Eventbrite Privacy Policy

This document is Eventbrite's Privacy Policy (last updated January 13, 2026), governing the collection, use, disclosure, and retention of personal data across Eventbrite's platform, including its event discovery, ticketing, and organizer tools, with the stated legal bases varying by jurisdiction (consent, legitimate interests, and contractual necessity under GDPR frameworks; and compliance with CCPA/CPRA for California residents). The policy states that Eventbrite collects a broad range of personal data including names, contact information, payment data, location data, device identifiers, browsing behavior, and event attendance history, and the terms authorize sharing this data with event organizers, advertising partners, analytics providers, and other third parties for purposes including targeted advertising and cross-context behavioral advertising. The policy's authorization of sharing attendee personal data directly with event organizers is operationally significant because it means individual organizers, who are independent third parties with their own privacy practices, receive attendee data that is then governed by those organizers' own policies rather than Eventbrite's, creating a data exposure path that may not be fully apparent to attendees at the point of ticket purchase. The policy engages GDPR and UK GDPR for EU and UK residents, CCPA/CPRA for California residents, and references additional state privacy laws (Virginia, Colorado, Connecticut, and others); it includes a dedicated section on individual rights including access, deletion, correction, portability, and opt-out of sale or sharing of personal data for targeted advertising. Material compliance considerations include the adequacy of consent mechanisms for behavioral advertising, the lawfulness of international data transfers (including Standard Contractual Clauses), and the delineation of controller and processor roles between Eventbrite and event organizers.