Privacy Policy

Last updated: 8 April 2026

1. Who We Are

Seatigo is a trading name of Canton Trading Limited (Company No. 16105843), registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the data controller for the personal data we collect through seatigo.co.uk.

2. Data We Collect

Data	Purpose	Legal Basis
Name, email, phone	Account creation, order processing, ticket delivery	Contract performance
Payment information	Processing payments (card details handled by Stripe — we do not store card numbers)	Contract performance
Cryptocurrency wallet addresses	Matching payments to orders	Contract performance
IP address, browser type	Security, fraud prevention, rate limiting	Legitimate interest
Email address (newsletter)	Marketing communications (with consent)	Consent

3. How We Use Your Data

To create and manage your account
To process ticket orders and payments
To generate and deliver e-tickets via email
To communicate about your orders (confirmations, updates, refunds)
To send marketing emails (only with your explicit consent)
To prevent fraud and maintain security

4. Data Sharing

We share your data only with:

Stripe — for card payment processing (subject to Stripe's Privacy Policy)
Google/Facebook — if you use social login (only authentication data)
Law enforcement — if required by law

We do not sell your personal data to any third parties.

5. Data Retention

Account data: retained until you request deletion
Order data: retained for 7 years (UK tax and accounting requirements)
Session data: automatically deleted after 30 days or on logout
Newsletter subscriptions: until you unsubscribe

6. Your Rights (GDPR)

Under UK GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict processing of your data
Data portability — receive your data in a structured format
Object to processing based on legitimate interests
Withdraw consent for marketing communications at any time

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. Cookies

We use only essential cookies:

Session cookie (stg_session) — keeps you logged in. Expires after 30 days.
CSRF cookie (stg_csrf) — prevents cross-site request forgery. Session-only.

We do not use tracking cookies, analytics cookies, or advertising cookies. No consent banner is required for essential cookies under UK GDPR.

8. Security

We implement appropriate technical and organisational measures to protect your data, including:

HTTPS encryption on all pages
Passwords hashed with bcrypt
Payment card data handled by PCI-DSS compliant Stripe
Cryptocurrency private keys encrypted with AES-256
Rate limiting on authentication endpoints

9. International Transfers

Your data is stored on servers within the UK/EU. If data is transferred outside the UK (e.g., to Stripe's US servers), appropriate safeguards are in place.

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top will be changed. Significant changes will be communicated via email.

11. Contact & Complaints

Data Controller: Canton Trading Limited
Email: [email protected]
Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).