Supplemental Privacy Notice for specific U.S. states

In this article

• California
• Colorado
• Nevada
• Other states

Tip: Learn more about Eventbrite's Legal Terms .

California

Supplemental Privacy Notice for California Residents

This Supplemental Privacy Notice supplements the information in our Privacy Policy and applies solely to California residents. It applies to Personal Data we collect as a business; it does not apply to Personal Data we collect or otherwise process as a service provider.

Eventbrite as a “Business” and a “Service Provider”

California law makes a distinction between organizations that process Personal Data for their own purposes (known as "businesses") and organizations that process Personal Data on behalf of other organizations (known as "service providers"). Depending on the circumstances, Eventbrite may act as either a business or service provider with respect to your Personal Data. If you have a question or a complaint about how your Personal Data is handled, these should always be directed to the relevant business since they are the ones with primary responsibility for your Personal Data.

For example, if you create an account with us to organize your events, Eventbrite will be a business with respect to the Personal Data that you provide as part of your account. We will also be a business as to the Personal Data that we have obtained about the use of the Applications or Eventbrite Properties, which could relate to Organizers or Consumers. We use this to conduct research and analysis to help better understand and serve Users of the Services, as well as to improve our platform and provide you with more relevant recommendations about events we think may be of interest to you.

However, if you register for an event as a Consumer, we will process your Personal Data to help administer that event on behalf of the Organizer (for example, sending confirmation, promotional and feedback emails, processing payments, etc.) and to help the Organizer target, and understand the success of, their event and event planning (for example, providing event reports, using analytics to gain insights into the effectiveness of various sales channels, etc.). In these circumstances, Eventbrite merely provides the tools for Organizers; Eventbrite does not decide what Personal Data to request on registration forms, nor is it responsible for the continued accuracy of any Personal Data provided. Any questions that you may have relating to your Personal Data and your rights under California law should therefore be directed to the Organizer as the business, not to Eventbrite.

Summary of Information We Collect

If you are a California resident, California law requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” and “sensitive personal information” as defined in the California Consumer Privacy Act (CCPA).

Throughout our Privacy Policy, we describe the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we share it. Under the CCPA, we also have to provide you with the "categories" of personal information we collect and disclose for “business purposes” (as those terms are defined by applicable law). Those categories are identifiers (such as name, address, and email address); commercial information (such as transaction data); financial data (such as credit card and other financial account information); internet or other network or device activity (such as IP address); geolocation information (general location); inference data about you; physical characteristics or description (such as when you voluntarily submit a photo); and other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account login, financial account information, and password or other credentials allowing access to your account. If you choose to respond to a survey, you may elect to provide additional categories of personal information.

We collect the above categories of personal information from the following sources: (1) directly from you; (2) through your use of the Services; (3) agents/service providers; (4) affiliates; (5) third parties such as social networks, marketing partners, and credit reporting agencies; (6) organizers; and (7) consumers.

We or our service providers may collect and disclose the above categories of information for the purposes described in our Privacy Policy. This includes the following business and commercial purposes (as those terms are defined in applicable law):

• Our or our service provider’s operational purposes;
• Auditing consumer interactions on our site (e.g., measuring ad impressions);
• Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
• Bug detection and error reporting;
• Customizing content that we or our service providers display on the Services (e.g., contextual ads);
• Providing the Services (e.g., account servicing and maintenance, order processing and fulfillment, customer service, advertising and marketing, analytics, and communication about the Services);
• Improving our existing Services and developing new services (e.g., by conducting research to develop new products or features);
• Other uses that advance our commercial or economic interests, such as third-party advertising and communicating with you about relevant offers from third-party partners;
• Other uses for which we notify you.

We may also use the above categories of Personal Data for compliance with applicable laws and regulations, and we may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent identification of any particular user or device.

We describe our information disclosure practices in our Privacy Policy. We may disclose certain categories of personal information to third parties (as defined by the CCPA) for the business purposes described above. For example, we may disclose any of the categories described above to our parent companies, subsidiaries, or affiliates. We may also disclose identifiers, commercial information, and general location to organizers. If you connect your Eventbrite account with social media services, interact with social media plugins or links on the Services, or contract or integrate with third parties, we may disclose identifiers, commercial information, internet or other network or device activity, or general location with those social media services and third parties.

Rights

If you are a California resident, you may have certain rights. California law may permit you to request that we:

• Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for collecting, “selling,” or “sharing” your personal information; the categories of third parties to whom we disclose or “sell,” or with whom we “share,” personal information; and the categories of personal information we “sell.”
• Provide access to and/or a copy of certain information we hold about you.
• Delete certain information we have about you.
• Correct inaccurate personal information that we maintain about you.

You may have the right to receive information about the financial incentives that we offer to you (if any). You also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights. Certain information may be exempt from such requests under applicable law. For example, we need certain types of information so that we can provide the Services to you. If you ask us to delete it, you may no longer be able to access or use the Services.

You can download a copy of your personal information or delete your personal information by visiting Eventbrite’s Privacy Center . You may correct your personal information by making changes in your Eventbrite account profile. You may also exercise your California consumer rights by emailing us at privacy@eventbrite.com. You will be required to verify your identity before we fulfill your request. To do so, you will need to demonstrate that you have access to the email address used to create your account or provide us with certain account information, such as the full name and email address you used to create your account and your most recent event or ticket purchase. You can also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization for the agent to act on your behalf. You will still need to verify your identity directly with us.

The CCPA requires businesses that “sell” personal information, as the term “sell” is defined under the CCPA, to provide an opt-out from such sales. Some interpretations of the CCPA take the position that when a website uses third parties’ cookies or similar technology for its own analytics or advertising purposes, the website is engaged in a “sale” if the third parties have some ability to use, disclose or retain the data to improve their service or to take steps beyond the most narrowly drawn bounds of merely providing their service to the website/app. Some take this position even when the website pays the third party (not vice versa), and in most cases merely provides the third party with an opportunity to collect data directly, instead of providing personal information to the third party. As part of these analytics and advertising services, these technologies may access identifiers (like IP addresses), internet or other electronic network activity information (like information regarding an individual’s browsing interactions on our Site), and commercial information (like the fact that a browser visited a page directed to people who are considering purchase of a ticket to an event) to those sorts of companies. You can opt out of this activity by clicking the Do Not Sell or Share My Personal Information link in the footer of our homepage . To complete your request, you must switch the toggle and submit a request through the Eventbrite Privacy Center .

The CCPA also requires businesses that "share“ personal information to provide an opt-out from such sharing.  Under the CCPA, ”sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites. We “share” information for these purposes to provide more relevant and tailored advertising to you regarding our Services. As part of this advertising, we may "share“ identifiers (like IP addresses and email addresses), internet or other electronic network activity information (like information regarding an individual’s browsing interactions on our Services), and commercial information (like the fact that a browser visited a page directed to people who are considering purchase of a ticket to an event) with advertising platforms and advertising networks. To opt out of such “sharing,” please click the Do Not Sell or Share My Personal Information link in the footer of our homepage . To complete your request, you must switch the toggle and submit a request through the  Eventbrite Privacy Center .

Please note that we also respond to and abide by opt-out preference signals sent through the Global Privacy Control. Any opt-out preferences you have exercised through these methods will only apply to the specific device/browser on which you made them. For more information on how to use the Global Privacy Control, refer to www.globalprivacycontrol.org.

We do not knowingly “sell” or “share” the personal information of children under 16. 

Retention of Your Personal Information 

Please refer to the "Personal Data Retention” section in our Privacy Policy.

California Shine the Light

We do not share personal information with third parties for their direct marketing purposes.

Colorado

Supplemental Privacy Notice for Colorado Residents

This Supplemental Privacy Notice supplements the information in our Privacy Policy and applies solely to Colorado residents. It applies to Personal Data we collect as a controller; it does not apply to Personal Data we collect or otherwise process as a service provider. 

Throughout our Privacy Policy, we describe the specific pieces of personal data we collect, how we use it, and share it. If you are a Colorado “consumer,” the Colorado Privacy Act (CPA) requires us to provide you with this information in a specific format. Please note that the term “share” is defined differently in the CCPA and the CPA. For information about personal data used for targeted advertising and your privacy rights under the CPA, please refer to the Supplemental Privacy Notice for Residents of Certain Other States included in this article.

Category of Personal Data	Processing Purpose(s)	Categories of Third Parties  (as defined in the CPA) with Whom We May Share Personal Data
Contact information, such as name, address, email address	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business. Marketing and advertising purposes Customize recommendations to you	Our parent companies, subsidiaries, or affiliates Organizers Social media services and third parties (if you connect your Eventbrite account with social media services, access the Services through a third party service, interact with social media plugins or links on the Services, or contract or integrate with third parties)
Payment information, such as credit card or bank account information	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business.	Our parent companies, subsidiaries, or affiliates
Commercial information, such as transaction data	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business. Marketing and advertising purposes Customize recommendations to you	Our parent companies, subsidiaries, or affiliates Organizers Social media services and third parties (if you connect your Eventbrite account with social media services, access the Services through a third party service, interact with social media plugins or links on the Services, or contract or integrate with third parties)
Internet or other network or device activity, such as IP address, and cookies and pixels	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business. Marketing and advertising purposes Customize recommendations to you	Our parent companies, subsidiaries, or affiliates Social media services and third parties (if you connect your Eventbrite account with social media services, access the Services through a third party service, interact with social media plugins or links on the Services, or contract or integrate with third parties)
Geolocation information (general location)	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business. Marketing and advertising purposes Customize recommendations to you	Our parent companies, subsidiaries, or affiliates Organizers Social media services and third parties (if you connect your Eventbrite account with social media services, access the Services through a third party service, interact with social media plugins or links on the Services, or contract or integrate with third parties)
Inference data about you, such as what types of events you may be interested in	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business. Marketing and advertising purposes Customize recommendations to you	Our parent companies, subsidiaries, or affiliates Organizers
Physical characteristics or description, such as when you voluntarily submit a photo	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business.	Our parent companies, subsidiaries, or affiliates
Other information that identifies or can be reasonably associated with you.	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business. Marketing and advertising purposes Customize recommendations to you	Our parent companies, subsidiaries, or affiliates Organizers Social media services and third parties (if you connect your Eventbrite account with social media services, access the Services through a third party service, interact with social media plugins or links on the Services, or contract or integrate with third parties)
Additional categories of personal data if you choose to respond to a survey and choose to provide this information.	For purpose for which you provided it To provide you with access to or use of the Services or functionality To analyze your use of such Services or functionality Internal business purposes, including to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business. Marketing and advertising purposes Customize recommendations to you	Our parent companies, subsidiaries, or affiliates.

Nevada

Supplemental Privacy Notice for Nevada Residents

Under Nevada law, certain Nevada consumers may opt out of the sale of “personally identifiable information” for monetary consideration. “Personally identifiable information” includes first and last name, address, email address, phone number, Social Security Number, or an identifier that allows a specific person to be contacted either physically or online.

We do not engage in such activity; however, if you are a Nevada resident who has purchased or leased goods or services from us, you may submit a request to opt out of any potential future sales under Nevada law by emailing privacy@eventbrite.com. Please note that we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.

Other states

Supplemental Privacy Notice for Residents of Certain Other States

This Supplemental Privacy Notice applies to Personal Data we collect as a controller; it does not apply to Personal Data we collect or otherwise process as a service provider.

The laws of your state of residence (“Applicable State Law”) may provide you with certain rights, including the following:

• Confirm whether or not we are processing your Personal Data and provide you with access to such Personal Data;
• Correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data;
• Delete your Personal Data;
• Provide you a copy of Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business, where our processing is carried out by automated means; and
• Opt you out of the processing of the Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Certain information may be exempt from such requests under applicable law. We need certain types of information so that we can provide the Services to you. If you ask us to delete it, you may no longer be able to access or use the Services.

You can download a copy of your Personal Data or delete your Personal Data by visiting the Eventbrite Privacy Center . You may correct your personal data by making changes in your Eventbrite account profile. You may also exercise your privacy rights by emailing us at privacy@eventbrite.com. You will be required to verify your identity before we fulfill your request. To do so, you will need to demonstrate that you have access to the email address used to create your account or provide us with certain account information, such as the full name and email address you used to create your account and your most recent event or ticket purchase. You can also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization for the agent to act on your behalf. You will still need to verify your identity directly with us.

We may use your Personal Data to send you targeted advertising (as that term is defined in Applicable State Law). Specifically, we may "share“ identifiers (like IP addresses and email addresses), internet or other electronic network activity information (like information regarding an individual’s browsing interactions on our Services), and commercial information (like the fact that a browser visited a page directed to people who are considering purchase of a ticket to an event) with advertising platforms and advertising networks. We may disclose this information to analytics providers as well. These disclosures may also be considered a “sale” in certain states. To opt out of targeted advertising/data sales, select the "Do Not Sell or Share My Personal Information" link in the footer of the Eventbrite homepage . To complete your request, you must switch the toggle and submit a request through the Eventbrite Privacy Center . 

If we deny your request to exercise any of the rights above, you may appeal that denial by emailing us at privacy@eventbrite.com.