When you buy a ticket or register for an event, Eventbrite shares your personal information with the event organizer, who then controls that data under their own privacy policy — not Eventbrite's.
This analysis describes what Eventbrite's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision clarifies the data governance structure between Eventbrite, organizers, and users by allocating responsibility for data collection decisions to organizers rather than Eventbrite. It establishes that organizers function as independent data controllers who receive user data directly, which affects the applicable privacy obligations and data handling requirements for each party.
The updated terms expand the circumstances under which your email address is shared with event organizers. Previously, Eventbrite shared email addresses only with organizers of events you registered for. Under the revised policy, your email is also shared with organizers if you elect to receive their marketing communications through the Eventbrite platform. The policy clarifies that organizers own the data relationship with you for these marketing subscriptions, while Eventbrite processes the consent and delivery on their behalf.
View change record →The updated terms establish formal procedures for UK-based users to lodge data protection complaints directly with Eventbrite via privacy@eventbrite.com, with assurance that complaints will follow ICO guidelines. The revised policy also confirms that all users have the right to escalate complaints to their national data protection authority or applicable regulator if they believe Eventbrite has violated privacy laws or has not adequately addressed their request. Previously, the policy referenced a Data Privacy Framework Notice but did not specify complaint procedures or regulatory escalation pathways. These additions clarify existing legal rights under UK and EU data protection law rather than creating new consumer obligations.
View change record →Your name, email, and other registration details may be used by event organizers for marketing or other purposes outside of Eventbrite's control, potentially without a separate opt-out mechanism.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
we may share data between our affiliates for the safety and security of our users and may take necessary actions if we believe you have violated these Terms, including banning you from our Services and/or our affiliates' services...
"When you register for an event, sign up for communications, enter a contest, or otherwise input your Personal Data (such as through a web form) to communicate with an Organizer or participate in an Organizer event, that Organizer will receive that information. Eventbrite may act as either a data controller or a data processor in respect of your Personal Data, depending on the circumstances. However, if you register for an event as a Consumer, we will process your Personal Data to help administer that event on behalf of the Organizer, and in these circumstances, Eventbrite merely provides the tools for Organizers; Eventbrite does not decide what Personal Data to request on registration forms.Excerpt from Eventbrite's Privacy Policy
This provision establishes a controller-to-controller data transfer relationship under GDPR Article 26, requiring independent lawful basis assessments by organizers.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision clarifies the data governance structure between Eventbrite, organizers, and users by allocating responsibility for data collection decisions to organizers rather than Eventbrite. It establishes that organizers function as independent data controllers who receive user data directly, which affects the applicable privacy obligations and data handling requirements for each party.
Your name, email, and other registration details may be used by event organizers for marketing or other purposes outside of Eventbrite's control, potentially without a separate opt-out mechanism.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Eventbrite.