Privacy Policy and Data Handling

1. Data controller

QuePase is the controller responsible for personal data collected through the Platform. For any request related to your data, write to us at hola@quepase.co.

2. Data we collect

• Identification and contact: name, email, phone number, city, and, when the event requires it, a form of ID.
• Transactional: tickets purchased, order history, and payment references (we don’t store your full card details; payment is processed by the payment gateway).
• Usage: technical device and browsing information needed to run and secure the Platform.

3. Purposes of processing

• Process purchases and issue and validate your tickets.
• Manage your account, points, referrals, giveaways, and support.
• Send you confirmations and transactional communications about the event.
• Send you news and promotions, only if you opt in.
• Prevent fraud and comply with legal obligations.

4. Authorization

By registering or purchasing, you authorize the processing of your data for the purposes described here. Sending marketing communications requires your express consent, which you can withdraw at any time.

5. Sharing information

We share only the data strictly necessary with: (i) the organizer of the event you buy from, to manage access; (ii) payment and technology infrastructure providers acting as data processors under confidentiality agreements; (iii) Meta Platforms, only if you accept measurement cookies (see section 8). We do not sell your personal data.

6. Your rights (Habeas Data)

As a data subject, you can, free of charge:

• Know, update, and correct your data.
• Request proof of the authorization you gave.
• Be informed about how your data is used.
• Withdraw your authorization and/or request the deletion of your data where applicable.
• File complaints with Colombia's data-protection authority, the Superintendencia de Industria y Comercio (SIC).

To exercise these rights, write to hola@quepase.co stating your request. We’ll respond within the legal timeframes (general inquiries: 10 business days; formal complaints: 15 business days, extendable).

7. Security and retention

We apply reasonable technical and organizational measures to protect your data. We retain your information for as long as you have an active account or as needed to fulfill the purposes described here and our legal obligations.

8. Cookies and measurement

We use cookies and similar technologies of two kinds:

• Necessary: authentication, security, and running the service. These don’t require your consent.
• Measurement and advertising: only if you accept them, we use the Meta Pixel (Meta Platforms, Inc.) to understand which pages are visited, how many people select tickets or purchase, and to show QuePase ads to people who might be interested. We share browser identifiers and on-site actions with Meta (for example: viewing an event, selecting tickets, or starting checkout, along with its value); we don’t send your name, email, or phone number. If you’re signed in to Facebook or Instagram in your browser, Meta may associate that activity with your account and handle it under its own policies, even outside Colombia.

You can accept, decline, or change your choice at any time using the “Cookies” link in the footer of any page, or through your browser settings. We don’t measure pages with private links, such as your tickets or purchase confirmation.

9. Changes

We may update this Policy. We’ll publish the current version along with its update date.

10. Contact

Data controller: QuePase — hola@quepase.co.