Event buyer privacy
The information needed to handle your order, with a clear route to your privacy rights.
Effective 29 October 2026 · Version 2026-10-29
Information used for checkout
When live payment is available, checkout sends your name, email, mobile number, event, ticket quantities, amount and payment method to the protected order service. It records the order reference, payment status, provider receipt and the version and time of your acceptance of the event terms. A saved payment plan also records your customer account, selected tickets, instalment references, verified amounts, remaining balance and plan deadlines. We do not ask for or store an M-PESA PIN, card number, card security code or wallet recovery phrase.
Purpose and access
Order information is used to process and reconcile payment, assist with delivery and entry arrangements, respond to queries, handle disputes and meet applicable record-keeping obligations. Authorised UMBRELLA administrators can view orders, payment plans and instalment records and export attendee lists. Event organisers and service providers should receive only what is necessary for those tasks. Buying a ticket does not subscribe you to marketing.
Services and international processing
The website uses Cloudflare-based hosting and Supabase for protected event and order records; the dedicated database is hosted in Ireland. Paystack, KCB and the relevant mobile-money or card provider process payment data under their own notices. Ella’s optional voice and chat features use Google’s AI services. These providers can process information outside Kenya. Contact UMBRELLA for information about the applicable transfer arrangements and safeguards before sharing sensitive information. Do not put payment secrets or confidential documents into chat.
Browser storage and retention
Your current checkout uses a private status token and non-contact order summary in this browser tab so it can recover after reload. Buyer name, email and phone are not saved in that browser payment record. Keep the tab private and do not share its token. Server records are retained only for the purposes above and relevant legal obligations; contact the team for the retention period applicable to your record.
Your choices and rights
You can ask to access or correct your data, object to relevant processing or request deletion where applicable. Some transaction records may need to remain for legal or dispute reasons. Contact info@umbrella.co.ke and describe your request; the team may need proportionate identity verification. Do not send identity documents in an initial public chat. You can also contact Kenya’s Office of the Data Protection Commissioner. Separate promotional photography consent is not a condition of purchasing a ticket.
Need a hand? Contact UMBRELLA