Who handles your information
NexaTickets by Nexakodehub provides event booking, payments, ticket delivery and gate scanning. This notice covers information handled through our platform. Event organizers and schools also handle attendee information for their own events and parent verification. Their separate uses of that information are their responsibility; contact the organizer for event-specific questions.
Information we collect
- Bookings: attendee names, email address, phone number, ticket selection, order reference, price, payment status and, for a couple booking, the second parent's name.
- School parent verification: the child's admission number and guardian contact details supplied by the school or organizer. We check the admission number and registered guardian phone to establish discount eligibility and prevent repeat redemptions.
- Organizer accounts: account and organization details, password hashes, team roles, event content, payment configuration and payout destination details.
- Payments and entry: payment provider references and confirmation details, receipts, ticket codes, scan results, scan times and the staff account performing a scan. We do not ask for or store your M-Pesa PIN.
- Service operation: session information, technical logs, security and audit activity, delivery results and event visit counts with referral sources.
Why we use it
We use these details to process your booking, confirm payment, send tickets and receipts, recover a booking, verify parent eligibility, validate entry, manage refunds or payouts and respond to support requests. We also use operational records to prevent fraud, secure accounts, resolve disputes and understand event performance.
Processing necessary to provide a booking or account is connected to that service. Security and operational processing supports legitimate service interests, subject to your rights; some financial records may be needed to meet legal obligations. Where a separate activity requires consent, that consent must be requested separately.
Who can access or receive it
Authorized platform administrators, the relevant organizer and assigned team members can access information appropriate to their role. Gate staff use ticket details to validate entry. Hosting, email delivery, TalkSasa SMS and M-Pesa providers process the details needed to supply their services. Payout processing may also involve a bank or mobile money provider.
Event organizers can export attendee records. They must protect those exports and use them only for appropriate event purposes. A WhatsApp support link opens WhatsApp, where information you send is also subject to that provider's privacy terms.
Children and school events
A parent or guardian should provide a child's details where needed for a school booking. Admission numbers are used for verification rather than displayed in the public event listing. Schools and organizers should share only the minimum register details needed and ensure they have an appropriate basis to provide them.
Security, storage and retention
Controls include role-based access, hashed account passwords, encrypted school register fields and payment credentials, signed ticket links and security rate limits. Keep ticket links and QR codes private: anyone with a valid ticket may attempt to present it at the gate.
Operational, booking and financial records remain stored until removed under an applicable retention decision; the platform does not automatically erase all records after an event. Retention should reflect the service purpose, accounting requirements, support needs and dispute obligations. A deletion request is reviewed against those needs.
Hosting and communication providers may process information in their service locations. Contact us for details about a particular provider or any applicable cross-border safeguards. See the cookie policy for browser storage used by the gate scanner.
Your choices and requests
You can ask how your information is used, request access or correction, object to processing and request deletion where applicable. A parent or authorized guardian may make a request for a child. We may need to verify your identity and explain any legal or service reason that prevents a request being fully completed.
Contact us through info@kodehubke.com. Include your order reference if relevant, but never send your password, M-Pesa PIN or payment credentials. You may also raise a concern with Kenya's Office of the Data Protection Commissioner.
Updates to this notice
We update this page when the service or its data practices change. The date above identifies the current version.