Privacy Policy
Last updated 29 August 2026
This policy explains what personal information KontriTicket collects, why, who else sees it, and how to have it deleted. KontriTicket is owned and operated by Dot Portal Limited, which is the data controller for the information described here.
What we collect
We collect what is needed to sell you a ticket and get you through the door, and we try not to collect more than that.
- Your phone number and name. The phone number is how a ticket reaches you and how you are found at the gate if your phone fails.
- Answers to the questions the organizer asks. Each organizer builds their own registration form — an organisation, a dietary requirement, a delegate category. We store your answers so the organizer can run their event; we do not decide what they ask.
- Order, payment and ticket records. What you bought, what it cost, how you paid, and the ticket that was issued. Where you paid by mobile money we record the payment reference the provider gives us. We never see or store your PIN — the payment is authorised on the provider’s side, not ours.
- Check-in records. When and where a ticket was scanned at the gate.
- A record that messages were sent. For each message we log who it went to, what type it was, and whether it was delivered.
- For organizers. The phone number of the account, the one-time codes used to sign in, and a session cookie that keeps you signed in. The cookie is used for signing in only — we do not use advertising or tracking cookies.
What we deliberately do not store
We do not keep the content of your WhatsApp messages. Our message log records that a message was sent and whether it arrived — it has no column for the text of the message and none for a one-time code. A registration conversation stores what you have chosen so far, such as a ticket type and a quantity, and nothing else; your answers live once, on the registration itself. Message identifiers we keep briefly, so that a message retried by the network is not acted on twice, are deleted automatically on a short cycle.
Why we use it
- To register you for an event and issue your ticket.
- To take and confirm payment, and to record what is owed if a registration is cancelled.
- To send you your ticket, and messages about the event you registered for.
- To admit you at the gate, and to stop the same ticket being used twice.
- To answer you when you contact us, and to keep the service secure and working.
- To keep the accounting records a business is required to keep.
Who else sees it
We do not sell personal information, and we do not share it for advertising. It is shared only with the parties that make the service work:
- The organizer of the event you registered for. They receive your name, phone number and your answers to their questions — they need them to run their event. They are responsible for how they use them afterwards.
- Messaging providers. WhatsApp messages are delivered through the WhatsApp Business Platform, operated by Meta, via Twilio. Meta’s handling of messages on WhatsApp is governed by WhatsApp’s own privacy policy.
- Payment providers. Monime, Orange Money and Afrimoney, to take and confirm mobile money payments.
- Hosting providers. Netlify and Render, which run this website and our servers.
- Anyone we are legally required to disclose to, such as a regulator, a tax authority or a court order.
How long we keep it
Registration, payment and check-in records are kept while the event is running and afterwards for as long as we need them for accounting, for resolving a dispute about a ticket or a payment, and to meet legal obligations. Message identifiers used to prevent duplicate handling are deleted automatically within days. Organizer sign-in codes expire within minutes of being issued.
Your rights
You can ask us to:
- tell you what information we hold about you;
- correct it if it is wrong;
- delete it — see below;
- stop sending you messages that are not about a ticket you hold.
Asking us to delete your information
Email hello@dotportalsl.com from the address you registered with, or send us the phone number you registered with, and ask us to delete your information. We will confirm the request and act on it. Where we are required to keep a record — an accounting entry for a payment already made, for example — we will tell you what we have to keep and why, and delete the rest.
If you registered for an event through an organizer, ask them as well: they hold their own copy of the registrations for their event.
Security
Traffic to this site and to our servers is encrypted in transit. Tickets are cryptographically signed so that a ticket cannot be forged or altered, and access to registration data is restricted to the organizer of that event and to staff of Dot Portal Limited who need it to operate or support the service.
Children
The service is intended for adults. We do not knowingly collect information from children. If a child has registered, contact us and we will delete their information.
Changes to this policy
If we change this policy we will update the date at the top of this page. Where a change is significant we will say so on the site.
Contact
Questions about this policy, or about anything we hold on you — including a request to delete it — go to hello@dotportalsl.com. Dot Portal Limited is the controller; its registered address is in the footer of every page.