Privacy Policy

Who we are

UrID Technologies Ltd. (“we,” “our,” “us”) developed and operates the PalmEvents ticketing application. We are committed to protecting your privacy and handling your personal data responsibly, in compliance with Rwanda’s Law No. 058/2021 on the Protection of Personal Data and Privacy.

Information We Collect

We collect the following categories of information from you when you use our app:

• Personal Information: Full name, email address, phone number, national ID number, and payment details.
• Transaction Data: Records of tickets purchased, events attended, and payment confirmations.
• Fraud Prevention Data: Information required to verify the authenticity of transactions and prevent misuse.

We do not collect biometric data, geolocation data, browsing history, or health information.

How We Use Your Information

We use your data for the following purposes:

• To process ticket purchases and facilitate event entry.
• To process payments securely through our payment partner (Flutterwave).
• To detect and prevent fraud or unauthorized transactions.
• To improve service quality and ensure operational analytics.
• To comply with legal and regulatory requirements.

We do not sell your personal data to third parties.

Sharing of Information

We may share your personal data only with:

• Service Providers: Such as payment processors (Flutterwave).
• Authorities: Where required by law, regulation, or legal process.

We do not transfer your personal data outside Rwanda.

Data Storage and Retention

Your data is securely stored on servers located in Rwanda.

We retain your personal data only as long as necessary to fulfill the purposes described in this policy:

• Account information: Retained for as long as you maintain an active account.
• Transaction data: Retained for 5 years, as required for financial and audit purposes.
• Payment details: Stored only as long as necessary to complete the transaction and meet legal obligations.

After the retention period, data will be securely deleted or anonymised.

Your Rights

Under Rwanda’s Data Protection and Privacy Law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict processing of your data in certain circumstances.
• Request portability of your data to another service provider.

To exercise these rights, please contact us at: support@sportspass.rw

Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Staff training on data protection responsibilities.
• Encryption of sensitive data during transmission and storage.
• Role-based access controls to restrict data access.
• Secure authentication and authorization mechanisms.
• Regular monitoring, audits, and security testing.

Children and Minors

PalmEvents is available to users under the age of 18. To protect minors:

• We require date of birth during account creation.
• For users under 16, parental or guardian consent may be required for registration.
• We encourage parents/guardians to supervise minors’ use of the app.

If we discover we have collected data from a minor without appropriate consent, we will take steps to delete it.

Cookies and Tracking

The PalmEvents app does not use cookies, advertising SDKs, or third-party tracking tools.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email and/or in-app notification before the changes take effect.