when you visit or use our digital ticketing and event commerce services. It explains the purposes of these technologies, the choices available to you and how to change those choices.

It applies to the PataPass websites, booking pages and other digital services identified here: www.patapass.com. It should be read with our Privacy Policy at www.patapass.com/privacy-policy, which explains our broader handling of personal data, including ticket purchases, identity checks, payments and event access.

Only technologies actually deployed on a particular service apply to that service. The cookie register identifies the specific technologies in use. This policy does not imply that every category described below is currently enabled.

A cookie is a small text file that a website stores through your browser on your computer, phone or other device. It can help the website recognise a browser, maintain a session or remember a choice. A cookie does not necessarily identify you by name, but its identifier may be personal data if it can be linked to you or your activity.

Session cookies generally last for a browsing session. Persistent cookies remain until their expiry date or until you delete them, subject to browser behaviour. First-party cookies are set for the site you are visiting. Third-party cookies are set for a different domain, for example by a service embedded in a page. First-party status does not automatically make a cookie essential or exempt from consent.

Similar technologies include local storage, session storage, pixels, tags, software development kits and device identifiers. Pixels and tags may communicate information when content loads without creating a traditional cookie. In this policy, references to cookies include these technologies where relevant. Their purpose and impact, rather than their label, determine the choices and safeguards that apply.

We use necessary technologies to operate requested ticketing features, protect transactions and remember privacy choices. Depending on the features offered and the permissions you give, optional technologies may help remember preferences, measure service usage or support marketing.

Rejecting optional cookies does not prevent ordinary ticket purchases. Some optional content or personalisation may be unavailable until you enable the relevant category. If you block essential technologies through your browser, login, queue participation, baskets or checkout may not work correctly.

Strictly necessary cookies. These support functions needed to provide a service you request, such as maintaining a secure login, connecting a basket to a browsing session, preserving a queue token, preventing forged requests, protecting checkout and storing your cookie preferences. We use them without optional-cookie consent only where the applicable law permits. Their classification must reflect a genuine operational need; a commercial benefit alone does not make tracking essential.

Preference cookies. These remember optional settings between visits, such as a preferred language or display preference. Where a setting is necessary to deliver a feature you expressly request, that limited use may be classified as essential and explained in the register. Otherwise, preference cookies are optional and remain off until you choose to enable them.

Analytics cookies. Where deployed and enabled by you, these help us understand how visitors navigate the platform, which features are used and where journeys fail. They may measure page visits, session activity and booking-funnel performance. Optional analytics remain off until you consent. Necessary operational error and security records are assessed separately and are not an excuse to enable optional behavioural analytics.

Marketing cookies. Where deployed and enabled by you, these may measure campaign responses, attribute conversions or help show relevant promotions. They may allow a named provider to recognise your browser across services. Marketing cookies remain off until you consent. We identify participating providers and explain relevant sharing in the register and Privacy Policy.

Embedded content. Videos, maps, social media features or other external content may communicate with a third party or use its identifiers. Where this involves optional tracking, the content is held back until you give the relevant permission. An alternative link or explanation will be provided where practicable. Loading an optional video is not consent to every marketing purpose.

Depending on the technology, information may include a random browser or session identifier, IP address, device and browser characteristics, language, referral source, page or feature interactions, timestamps, queue status, basket references and cookie-consent choices. If information is associated with your account or booking, we explain that use and apply the safeguards in our Privacy Policy.

We limit the information used to what is necessary for the stated purpose. Cookie values and optional tracking payloads must not contain passwords, mobile money PINs, card security codes, full payment card details or copies of identity documents. Sensitive assistance information and ticket access credentials must not be sent to advertising or optional analytics services.

Pseudonymous identifiers are not treated as anonymous where they can be connected to a person. We use aggregated or anonymised reporting where it can meet the purpose, but aggregation of an output does not remove the need for lawful collection of the underlying data.

On your first visit, or when fresh choices are needed, our consent interface allows you to accept optional cookies, reject optional cookies or manage categories. Optional categories are off by default. We do not treat scrolling, silence, closing the banner or continued browsing as consent.

Accept all enables the optional categories presented to you. Reject optional keeps them off while allowing necessary functions. Manage preferences allows a more specific choice, and Save preferences applies your selection. The interface provides access to this policy and the cookie register before you decide.

You can reopen Cookie settings through the cookie-settings link in this site's footer at any time. Withdrawing consent is as easy as giving it. It stops future use of the affected optional technologies under our control and triggers deletion or disabling of relevant identifiers where technically possible. Third-party cookies already stored may also need to be removed through browser settings or the provider's controls.

Withdrawal does not make earlier lawful processing unlawful and does not automatically delete historical records. Requests concerning information already collected can be made under the Privacy Policy. We do not switch the same consent-based optional activity to another lawful basis merely to continue it after withdrawal.

Choices normally apply to the browser, device and service on which you make them, unless the interface expressly explains that they are synchronised. Clearing storage, changing browsers, using private browsing or moving to another device may require you to choose again. We seek fresh consent when a material new purpose or provider requires it, or when consent must otherwise be refreshed.

Cookie consent is separate from consent to promotional email, SMS or other direct marketing. Enabling marketing cookies does not subscribe you to messages, and unsubscribing from messages does not automatically change browser cookie settings.

Queue and basket technologies may hold a temporary reference needed to maintain your place, preserve a booking session or prevent duplicate requests. Their lifespan is limited to the operational need described in the register. Deleting these technologies during an active purchase may reset your session or affect a temporary reservation. Rejecting optional cookies should not itself remove your place in a queue.

Payment or fraud-prevention providers may use necessary session and security technologies when you initiate payment. Optional advertising or analytics supplied by the same provider is assessed separately; it is not automatically necessary because the provider processes payments.

If you follow a link to a separate payment or organiser website, that website's notices and controls govern its own technologies. PataPass remains responsible for the technologies it deploys or permits on its own pages. Relevant provider identities and privacy links will be disclosed at checkout or in the cookie register.

You can use browser privacy settings to inspect, block or delete cookies and site storage. Browsers may provide separate controls for third-party cookies, permissions and tracking protection. Mobile operating systems may also provide controls for app tracking or advertising identifiers.

Browser-level blocking can affect necessary features as well as optional ones. Deleting a consent-preference cookie may remove the record of your choice on that device, causing the consent interface to appear again. Private browsing does not necessarily prevent all tracking while the session is open.

We honour browser or device privacy signals where applicable law requires and where they apply to the processing concerned. Our cookie settings remain available for explicit choices. We do not assume that a general browser setting constitutes consent to optional tracking.

The current cookie register is available by contacting our privacy team using the details below. It identifies each cookie or similar technology, its provider and domain, its category and specific purpose, the information involved, whether it is first-party or third-party, its lifetime and the applicable choice. It also provides relevant provider privacy links and information about recipients and international processing where applicable.

Session storage, persistent cookies and server-held information can have different retention periods. The lifetime of a browser cookie is not necessarily the retention period for information already sent to a server. The register states the cookie lifetime, while the Privacy Policy or linked retention information explains the retention of personal data derived from it.

We use durations proportionate to each purpose and review the register when technologies change. We retain a minimal record of consent or rejection where needed to apply and demonstrate your choices. The preference-cookie lifetime and the separate retention of consent records are disclosed in the register and retention information. Optional identifiers are not kept indefinitely.

Authorised technology providers may receive information to operate the services described in the register. Providers acting on our instructions are subject to appropriate data protection arrangements. A provider acting for its own purposes must be identified with an explanation of those purposes and its own notice; a link alone does not replace the information we must give you.

Where information is accessed or processed outside your country, we apply the transfer conditions and safeguards required by applicable law. Information about relevant destinations and safeguards is available through the Privacy Policy and the contact below. Agreeing to a cookie category is not a blanket waiver of protections for international transfers.

Event organisers and sponsors do not receive unrestricted access to cookie information simply because their event is listed on PataPass. Any collection or sharing for their independent marketing requires a separately explained lawful basis and any necessary consent.

We do not knowingly use children's information for behavioural advertising. Where an event involves children, any relevant tracking, permissions and guardian requirements must be assessed for the particular service and applicable law. A child's attendance or a parent's ticket purchase is not consent to optional advertising.

We do not use optional cookies to infer or target people based on health, disability, religion, political views or other sensitive characteristics. Accessibility requests and identity verification information are handled through the relevant service notices and Privacy Policy.

Where cookie-related information is personal data, you may have rights to information, access, correction, objection, deletion, restriction, portability and withdrawal of consent, subject to applicable law. Our Privacy Policy explains the request process and any relevant limitations. You may also complain to the competent data protection authority.

Data controller: PataPass Africa Limited

Registered or business address: Flamingo Tower, Mara Road, Nairobi, Kenya

Privacy contact or Data Protection Officer: Edwin Otieno, Solutions Architect

Privacy email: [email protected]

Telephone: +254763815159

For Kenya, the Office of the Data Protection Commissioner provides rights and complaint information at https://www.odpc.go.ke/. Other competent authorities may apply depending on the processing concerned. You do not have to exhaust our internal process before approaching a regulator.

We update this policy and the register when our technology, purposes or legal requirements change. The effective date identifies the current version. Material changes are brought to your attention as appropriate, and fresh consent is obtained before introducing an optional purpose or provider where required. An update to this policy alone does not grant permission for new optional tracking.