Privacy policy

1. Who we are

This website is operated for Talanta Sports City in connection with the Bayern Munich vs Ajax fixture at Raila Odinga International Stadium, Nairobi. References to “we”, “us” and “our” mean the event organiser. This policy is a template and must be reviewed by the organiser's legal advisers before launch.

2. Information we collect

• Booking information: name, email, phone number, country, selected seats, ticket category and order reference. You do not need an account to buy tickets; checkout is completed as a guest.
• Payment information: the payment method, amount, currency, provider reference and status. Card numbers and one-time codes are entered with the payment provider and are never received or stored by us.
• Entry information: ticket validation results, gate and time of scan, so that a ticket cannot be used twice.
• Newsletter information: email address, consent time, source and subscription status.
• Technical information: security logs, a salted hash of your IP address for rate limiting, and an essential session cookie for staff sign-in. No customer account cookie is created.
• Sponsorship enquiries: organisation, contact name, email, phone and message content.

3. Why we use it

• To create and manage your booking, process payment and issue digital tickets.
• To validate tickets at the gate and prevent duplicate or fraudulent entry.
• To respond to support, accessibility and sponsorship enquiries.
• To send event updates where you have asked for them or where permitted by law.
• To detect abuse, enforce rate limits and maintain the security of the service.
• To meet accounting, tax and legal obligations.

We rely on performance of a contract for ticket purchases, consent for marketing messages, and legitimate interests for security and service improvement. You can withdraw marketing consent at any time.

4. Sharing

We use service providers for database and staff authentication (Supabase), payment processing (the enabled card and PayPal providers), email delivery (when configured) and application hosting. Providers receive only what is necessary to perform their service. We do not sell personal data. We may disclose information where required by law, to protect the safety of attendees, or to investigate fraud.

5. Retention

Order, payment and ticket records are retained for as long as needed for event operations and statutory record-keeping. Newsletter subscriptions are kept until you unsubscribe. Security logs and rate-limit counters are kept for short periods. Sponsorship enquiries are retained while the enquiry is active and for a reasonable follow-up period.

6. International transfers

Some providers process data outside Kenya. Where that happens, the organiser must ensure appropriate safeguards are in place in accordance with the Kenya Data Protection Act, 2019, and any other applicable law.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to processing, withdraw consent, or ask for a copy of your data. Contact tickets@talantasportscity.com. You may also complain to the Office of the Data Protection Commissioner in Kenya.

8. Cookies

We use essential cookies for staff authentication and security. Customer checkout uses a signed link rather than a customer session. Marketing or analytics cookies are not enabled in this build. If analytics are added, this policy and a consent mechanism must be updated before they are enabled.

9. Security

Access to customer records is restricted with database Row Level Security and server-side role checks. Payment status and ticket validity can only be changed by trusted server code. Administrative actions are recorded in an audit log. No online service can guarantee absolute security; report suspected issues promptly.

10. Contact

Talanta Sports City, Talanta Sports City, Nairobi, Kenya. Email tickets@talantasportscity.com or call +254 700 000 000.