Privacy Policy

This Privacy Policy explains how Chillz N.L.E Ltd. ("Chillz", "we", "us", or "our") collects, uses, and shares personal information when you use our website, mobile application, and related services (collectively, the "Services"). Chillz is responsible for the personal information it collects through the Services, except as described in Section 4.2.

This Privacy Policy is a notice. It is not a contract and is not part of our Terms of Service.

1. Information We Collect

1.1 Information You Provide

When you register for an account, purchase tickets, or interact with the Services, we may collect:

Account information — such as name, email address, phone number, date of birth, gender, and profile picture.
Payment information — such as payment card details, billing information, and transaction history. Payment card details are processed by our payment processors.
Event-related information — such as ticket purchases, event attendance, and preferences, and information you provide in checkout forms.
Information about others — such as the names or contact details of attendees you provide when making a purchase.
Communications — such as messages you send through the Services, customer support inquiries, and feedback.
Organizer information — if you create or manage events, information such as organization details, payout information (such as bank account details), and business contact information.

1.2 Information Collected Automatically

When you access the Services, we may automatically collect:

Device and usage data — such as IP address, browser type, operating system, device identifiers, pages viewed, time spent on the Services, referring URLs, and interaction patterns.
Location data — such as approximate location derived from your IP address.
Cookies and similar technologies — see Section 7.

1.3 Information from Third Parties

We may receive information from:

Social login providers — if you sign in using a third-party account, such as Google, we receive information such as your name, email address, and profile picture, as authorized by your account settings with that provider.
Payment processors — such as transaction confirmation and fraud prevention data.
Event organizers — organizers may provide attendee lists, contact lists, or buyer information in connection with their events and marketing.
Third-party services — services that you or an organizer connect to the Services, such as other ticketing, distribution, or marketing platforms.
Data providers and public sources — as described in Section 1.4.

To power discovery and social features — such as showing who else is attending an event — we may obtain and infer publicly available information associated with the contact details you or an event organizer provide. This may include social media handles (e.g., Instagram), profile photos, display names, follower counts, and other public profile attributes obtained from third-party data providers and publicly accessible sources. We may associate this information with your contact record. This information may be inaccurate or out of date, and you may ask us to correct or remove it (see Section 6).

1.5 Providing Information

Unless the law requires otherwise, you are not legally required to provide personal information to us. However, if you do not provide information that is marked as required, we or the Organizer may be unable to complete your purchase or provide you with certain features of the Services.

2. How We Use Your Information

We may use the information we collect to:

Provide and operate the Services — process ticket purchases, manage your account, deliver event information, and enable communication between buyers and organizers.
Process payments — collect payments, manage refunds, and handle payouts to event organizers.
Communicate with you — send order confirmations, event updates, service announcements, and respond to inquiries.
Personalize your experience — recommend events based on your location, preferences, and past activity.
Marketing — send promotional communications about events and features, as permitted by law. You may opt out at any time (see Section 6).
Advertising — subject to your choices described in Section 7.2, measure how our online ads perform and show ads for Chillz to people who have visited the Services, on Google services and on other websites and apps.
Improve the Services — analyze usage patterns, troubleshoot issues, conduct research, and develop and improve features, analytics, and models.
Create aggregated or de-identified information — which we may use for any purpose permitted by law.
Ensure safety and security — detect and prevent fraud and abuse, enforce our Terms of Service and policies, verify identity, maintain opt-out and suppression lists, and protect the rights and safety of Chillz, our users, and the public.
Comply with legal obligations — meet regulatory requirements, respond to legal process, cooperate with authorities, and establish, exercise, or defend legal claims.
Social and community features — show attendee photos and "who's going" guest lists and suggest connections. We may order attendees using public profile information such as follower counts. Organizers may disable these features, and you may opt out of being shown (see Section 6).

If the European Union or United Kingdom General Data Protection Regulation ("GDPR") applies to our processing of your personal data, we process it on the following legal bases:

Purpose	Legal Basis
Providing the Services, processing transactions	Performance of a contract with you
Sending service-related communications	Performance of a contract / Legitimate interest
Fraud prevention and security	Legitimate interest
Marketing communications	Your consent, or legitimate interest where permitted by law
Service improvement and measurement that does not use optional cookies or similar technologies	Legitimate interest
Optional analytics and advertising technologies, including Google Analytics and Google Ads (Section 7)	Your consent
Legal compliance	Legal obligation
Social profile enrichment and attendee displays	Legitimate interest (right to object — see Section 6)

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

We may share personal information as described below.

4.1 Event Organizers

When you purchase a ticket or register for an event, the event organizer may receive your order and attendance information, contact details, the information you provided during checkout (e.g., custom form fields required by the organizer), and related profile information, such as social media information associated with you. Organizers may share this information with their collaborators, co-hosts, venues, and service providers. Organizers are independent controllers of the information they receive, and their use of it is governed by their own privacy policies.

4.2 Information We Process on Behalf of Organizers

When an organizer uploads or imports contacts, sends messages through our tools, manages its contact records, sends purchase reports to its advertising accounts, or syncs data from third-party services it connects, we process that information on the organizer's behalf and according to its instructions. The organizer is responsible for that processing, and its privacy policy applies. To the extent permitted by law, we may also use that information for our own purposes, such as security and fraud and abuse prevention, legal compliance, building and improving the Services, creating aggregated or de-identified information, and maintaining opt-out and suppression lists across the Services. If you have a request about information an organizer holds, please contact the organizer. We may refer requests we receive to the organizer.

4.3 Service Providers and Payment Processors

We may share information with third parties who help us operate the Services, such as:

Payment processors — for processing transactions.
Email and SMS providers — for sending service and marketing communications.
Cloud hosting and infrastructure — for storing and serving data.
Analytics providers — for understanding how the Services are used (e.g., Google Analytics).
Data enrichment providers — for obtaining the information described in Section 1.4.
Customer support tools — for managing support requests.

Some of these parties act on our behalf under contract. Others, such as payment processors and Google, may also use information as independent controllers under their own terms and privacy policies.

4.4 Third-Party Services Connected by Organizers

Where an organizer connects its events or account to a third-party service, such as another ticketing, distribution, or marketing platform, we may share information with that service as needed to provide the connection.

4.5 Affiliates

We may share information with companies that control, are controlled by, or are under common control with Chillz, for the purposes described in this Policy.

4.6 Legal and Safety

We may disclose information when we believe it is necessary to:

Comply with applicable law, regulation, or legal process.
Protect the safety, rights, or property of Chillz, our users, or the public.
Detect, prevent, or address fraud, security, or technical issues.
Enforce our Terms of Service and policies.

4.7 Business Transfers

In connection with a merger, acquisition, reorganization, bankruptcy, financing, or sale of assets, your information may be transferred as part of that transaction, and the recipient may continue to use it as described in this Policy.

4.8 Attendee Information and Guest Lists

Where an event organizer enables it, we may display limited attendee information to other people viewing the event, which may include:

your profile photo and first name, shown publicly on the event page and in an aggregate count of attendees; and
to verified ticket-holders for the same event, your associated public social handle (e.g., Instagram), so attendees can connect with one another.

Organizers may control whether these features are enabled and what level of information is shown. If your profile is public, events you have attended may also be shown on it, depending on your profile settings. You may opt out of appearing in attendee displays and guest lists — see Section 6.

4.9 Advertising Partners

We work with advertising partners, including Google, that receive information about your use of the Services, such as cookie identifiers and the pages you view, and use it to measure and personalize ads, as described in Section 7.1. Event organizers may also add their own advertising tags to their pages on the Services. These are subject to your choices described in Section 7.2.

We may share information with your consent or at your direction.

4.11 Aggregated and De-identified Information

We may share aggregated or de-identified information that does not reasonably identify you.

5. International Data Transfers

Your information may be stored and processed in the European Union, Israel, the United States, and other countries, by us, our affiliates, and our service providers. Where the law requires, we use transfer mechanisms permitted by law for these transfers.

6. Your Rights and Choices

6.1 Your Choices

You may:

Access and update your account information through your profile settings.
Ask us to close your account by contacting us at privacy@chillz.com. We may retain information as described in Section 9.
Opt out of marketing by clicking the unsubscribe link in any marketing email or using the opt-out method described in the message.
Manage cookies and tracking — choose whether to allow optional analytics and advertising technologies using Privacy choices (see Section 7.2).
Opt out of attendee displays and guest lists — ask us not to show your profile photo, first name, or social handle in attendee displays or guest lists by updating your profile settings or contacting us at privacy@chillz.com.
Ask us to correct enriched social data — because some profile information is obtained from third-party sources, it may be inaccurate. If a social handle or profile shown for you is wrong or not yours, you may ask us to correct or remove it by contacting us at privacy@chillz.com.

6.2 Your Rights Under Israeli Law

Under the Protection of Privacy Law, 5741-1981, and subject to the conditions and exceptions in that law, you may:

request to review personal information about you that is held in a database (section 13);
request that personal information about you that is incorrect, incomplete, unclear, or not up to date be corrected or deleted (section 14); and
request that personal information about you be deleted from a database used for direct mailing, or that it not be used or delivered for direct mailing (section 17F).

To exercise these rights, contact us at privacy@chillz.com. Where we process the information on behalf of an organizer, we may refer your request to the organizer (see Section 4.2).

If the GDPR applies to our processing of your personal data, you may have the right, as provided by the GDPR, to request access to, correction of, or erasure of your personal data; to request that we restrict its processing; to receive it in a portable format; to object to processing based on legitimate interests or for direct marketing; and to rights relating to decisions based solely on automated processing.

To exercise these rights, contact us at privacy@chillz.com. We will respond within the time required by law. You may also lodge a complaint with your local data protection authority.

7. Cookies and Tracking Technologies

We and third parties may use cookies and similar technologies, including:

Essential cookies — enable core functionality such as authentication, security, and accessibility.
Analytics cookies — help us understand how visitors interact with the Services (e.g., Google Analytics).
Marketing cookies — enable targeted advertising and measure campaign effectiveness (e.g., Google Ads, and advertising tags that event organizers add).
Preference cookies — remember your settings and preferences (e.g., language, locale).

7.1 Google Analytics and Google Ads

We use Google Analytics, a web analytics service provided by Google, to understand how visitors find and use the Services. Google Analytics uses cookies and similar technologies to collect information such as the pages you view, the page that referred you, the campaign or ad that brought you to the Services, information about your browser and device, your approximate location, and actions you take on the Services, such as starting a checkout or a booking, submitting an inquiry, or completing a purchase. You can control whether Google Analytics runs using Privacy choices (Section 7.2). Google's use of this information is described in How Google uses information from sites or apps that use our services.

We also use Google Ads, and we may link Google Analytics to it and use Google Analytics Advertising Features, including remarketing and demographics and interests reporting. This lets us measure how our ads perform and show our ads to people who have visited the Services, on Google services and on other websites and apps. Third-party vendors, including Google, show our ads on sites across the internet and use cookies and similar identifiers to show ads based on your past visits to the Services and to other websites. We and these vendors use first-party cookies, such as the Google Analytics cookie, together with third-party cookies, such as Google advertising cookies, to inform, optimize, and serve ads based on your past visits, and to measure how our ads perform. If you are signed in to a Google Account, Google may also associate this information with your account, depending on your Google Account settings. We may also share hashed contact information, such as your email address or phone number, with advertising partners such as Google to measure and improve our ads.

You can opt out of personalized advertising by turning off Advertising in Privacy choices (Section 7.2), in Google's Ads Settings, or on the Network Advertising Initiative's opt-out page, and you can stop Google Analytics from collecting information about your visits with the Google Analytics opt-out browser add-on.

7.2 Your Privacy Choices

You can choose whether to allow optional analytics and advertising technologies using Privacy choices, which you can open from the footer of our pages and from your profile settings. Technologies that are necessary for the Services, such as those used for signing in, payments, security, and keeping the Services working, are not covered by these choices.

Analytics includes Google Analytics, our product analytics, and session recordings.
Advertising includes Google's advertising features described in Section 7.1, our marketing tools, and advertising tags that event organizers add to their pages, including purchase reports, which may include hashed contact details, that we send to advertising partners on their behalf.

Depending on where you are, optional technologies may be off until you turn them on, or on until you turn them off. Your choices apply to the browser and website in which you make them. Turning a category off does not affect information collected before you did so, or information we process for other purposes described in this Policy, such as contact details we share with our customer relationship management provider.

7.3 Managing Cookies in Your Browser

You can also manage cookies through your browser settings. Blocking essential cookies may impair the functionality of the Services. For more information about cookies, visit allaboutcookies.org.

8. Data Security

We use administrative, technical, and organizational measures designed to protect personal information. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as we need it for the purposes described in this Policy, including to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. How long we keep information depends on the type of information, why we have it, and the legal periods that apply to it. For example:

Account information may be kept while your account exists and afterward as needed for the purposes above.
Transaction and payment records may be kept as business records for as long as needed for tax, accounting, dispute, and legal purposes.
Analytics data may be kept according to the retention settings of our systems and of our analytics providers.

When we determine that we no longer need personal information, we may delete it, de-identify it, or restrict it from further use.

10. Minors

Some events may be open to minors. Users aged 13 to 17 may use the Services with the consent of a parent or guardian, and a child under 13 may attend an event using a ticket purchased by a parent or guardian, where the event and the law permit. If you believe a minor has provided personal information to us without that consent, please contact us at privacy@chillz.com, and we may delete it.

11. Third-Party Links

The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on the Services and, where required by law, notify you or ask for your consent.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Chillz N.L.E Ltd.
Email: privacy@chillz.com
General inquiries: info@chillz.com