Privacy Policy
Last updated: January 2026
Contents
Introduction
TKTZ is committed to protecting your privacy. We collect only what we need to run the marketplace: your identity for verification, your transaction history, and anonymous usage data to improve the platform.
We don't sell your data. We don't use advertising cookies. We don't track you across other websites.
By using TKTZ, you agree to this Privacy Policy.
Data Collection
Information You Provide
When you register for a TKTZ account, we collect your name, email address, phone number, and password. Sellers must provide government-issued identification and banking information.
Payment Information
We collect payment method information (credit card number, billing address) to process purchases. Payment data is encrypted and handled by third-party payment processors (Stripe, PayPal).
Device & Usage Data
We automatically collect information about your device (IP address, browser type, operating system) and how you interact with our Platform (pages visited, time spent, click patterns).
KYC & Verification Data
For sellers and BNPL users, we may request identity verification documents, which are processed by third-party KYC providers (Onfido, Jumio). These providers follow strict security protocols.
Data Usage
We use personal data for:
- Operating and improving the Platform
- Processing transactions and sending confirmations
- Personalizing your experience and recommending flights
- Fraud prevention and security
- Customer support and resolving disputes
- Sending marketing communications (with your consent)
- Complying with legal obligations and regulatory requirements
- Conducting analytics and measuring service performance
- Verifying identity and conducting KYC/AML checks
Data Sharing
We may share your data with:
- Service Providers: Payment processors (Stripe), KYC providers, email services, analytics tools
- Other Users: Limited seller information is shown to buyers (first name, city, seller rating)
- Legal Authorities: When required by law, court order, or regulatory request
- Business Partners: Airlines, GDS providers, financial institutions (when necessary)
- Fraud Prevention: We share data with fraud detection services to protect all users
We never sell or rent personal data to third parties for marketing purposes without explicit consent.
Security
We implement industry-standard security measures to protect your personal data, including encryption, firewalls, and regular security audits.
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your password. We will never ask for your password via email or support channels.
If you believe your account has been compromised, contact us immediately at security@tktz.io.
Cookies & Tracking Technologies
TKTZ uses cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device.
Types of Cookies:
- Essential: Required for basic Platform functionality
- Performance: Collect usage analytics to improve the Platform
You can disable cookies in your browser settings, though some Platform features may not work properly. You can manage cookie preferences anytime in your Account Settings.
Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Correct: Update or correct inaccurate information
- Delete: Request deletion of your data (right to be forgotten)
- Restrict Processing: Limit how we use your data
- Opt-Out: Unsubscribe from marketing communications
- Data Portability: Receive your data in a portable format
To exercise any of these rights, contact us at privacy@tktz.io with your request. We will respond within 30 days.
GDPR Compliance
For users located in the European Union, TKTZ processes personal data in accordance with the General Data Protection Regulation (GDPR).
We only process personal data with a lawful basis: your explicit consent, contract performance, legal obligation, or legitimate interests.
You have the right to file a complaint with your local Data Protection Authority if you believe we have violated your privacy rights.
Our Data Protection Officer can be reached at dpo@tktz.io for GDPR-related inquiries.
Children
TKTZ is not intended for children under 18 years of age. We do not knowingly collect personal data from minors.
If we become aware that we have collected data from a child, we will delete such data immediately and notify the child's parent or guardian.
Parents or guardians who believe their child has provided information to TKTZ should contact us immediately at privacy@tktz.io.
Changes to This Privacy Policy
We may update this Privacy Policy at any time. Changes are effective upon posting to the Platform, and we will notify you of material changes via email.
Your continued use of TKTZ after changes are posted constitutes your acceptance of the updated Privacy Policy.
Contact
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Email: privacy@tktz.io
Data Protection Officer: dpo@tktz.io