NIGHTOUT Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how Ticketsauce.com, Inc., operating the NIGHTOUT website at nightout.com and related services ("NIGHTOUT", "we", "us"), collects, uses, shares and protects personal data. It applies to visitors worldwide, and includes specific information for visitors in the United Kingdom, the European Economic Area (EEA) and Switzerland under the UK GDPR, the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection.

1. Who we are (data controller)

Ticketsauce.com, Inc.
9245 Activity Road, Suite 203
San Diego, CA 92126, USA
Email: info@nightout.com

We are the controller for personal data collected through nightout.com. When you buy tickets from a third-party seller linked from our site, that seller is a separate controller for the data you give them (see section 6).

UK/EU representative: we have not yet appointed a representative under Article 27 of the UK GDPR / GDPR. Until we do, please contact us directly at the address above.

2. Personal data we collect

• Account data: name, email address, password (stored in hashed form), and preferences such as saved events, followed performers and home city.
• Communications: messages you send through our contact forms, including your name, email, the event you ask about and any order number you provide.
• Alerts and newsletters: your email address and the events, performers, venues or cities you ask us to notify you about.
• Purchase-related data: when you check out on NIGHTOUT or through our ticketing partners, we may receive order details such as order number, event, seats, quantity and total paid. We do not store full payment card numbers; payments are processed by our payment and ticketing partners.
• Usage and device data: pages viewed, searches, events viewed, referring site, approximate location derived from your IP address (country or city), browser type and device type.
• Cookies and similar technologies: see our Cookie Policy.

We do not knowingly collect special category data, and our services are not directed to children under 16.

3. How we use personal data and our legal bases

For UK/EEA/Swiss visitors, we rely on the following legal bases:

• To provide the site and your account (sign-in, saved events, alerts you request): performance of a contract with you.
• To process and support ticket orders and answer your inquiries: performance of a contract, or steps you ask us to take before entering one.
• To send event alerts and newsletters you sign up for: your consent. You can unsubscribe at any time using the link in each email.
• To keep the site secure, prevent fraud and bot abuse, and fix errors: our legitimate interests in operating a safe service.
• To measure how the site is used and improve it: your consent where cookies or similar technologies are involved; otherwise our legitimate interests, using aggregated data.
• To show advertising and track partner referrals: your consent, collected through our cookie banner.
• To comply with legal obligations such as tax, accounting and responding to lawful requests: legal obligation.

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you.

4. Cookies and consent

Visitors from the UK, EEA and Switzerland are asked for consent before we or our partners set non-essential cookies (analytics, advertising and embedded media). You can accept all, reject all, or choose categories, and you can change your choice at any time using "Cookie settings" in the site footer. Details are in our Cookie Policy.

5. Who we share data with

We do not sell personal data. We share it only as needed with:

• Service providers (processors) that host and run our site and communications, including cloud hosting and database providers, email delivery providers, and analytics providers. They may only use data on our instructions.
• Ticketing partners such as Ticketsauce (primary tickets) and Vivid Seats (resale tickets), when you choose to buy tickets or ask about an order.
• Advertising and affiliate partners such as Google AdSense and hotel/travel partners such as Stay22, only where you have consented to advertising cookies.
• Embedded content providers such as YouTube and Spotify, only where you have consented to embedded media.
• Authorities or other parties where required by law, to protect our rights, or as part of a merger, acquisition or sale of assets.

6. Third-party ticket sellers

NIGHTOUT lists events from multiple providers. Resale tickets are sold by third-party sellers (for example Vivid Seats), and their checkout, order status pages and ticket delivery are governed by their own privacy policies. Primary tickets are sold through the Ticketsauce ticketing platform. Please review the seller's privacy policy before purchasing.

7. International transfers

We are based in the United States, and our service providers may process data in the United States and other countries. When we transfer personal data from the UK, EEA or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, where applicable.

8. How long we keep data

• Account data: for as long as your account is active, and deleted or anonymised within a reasonable period after you ask us to close it.
• Contact inquiries: generally up to 3 years, to handle follow-up questions and disputes.
• Order-related records: as long as required for accounting, tax and legal purposes.
• Alert and newsletter subscriptions: until you unsubscribe.
• Analytics data: in aggregated or pseudonymised form for up to 26 months.

9. Your rights

If you are in the UK, EEA or Switzerland, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing, including objecting at any time to processing based on legitimate interests and to direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise these rights, email info@nightout.com with the subject "Privacy request". We will respond within one month and may ask you to verify your identity. You also have the right to complain to a supervisory authority, such as the UK Information Commissioner's Office (ico.org.uk) or the data protection authority in your EEA country of residence.

California residents have additional rights described on our CCPA page.

10. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and hashed passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date, and where changes are significant we will provide additional notice.

12. Contact

Questions about this policy or your data: info@nightout.com, or Ticketsauce.com, Inc., 9245 Activity Road, Suite 203, San Diego, CA 92126, USA.