Privacy Policy
Effective 8 August 2026. This policy explains how Dreamscapes handles personal data under applicable Kenyan data-protection law. We do not sell personal information.
Information we collect
Identity and contact details; account and authentication records; order, payment-reference and refund data; ticket ownership, transfer and check-in logs; organizer information; support communications; device, browser, IP, security and usage records. Payment providers process full payment credentials under their own policies.
Why we use it
To create accounts, process and reconcile orders, issue and deliver tickets, prevent duplicate entry and fraud, operate organizer tools, provide support, meet tax and legal duties, secure the service, improve reliability and—only where permitted—send marketing communications.
Legal bases and choices
We process data to perform a contract, comply with law, pursue legitimate interests such as platform security, and where required based on consent. You may withdraw optional marketing consent at any time without affecting ticket and service messages.
Who receives data
Relevant event organizers receive attendee data needed to operate their event. We use vetted hosting, communications, analytics, payment and fraud-prevention providers acting under contractual safeguards. We may disclose data when lawfully required or during a protected corporate transaction.
International transfers
Where a service provider processes data outside Kenya, we use appropriate contractual, organizational and technical safeguards and assess the destination and purpose of the transfer.
Retention
We keep records only as long as necessary for ticket fulfilment, disputes, fraud prevention, accounting and legal obligations. Security and check-in records may be retained after an event where necessary to resolve claims, then deleted or anonymized.
Security
We apply access controls, least-privilege administration, encryption in transit, audit records and operational monitoring. No system is risk-free; report suspected compromise immediately and never share a ticket QR code publicly.
Your rights
Subject to lawful exceptions, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. We may verify identity before acting. You may also complain to Kenya’s Office of the Data Protection Commissioner.
Cookies and analytics
Essential storage supports sessions, security and checkout. Optional measurement or marketing technologies should be used only with the required notice or consent. Browser controls may limit non-essential storage but can affect some features.
Children and updates
The platform is not directed to children who cannot lawfully contract. Event age rules remain the organizer’s responsibility. Material policy changes will be dated and, where appropriate, communicated through the platform or email.
Contact
For privacy requests, contact privacy@dreamscapes.co.ke and include enough information for us to locate your records. For ticket support, use support@dreamscapes.co.ke.